chore(backend): Cache invalid opaque OAuth tokens locally#8519

Closed

wobsoriano wants to merge 17 commits into

mainfrom

rob/aisec-24-unauthenticated-attacker-prevents-customer-backend-from

Commits on May 11, 2026

feat(backend): add CfConnectingIp, ForwardedFor, and RealIp header constants
wobsoriano
committed
feat(backend): add MachineTokenRateLimit to AuthErrorReason
wobsoriano
committed
feat(backend): add per-IP token-bucket rate limiter for machine auth
wobsoriano
committed
test(backend): add failing integration tests for machine token rate limiting
wobsoriano
committed
feat(backend): gate verifyMachineAuthToken behind per-IP token-bucket rate limiter
wobsoriano
committed
fix(backend): exempt JWT-format OAuth and M2M tokens from IP rate limiter
wobsoriano
committed
chore: add integration tests
wobsoriano
committed
Merge branch 'main' into rob/aisec-24-unauthenticated-attacker-prevents-customer-backend-from
wobsoriano
authored
chore: revert e2e
wobsoriano
committed
chore: address coderabbit comments
wobsoriano
committed
chore: limit solution to oauth opaque tokens
wobsoriano
committed