MOHAN 90dfe65fa3 Trust the reverse proxy for real client IP resolution
Without Express's trust-proxy setting, req.ip resolves to the load
balancer's own connecting IP for every request in production, not
the real client IP. That silently broke per-IP rate limiting: every
user behind the same proxy shared one 100-requests-per-60-seconds
throttler bucket instead of getting their own, so any real traffic
volume (the dashboard alone fires ~6 requests per load) could 429
everyone, including on login/registration.
2026-08-26 20:49:45 +05:30
2026-02-24 21:45:18 +00:00
2026-07-22 18:37:28 +05:30
2026-03-14 08:51:16 -04:00
2026-03-18 02:10:30 +00:00
2026-02-24 21:45:18 +00:00
2026-02-24 21:45:18 +00:00
2026-03-14 08:51:16 -04:00
2026-02-24 21:45:18 +00:00
2026-02-24 21:45:18 +00:00
2026-03-14 08:51:16 -04:00
Description
No description provided
1.2 MiB
Languages
TypeScript 85%
JavaScript 14.9%
Dockerfile 0.1%