Commit graph

5 commits

Author SHA1 Message Date
senke
12dbb5bbe4 chore(release): v0.921 — Rustproof (Rust test coverage >30%)
Some checks failed
Stream Server CI / test (push) Failing after 0s
2026-03-02 12:28:20 +01:00
senke
e273827879 fix(stream): replace critical .unwrap() with safe alternatives
- middleware/logging.rs: UUID header parse .unwrap() -> unwrap_or_else
- routes/api.rs: serde_json::to_value().unwrap() -> proper error return
- routes/api.rs: event_bus.as_ref().unwrap() -> map_or(false, ...) guard
- structured_logging.rs: file_path.parent().unwrap() -> unwrap_or_else(".")
- cache/audio_cache.rs: NonZeroUsize::new().unwrap() -> fallback to 1024

Focuses on highest-risk locations: request handlers and middleware.

Addresses audit finding D9: .unwrap() in production code.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 23:22:03 +01:00
senke
57fdcda75e feat(stream): implement real rate limiting middleware using governor
Replace the stub check_rate_limit() that always returned true with a
real implementation backed by the governor crate (already in Cargo.toml).

- Per-IP keyed rate limiter with DashMap store
- Default quota: 120 requests/minute per IP
- Sliding window enforcement via governor's GCRA algorithm
- Returns 429 Too Many Requests when limit exceeded

Addresses audit findings D7, A04: missing rate limiting on stream-server.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 23:19:27 +01:00
senke
9cd76a512f [LOGGING] Fix #10: Erreurs silencieuses - Ajout de logs avec contexte pour toutes les erreurs dans core/auth et core/track 2026-01-04 01:44:15 +01:00
okinrev
a01d7a25ac adding initial stream server (Rust) 2025-12-03 20:36:56 +01:00