jozamudi 3e5c7062ab login: per-source-IP failure budget (auth.py) — username rotation no longer dodges the lockout; sliding window, XFF trusted only behind the proxy (ANIWEB_TRUST_XFF); lockout logic now unit-testable (tests/test_auth.py)

2026-09-16 02:31:23 +00:00

..

conftest.py

login: per-source-IP failure budget (auth.py) — username rotation no longer dodges the lockout; sliding window, XFF trusted only behind the proxy (ANIWEB_TRUST_XFF); lockout logic now unit-testable (tests/test_auth.py)

2026-09-16 02:31:23 +00:00

test_api.py

login: per-source-IP failure budget (auth.py) — username rotation no longer dodges the lockout; sliding window, XFF trusted only behind the proxy (ANIWEB_TRUST_XFF); lockout logic now unit-testable (tests/test_auth.py)

2026-09-16 02:31:23 +00:00

test_auth.py

login: per-source-IP failure budget (auth.py) — username rotation no longer dodges the lockout; sliding window, XFF trusted only behind the proxy (ANIWEB_TRUST_XFF); lockout logic now unit-testable (tests/test_auth.py)

2026-09-16 02:31:23 +00:00

test_browser.py

CSRF header check now covers /login (exemption removed); login.html sends X-Aniweb

2026-09-16 02:02:09 +00:00

test_sources.py

Provider layer + hianime source (primary)

2026-09-07 01:38:53 +00:00