Vladimir Zagainov d418ae2b54 fix: add panic recovery, rate limiting, timing-safe CI token ...

- Add Recovery middleware (catches panics, returns 500, logs stack trace)
- Add RateLimiter to middleware chain (30 req/min, burst 60 per IP)
- Fix CI token comparison with subtle.ConstantTimeCompare (timing attack)
- Middleware chain: Recovery → Logging → RateLimit → CORS → mux

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-05-29 21:08:01 +03:00

15 KiB

Raw Blame History

View Raw