DevOps Engineer 7f5573f076 feat(security): add IP-based rate limiting on /api/v1/auth/login — fix brute force HRT-62 ...

- saas_auth.py: in-memory sliding-window rate limiter (5 attempts/5min, 15min block)
  using collections.defaultdict + threading.Lock, stdlib only, no new deps
- portal_server.py: register rate_limit_middleware + access_log_middleware
  (was missing, leaving global 100req/min limit unApplied on portal routes)
- tests/security/test_security.py: add TestLoginRateLimit class with
  test_login_brute_force_blocked_after_5_attempts and test_login_429_has_retry_after_header

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-27 14:50:08 +02:00

..

e2e

Initial commit: existing turf_saas codebase

2026-04-25 17:18:43 +02:00

load

Initial commit: existing turf_saas codebase

2026-04-25 17:18:43 +02:00

security

feat(security): add IP-based rate limiting on /api/v1/auth/login — fix brute force HRT-62

2026-04-27 14:50:08 +02:00

__init__.py

feat(ml): train ensemble model and generate benchmark report

2026-04-25 19:10:41 +02:00

beta_monitor.py

feat(ml): train ensemble model and generate benchmark report

2026-04-25 19:10:41 +02:00

conftest.py

feat(ml): train ensemble model and generate benchmark report

2026-04-25 19:10:41 +02:00

run_qa.sh

Initial commit: existing turf_saas codebase

2026-04-25 17:18:43 +02:00

test_api_v1.py

feat: Sprint 3-4 — Refacto API /v1/ (HRT-29)

2026-04-25 18:00:54 +02:00

test_auth.py

feat: Sprint 2-3 — Auth JWT + Multi-tenant (HRT-28)

2026-04-25 17:35:45 +02:00

test_ml_cache_integrity.py

HRT-43 — Test intégration ml_predictions_cache : zéro NULL hippodrome

2026-04-27 14:26:46 +02:00

test_ml_ensemble.py

feat(ml): add ensemble XGBoost+LightGBM+MLP with Optuna optimization

2026-04-25 18:18:48 +02:00

test_smoke.py

feat(ml): train ensemble model and generate benchmark report

2026-04-25 19:10:41 +02:00