egutierrez e7bdcc978c test(membership): regression for H1 pre-auth DoS body limit ...

Ports the auditor's TestAudit_DoSBodyLimitNoAuth: an unsigned oversized POST
to /blobs is now rejected 413 without the resident set spiking (measured via
/proc/self/status, delta bounded to <96 MiB vs the attack's 400 MB+). Covers
both a truthful over-ceiling Content-Length (rejected pre-read) and a chunked
unknown-length sender (MaxBytesReader caps the read). Plus golden (normal blob
stored), boundary (exactly at the ceiling accepted), the 1 MiB control-plane
ceiling, and the per-IP rate limit (flood -> 429, distinct IPs not throttled).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 14:16:04 +02:00

..

migrations

feat(membership): add 002_users.sql migration and user CRUD store

2026-06-07 12:23:11 +02:00

auth_test.go

test: control-plane auth middleware + end-to-end enforce

2026-06-07 12:31:58 +02:00

auth.go

feat(membership): signed control-plane auth middleware + anti-replay

2026-06-07 12:31:50 +02:00

dos_test.go

test(membership): regression for H1 pre-auth DoS body limit

2026-06-07 14:16:04 +02:00

ratelimit.go

feat(membership): bound request bodies and add per-IP rate limit

2026-06-07 14:16:04 +02:00

server.go

feat(membership): bound request bodies and add per-IP rate limit

2026-06-07 14:16:04 +02:00

store_test.go

feat(membership): room discovery — GET /members/{endpoint}/rooms + ListMyRooms

2026-06-07 03:07:34 +02:00

store.go

feat(membership): room discovery — GET /members/{endpoint}/rooms + ListMyRooms

2026-06-07 03:07:34 +02:00

ulid.go

feat: initial scaffold of unibus message bus (membership service + client lib + demo peers)

2026-06-03 19:47:32 +02:00

users_test.go

test(membership): cover user store golden/edge/error paths

2026-06-07 12:23:23 +02:00

users.go

feat(membership): add 002_users.sql migration and user CRUD store

2026-06-07 12:23:11 +02:00