whit3rabbitandClaude Sonnet 4.6 f3f5179a64 security: add rate limiting to admin API endpoints (10 RPM per IP) ...

Defense-in-depth against token brute-force on the admin API. Uses a
DashMap-based sliding window (60s) per client IP, applied as the
outermost middleware layer on protected admin routes. Admin server now
uses into_make_service_with_connect_info to expose client IP. Limit
is configurable at runtime via set_admin_rpm for test flexibility.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-27 15:45:37 -05:00

..

fixtures/tls

Add phases 12-20: release infra, transparent proxy, model mapping, mTLS, extended thinking, Gemini research

2026-03-21 20:06:50 -05:00

audio_image.rs

feat: add caching, batch API, cost tracking, budget/RBAC, audio/image passthrough

2026-03-26 20:23:38 -05:00

batch_api.rs

feat: add LiteLLM config.yaml compatibility and model-level routing

2026-03-27 05:39:51 -05:00

body_logging.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

chat_completions.rs

feat: add Bedrock backend, OpenTelemetry export, integration tests

2026-03-25 20:21:24 -05:00

compatibility.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

embeddings.rs

feat: add Bedrock backend, OpenTelemetry export, integration tests

2026-03-25 20:21:24 -05:00

error_fixtures.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

fallback.rs

feat: add caching, batch API, cost tracking, budget/RBAC, audio/image passthrough

2026-03-26 20:23:38 -05:00

health.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

live_api.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

live_azure.rs

feat: LiteLLM gap fill - chat completions input, Azure backend, virtual keys, client SDK

2026-03-25 20:09:40 -05:00

live_bedrock.rs

feat: add Bedrock backend, OpenTelemetry export, integration tests

2026-03-25 20:21:24 -05:00

live_responses.rs

test: add live integration tests for OpenAI Responses API backend

2026-03-27 06:45:54 -05:00

multi_backend.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

shutdown.rs

refactor: extract shared client crate and rename to anyllm_*

2026-03-25 06:11:01 -05:00

virtual_keys.rs

security: add rate limiting to admin API endpoints (10 RPM per IP)

2026-03-27 15:45:37 -05:00