Files
worldmonitor/server
Elie Habib 3d2a4e4df4 fix(rate-limit): prioritize cf-connecting-ip over x-real-ip for correct per-user rate limiting (#1241)
With Cloudflare proxy in front of Vercel, x-real-ip contains the CF edge
server IP (shared across all users behind the same edge), not the real
client IP. This caused all users to share a single rate-limit bucket,
triggering 429 storms on classify-event.

Also adds exponential backoff (60s→120s→240s→5min cap) and queue trimming
on repeated 429s to prevent client-side hammering.
2026-03-08 02:08:06 +04:00
..