Fix/backend hardening#879

Merged

hman38705 merged 10 commits into

mainfrom

fix/backend-hardening

Jun 17, 2026

Commits on Jun 17, 2026

fix(security): reject future-dated webhook timestamps to close replay window

hman38705
and
claude
committed
test(security): add unit tests for webhook timestamp boundary conditions

hman38705
and
claude
committed
fix(api): add cooling-off delay and attempt reset to dead-letter requeue

hman38705
and
claude
committed
fix(api): expand DbError with PoolExhausted and ConstraintViolation variants

hman38705
and
claude
committed
test(api): add unit tests for expanded DbError variants

hman38705
and
claude
committed
feat(metrics): add rate_limit_rejections_total Prometheus counter

hman38705
and
claude
committed
fix(audit): replace dynamic SQL string building with sqlx::QueryBuilder

hman38705
and
claude
committed
test(audit): add unit tests for AuditStatus display and create_audit_entry

hman38705
and
claude
committed
test(api): verify RateLimitState metrics field is optional

hman38705
and
claude
committed
test(api): assert dead-letter requeue cooling-off delay is positive

hman38705
and
claude
committed