U1: API Key authentication middleware (dev mode skip, health whitelist) U2: Rate limiting middleware (fixed-window, 60 req/min default) U3: Callback URL SSRF protection (private IP blocking) U4: custom_handler module prefix whitelist 65 tests passing. CORS conflict fixed. |
||
|---|---|---|
| .. | ||
| routes | ||
| __init__.py | ||
| app.py | ||
| client.py | ||
| middleware.py | ||