novaalphastrikeomegaz663
2820823b36
Add an optional API-key layer to the public read-only API. Keys grant higher per-minute rate limits and attribute usage; anonymous callers are still allowed at a lower IP-based budget. - migration 0008_api_key: api_key table (sha256 hash only, plaintext shown once) - apikey pkg: key generation + hashing - ratelimit pkg: Redis fixed-window limiter + per-key usage counters; fails open - public API middleware: X-API-Key / Bearer auth, X-RateLimit-* headers, 429+Retry-After - admin: issue/list/revoke keys + usage view (API + UI tab) Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
22 lines
637 B
Modula-2
22 lines
637 B
Modula-2
module github.com/baicai2026-baicai/goods/api
|
|
|
|
go 1.23.4
|
|
|
|
require (
|
|
github.com/go-chi/chi/v5 v5.1.0
|
|
github.com/jackc/pgx/v5 v5.7.2
|
|
github.com/redis/go-redis/v9 v9.18.0
|
|
golang.org/x/crypto v0.31.0
|
|
)
|
|
|
|
require (
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
|
|
github.com/jackc/pgpassfile v1.0.0 // indirect
|
|
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
|
|
github.com/jackc/puddle/v2 v2.2.2 // indirect
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
golang.org/x/sync v0.10.0 // indirect
|
|
golang.org/x/text v0.21.0 // indirect
|
|
)
|