feat(security): harden gateway request and runtime controls

2026-10-12 04:09:48 +08:00 · 2026-07-12 14:10:54 +08:00
parent bc1da3bf3f
commit 7f61bb43c7
19 changed files with 975 additions and 340 deletions
@@ -464,7 +464,7 @@ async fn complete_oauth_login(
        .cloned()
        .collect::<Vec<_>>();
    let body = login_response.into_body();
-    let body = match to_bytes(body, usize::MAX).await {
+    let body = match to_bytes(body, crate::headers::max_internal_buffered_body_bytes()).await {
        Ok(value) => value,
        Err(_) => return redirect_oauth_error(Some(frontend_callback_url), "provider_unavailable"),
    };