dayuan.jiang 74ca64f5e8 feat(api): count the quota by the CDN's client IP and refuse direct calls ...

Two optional settings for deployments behind a CDN such as Cloudflare.

CLIENT_IP_HEADER names the header that holds the visitor's real IP
(cf-connecting-ip on Cloudflare). The per-IP daily quota used the first
X-Forwarded-For entry, which visitors can set to anything, so a made-up
IP on every request got a fresh quota.

ORIGIN_SECRET makes proxy.ts refuse /api requests whose X-Origin-Secret
header does not match. The CDN adds the header, so a call that skips the
CDN, and could fake the IP header, gets 403. Pages are not checked, which
keeps health checks on / working.

Both are unset by default, and nothing changes then.

2026-10-06 10:12:15 +09:00

..

e2e

feat(chat): show a quota hint when the server's key is refused (#953)

2026-10-06 09:49:48 +09:00

unit

feat(api): count the quota by the CDN's client IP and refuse direct calls

2026-10-06 10:12:15 +09:00