1246d5e792
Some checks failed
ci/woodpecker/push/integration Pipeline failed
ci/woodpecker/push/main Pipeline failed
CI/CD Pipeline / Docker Build & Push (push) Has been cancelled
CI/CD Pipeline / Linting (push) Has been cancelled
CI/CD Pipeline / Go Tests (push) Has been cancelled
CI/CD Pipeline / Python Tests (push) Has been cancelled
CI/CD Pipeline / Website Tests (push) Has been cancelled
CI/CD Pipeline / Security Scan (push) Has been cancelled
CI/CD Pipeline / Integration Tests (push) Has been cancelled
CI/CD Pipeline / Deploy to Staging (push) Has been cancelled
CI/CD Pipeline / Deploy to Production (push) Has been cancelled
CI/CD Pipeline / CI Summary (push) Has been cancelled
Security Scanning / Python Security Scan (push) Has been cancelled
Security Scanning / Node.js Security Scan (push) Has been cancelled
Security Scanning / Secret Scanning (push) Has been cancelled
Security Scanning / Dependency Vulnerability Scan (push) Has been cancelled
Security Scanning / Go Security Scan (push) Has been cancelled
Security Scanning / Docker Image Security (push) Has been cancelled
Security Scanning / Security Summary (push) Has been cancelled
Tests / Go Tests (push) Has been cancelled
Tests / Python Tests (push) Has been cancelled
Tests / Integration Tests (push) Has been cancelled
Tests / Go Lint (push) Has been cancelled
Tests / Python Lint (push) Has been cancelled
Tests / Security Scan (push) Has been cancelled
Tests / All Checks Passed (push) Has been cancelled
Implements anomaly-score-based middleware to protect SDK/Compliance endpoints from systematic data harvesting. Includes 5 detection mechanisms (diversity, burst, sequential enumeration, unusual hours, multi-tenant), multi-window quota system, progressive throttling, HMAC watermarking, and graceful Valkey fallback. - backend/middleware/sdk_protection.py: Core middleware (~750 lines) - Admin API endpoints for score management and tier configuration - 14 new tests (all passing) - MkDocs documentation with clear explanations - Screen flow and middleware dashboard updates Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
31 lines
1.0 KiB
Python
31 lines
1.0 KiB
Python
"""
|
|
BreakPilot Middleware Stack
|
|
|
|
This module provides middleware components for the FastAPI backend:
|
|
- Request-ID: Adds unique request identifiers for tracing
|
|
- Security Headers: Adds security headers to all responses
|
|
- Rate Limiter: Protects against abuse (Valkey-based)
|
|
- PII Redactor: Redacts sensitive data from logs
|
|
- Input Gate: Validates request body size and content types
|
|
- SDK Protection: Protects SDK endpoints from systematic enumeration
|
|
"""
|
|
|
|
from .request_id import RequestIDMiddleware, get_request_id
|
|
from .security_headers import SecurityHeadersMiddleware
|
|
from .rate_limiter import RateLimiterMiddleware
|
|
from .pii_redactor import PIIRedactor, redact_pii
|
|
from .input_gate import InputGateMiddleware
|
|
from .sdk_protection import SDKProtectionMiddleware, SDKProtectionConfig
|
|
|
|
__all__ = [
|
|
"RequestIDMiddleware",
|
|
"get_request_id",
|
|
"SecurityHeadersMiddleware",
|
|
"RateLimiterMiddleware",
|
|
"PIIRedactor",
|
|
"redact_pii",
|
|
"InputGateMiddleware",
|
|
"SDKProtectionMiddleware",
|
|
"SDKProtectionConfig",
|
|
]
|