Marc-André Bombeck 1920a763be fix(api): rate-limit and validate the web-vitals beacon ...

The public POST surface lacked an origin gate, a rate-limit, and a
schema — a peer could flood the wide-event log with arbitrary text
under the `name` slot. Tighten the route:

- Same-origin Referer check when `NEXT_PUBLIC_APP_URL` is set.
- Per-IP `checkRateLimit` (60/min) matching the deploy-webhook shape.
- Zod schema locks `name` to the six documented web-vitals
  identifiers; `id` capped at 50 chars; `value`/`delta` must be
  finite. Only validated fields enter the log envelope — the raw
  payload is never observed by the wide-event pipeline.

204 No Content on a successful enqueue keeps the `sendBeacon`
contract intact; 400 on schema reject; 429 on rate-limit overflow.

2026-05-16 02:35:36 +02:00

..

__tests__

chore(dashboard): retire the GLP-1 tile

2026-05-16 01:00:09 +02:00

app

fix(api): rate-limit and validate the web-vitals beacon

2026-05-16 02:35:36 +02:00

components

fix(insights): drop the residual border on the mood trend tile

2026-05-16 02:35:00 +02:00

hooks

refactor(insights): consolidate sub-page data-fetch and empty state

2026-05-16 01:58:16 +02:00

lib

fix(api): aggregate measurements before applying the take limit

2026-05-16 02:32:36 +02:00

types

refactor(insights): consolidate sub-page data-fetch and empty state

2026-05-16 01:58:16 +02:00

instrumentation.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

proxy.ts

feat(geo): bundle GeoLite2-City and add an offline-first lookup path

2026-05-15 16:36:55 +02:00