Fix significant audit findings: async I/O, public URL, Bearer case, Dockerfile#98

Merged

cmeans merged 6 commits into

mainfrom

fix/significant-audit-findings

Mar 30, 2026

Commits on Mar 30, 2026

Fix significant audit findings: async I/O, public URL, Bearer case, Dockerfile license

cmeans
and
claude
committed
Fix WellKnownMiddleware test args and add public_url coverage test

cmeans
and
claude
committed
Fix ruff formatting in test_oauth.py

cmeans
and
claude
committed
Add per-owner concurrency limit and bump connection pool to 10

cmeans
and
claude
committed
WellKnownMiddleware: derive resource URL from Host header as fallback

cmeans
and
claude
committed
Cover Host header fallback and 429 concurrency limit paths

cmeans
and
claude
committed