fix: stop chainlit's Socket.IO transport from tripping the rate limiter - #654

Merged

Ahmath-Gadji merged 7 commits into

fix/chainlit-rate-limit

Jul 17, 2026

Commits on Jul 17, 2026

fix(rate-limit): exempt the auth-bypassed chainlit subtree
Ahmath-Gadji
committed
e53c7c8
fix(nginx): forward WebSocket upgrades to the API
Ahmath-Gadji
committed
1989bb9
fix(entrypoint): honour UVICORN_FORWARDED_ALLOW_IPS on the uvicorn CLI path
Ahmath-Gadji
committed
ccec14d
fix(rate-limit): scope the chainlit exemption to /chainlit/
Ahmath-Gadji
committed
e193bc4
docs(rate-limit): document proxy X-Forwarded-For trust and the exemption boundary
Ahmath-Gadji
committed
c35eeb0
fix(rate-limit): never let RATE_LIMIT_EXEMPT_PATHS cover /auth/
Ahmath-Gadji
committed
b0623be
fix(rate-limit): drop RATE_LIMIT_EXEMPT_PATHS prefixes narrower than /auth/ too
Ahmath-Gadji
committed
7a89c29