src/handlers/mod.rs

mod common;
mod proxy;
mod serve_file;
mod upload;
mod user;
mod universal;

pub use universal::universal_handler;

// Общий лимит квоты на пользователя: 12 ГБ
pub const MAX_USER_QUOTA_BYTES: u64 = 12 * 1024 * 1024 * 1024;
🔒 Implement comprehensive security and DDoS protection ### Security Features: - Rate Limiting: Redis-based IP tracking with configurable limits - General: 100 requests/minute (5min block) - Upload: 10 requests/5min (10min block) - Auth: 20 requests/15min (30min block) - Request Validation: Path length, header count, suspicious patterns - Attack Detection: Admin paths, script injections, bot patterns - Enhanced JWT: Format validation, length checks, character filtering - IP Tracking: X-Forwarded-For and X-Real-IP support ### Security Headers: - X-Content-Type-Options: nosniff - X-Frame-Options: DENY - X-XSS-Protection: 1; mode=block - Content-Security-Policy with strict rules - Strict-Transport-Security with includeSubDomains ### CORS Hardening: - Limited to specific domains: discours.io, new.discours.io - Restricted methods: GET, POST, OPTIONS only - Essential headers only ### Infrastructure: - Security middleware for all requests - Local cache + Redis for performance - Comprehensive logging and monitoring - Progressive blocking for repeat offenders ### Documentation: - Complete security guide (docs/security.md) - Configuration examples - Incident response procedures - Monitoring recommendations Version bump to 0.6.0 for major security enhancement. 2025-09-02 11:40:43 +03:00			`mod common;`
handlers-refactored 2024-10-22 00:36:42 +03:00			`mod proxy;`
			`mod serve_file;`
docs 2025-08-02 00:18:09 +03:00			`mod upload;`
simpler-auth+no-overlay 2025-09-01 20:36:15 +03:00			`mod user;`
🧹 Remove unused legacy modules and functions - Deleted quota.rs module (quota management not needed via HTTP) - Removed legacy get_id_by_token GraphQL function - Removed unused set_user_quota and increase_user_quota methods - Cleaned up unused imports and legacy structs - Simplified handlers/mod.rs to only expose universal_handler Architecture now focused on core functionality: - GET / (user info) - GET /<filename> (file serving) - POST / (file upload) 2025-09-02 11:27:48 +03:00			`mod universal;`
handlers-refactored 2024-10-22 00:36:42 +03:00
🧹 Remove unused legacy modules and functions - Deleted quota.rs module (quota management not needed via HTTP) - Removed legacy get_id_by_token GraphQL function - Removed unused set_user_quota and increase_user_quota methods - Cleaned up unused imports and legacy structs - Simplified handlers/mod.rs to only expose universal_handler Architecture now focused on core functionality: - GET / (user info) - GET /<filename> (file serving) - POST / (file upload) 2025-09-02 11:27:48 +03:00			`pub use universal::universal_handler;`
handlers-refactored 2024-10-22 00:36:42 +03:00
🧹 Remove unused legacy modules and functions - Deleted quota.rs module (quota management not needed via HTTP) - Removed legacy get_id_by_token GraphQL function - Removed unused set_user_quota and increase_user_quota methods - Cleaned up unused imports and legacy structs - Simplified handlers/mod.rs to only expose universal_handler Architecture now focused on core functionality: - GET / (user info) - GET /<filename> (file serving) - POST / (file upload) 2025-09-02 11:27:48 +03:00			`// Общий лимит квоты на пользователя: 12 ГБ`
			`pub const MAX_USER_QUOTA_BYTES: u64 = 12 * 1024 * 1024 * 1024;`