Security: - Add slowapi dependency for rate limiting - Create rate_limit.py module with configurable limits - Apply 5 requests/minute limit to login endpoint - Make rate limit configurable via ORCHARD_LOGIN_RATE_LIMIT env var Testing: - Set high rate limit (1000/min) in docker-compose.local.yml for tests - All 265 tests pass
21 lines
372 B
Plaintext
21 lines
372 B
Plaintext
fastapi==0.109.0
|
|
uvicorn[standard]==0.27.0
|
|
sqlalchemy==2.0.25
|
|
psycopg2-binary==2.9.9
|
|
alembic==1.13.1
|
|
boto3==1.34.25
|
|
python-multipart==0.0.6
|
|
pydantic==2.5.3
|
|
pydantic-settings==2.1.0
|
|
python-jose[cryptography]==3.3.0
|
|
passlib[bcrypt]==1.7.4
|
|
bcrypt==4.0.1
|
|
slowapi==0.1.9
|
|
|
|
# Test dependencies
|
|
pytest>=7.4.0
|
|
pytest-asyncio>=0.21.0
|
|
pytest-cov>=4.1.0
|
|
httpx>=0.25.0
|
|
moto[s3]>=4.2.0
|