fix(auth): gate registration rate limit to production only

Claude-Run commented

2026-06-24 22:26:43 +02:00

Member

The per-IP registration cap (3/hour) is an anti-abuse control for the public production deployment. bunyip's e2e suite runs against a deployed staging instance and self-provisions disposable accounts via registerDisposable() from the single CI runner egress IP; registrations accumulate across serial runs inside the one-hour window and trip a spurious 429 RATE_LIMITED, failing the change-email, magic-link, and password-reset specs.

There is no test-side workaround: each disposable account needs a fresh unique email, so the accounts cannot be pre-seeded or reused the way the shared login account is. Apply the cap only when config.is_production(); staging/dev register unthrottled. Production keeps the existing 3/hour/IP limit unchanged.

#BUNYIP-197

The per-IP registration cap (3/hour) is an anti-abuse control for the public production deployment. bunyip's e2e suite runs against a deployed staging instance and self-provisions disposable accounts via registerDisposable() from the single CI runner egress IP; registrations accumulate across serial runs inside the one-hour window and trip a spurious 429 RATE_LIMITED, failing the change-email, magic-link, and password-reset specs. There is no test-side workaround: each disposable account needs a fresh unique email, so the accounts cannot be pre-seeded or reused the way the shared login account is. Apply the cap only when config.is_production(); staging/dev register unthrottled. Production keeps the existing 3/hour/IP limit unchanged. #BUNYIP-197

Claude-Run added 1 commit

2026-06-24 22:26:44 +02:00

fix(auth): gate registration rate limit to production only

E2E / Playwright against deployment (pull_request) Failing after 19s

Details

Check / fmt + clippy + build + tests (pull_request) Successful in 2m19s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

6158416a4c

The per-IP registration cap (3/hour) is an anti-abuse control for the public production deployment. bunyip's e2e suite runs against a deployed staging instance and self-provisions disposable accounts via registerDisposable() from the single CI runner egress IP; registrations accumulate across serial runs inside the one-hour window and trip a spurious 429 RATE_LIMITED, failing the change-email, magic-link, and password-reset specs.

There is no test-side workaround: each disposable account needs a fresh unique email, so the accounts cannot be pre-seeded or reused the way the shared login account is. Apply the cap only when config.is_production(); staging/dev register unthrottled. Production keeps the existing 3/hour/IP limit unchanged.

#BUNYIP-197