Function loginRateLimitOk

telemetry-dashboard/src/index.ts:144–158

Best-effort brute-force cap on the shared password, keyed by client IP.

(env: Env, request: Request)

/** Best-effort brute-force cap on the shared password, keyed by client IP. */
async function loginRateLimitOk(env: Env, request: Request): Promise<boolean> {
  // Note for auditors: unlike the ingest worker — which never reads the client
  // IP — this admin login does, purely as a rate-limit key. It is not stored,
  // logged or forwarded anywhere.
  const key = request.headers.get('cf-connecting-ip') ?? 'unknown';
  try {
    const { success } = await env.LOGIN_RATE_LIMITER.limit({ key });
    return success;
  } catch (err) {
    // Fail open: a rate-limiter outage must not lock the maintainer out, and
    // the password is still required either way.
    console.error(JSON.stringify({ msg: 'login rate limiter unavailable', err: String(err) }));
    return true;
  }
}

async function handleLoginPage(env: Env, request: Request, url: URL): Promise<Response> {
  const next = safeNextPath(url.searchParams.get('next'));