jwinterm 00b013978f anti-abuse: cap concurrent sockets per IP ...

The rate limiter caps new connections (10/min/IP) and game starts (15/min/IP),
but one IP could still hold open unbounded sockets by trickling them in under
the connection rate and keeping them alive — hoarding spectator slots and
server resources ahead of a public launch.

Track live sockets per IP in ConnectionHandler and reject new ones past a cap
(MAX_SOCKETS_PER_IP, default 10). Slots are freed on disconnect and reconciled
against live sockets in the periodic cleanup so a missed disconnect can't
wrongly lock out an IP.

2026-06-01 09:01:44 -04:00

..

config

fix: derive currency decimals from CRYPTO_TYPE (XMR=12, not WOW's 11)

2026-05-31 15:45:01 -04:00

db

fix: credits BIGINT, idempotent migration 010, atomic migration runner

2026-05-31 10:07:15 -04:00

debug

Begin payment logic and tests

2025-09-27 08:45:22 -04:00

game

payouts: defer when Monero outputs are locked instead of failing

2026-06-01 08:17:05 -04:00

middleware

add error handling and more tests

2025-09-29 11:20:11 -04:00

migrations

feat: free-play choice + per-game dual leaderboard (backend)

2026-05-31 15:01:01 -04:00

money

refactor: exact BigInt money math via src/money/atomic.js

2026-05-31 09:45:58 -04:00

network

anti-abuse: cap concurrent sockets per IP

2026-06-01 09:01:44 -04:00

payments

fix: retry payout stat-counting and atomic tx_hash write

2026-05-31 10:00:51 -04:00

routes

refactor: extract smirk auth routes from index.js

2026-05-31 14:23:23 -04:00

rpc

remove hardcoded junkola p2

2026-01-28 17:33:51 -05:00

scripts

remove hardcoded junkola p2

2026-01-28 17:33:51 -05:00

services

fix admin balance display

2026-02-18 19:20:00 -05:00

utils

add error handling and more tests

2025-09-29 11:20:11 -04:00

views

feat: network-aware currency label (sXMR), game name, and Smirk gating

2026-05-31 15:57:59 -04:00

.env.example

docs: document FREE_PLAY_ENABLED + free-to-play/no-payout deployment pattern

2026-05-31 15:09:50 -04:00

index.js

feat: network-aware currency label (sXMR), game name, and Smirk gating

2026-05-31 15:57:59 -04:00

jest.config.js

Begin payment logic and tests

2025-09-27 08:45:22 -04:00

package-lock.json

security: remove deprecated request package, fix npm audit vulnerabilities

2025-12-24 11:38:54 -05:00

package.json

chore: set package.json license to MIT (match the LICENSE file)

2026-05-31 16:02:09 -04:00