jwinterm 00b013978f anti-abuse: cap concurrent sockets per IP ...

The rate limiter caps new connections (10/min/IP) and game starts (15/min/IP),
but one IP could still hold open unbounded sockets by trickling them in under
the connection rate and keeping them alive — hoarding spectator slots and
server resources ahead of a public launch.

Track live sockets per IP in ConnectionHandler and reject new ones past a cap
(MAX_SOCKETS_PER_IP, default 10). Slots are freed on disconnect and reconciled
against live sockets in the periodic cleanup so a missed disconnect can't
wrongly lock out an IP.

2026-06-01 09:01:44 -04:00

..

addressManager.test.js

add address modal and try to fix payout

2025-09-29 17:40:59 -04:00

adminRoutes.test.js

refactor: extract smirk auth routes from index.js

2026-05-31 14:23:23 -04:00

batchPayout.test.js

payouts: defer when Monero outputs are locked instead of failing

2026-06-01 08:17:05 -04:00

concurrentSocketCap.test.js

anti-abuse: cap concurrent sockets per IP

2026-06-01 09:01:44 -04:00

earlyEntry.test.js

add early entry and help screens for new users

2025-12-26 10:21:25 -05:00

freePlay.test.js

feat: free-play choice + per-game dual leaderboard (backend)

2026-05-31 15:01:01 -04:00

gameModeManager.test.js

fix edge cases and tests

2026-02-19 06:15:45 -05:00

identityResolution.test.js

refactor: unify identity resolution on stable user_id (anon_token)

2026-05-31 10:15:08 -04:00

inputValidation.test.js

fix: input validation + memory-leak/concurrency hardening

2026-05-31 13:46:53 -04:00

moneyAtomic.test.js

refactor: exact BigInt money math via src/money/atomic.js

2026-05-31 09:45:58 -04:00

monsterChase.test.js

Begin payment logic and tests

2025-09-27 08:45:22 -04:00

monsterCollision.test.js

fix: dungeon reachability guard + per-substep monster collision

2026-05-31 14:08:45 -04:00

movementManager.test.js

Begin payment logic and tests

2025-09-27 08:45:22 -04:00

payment_flow.integration.test.js

security: fix underpayment exploit and make provably-fair real

2026-05-31 09:14:21 -04:00

payment_payout_comprehensive.test.js

fix credits package bug and improve stale payment logic

2026-02-19 07:05:15 -05:00

paymentHandlers.test.js

add error handling and more tests

2025-09-29 11:20:11 -04:00

payoutRetry.test.js

fix: retry payout stat-counting and atomic tx_hash write

2026-05-31 10:00:51 -04:00

payoutSnapshot.test.js

fix: gate direct (entry-fee) payouts behind DIRECT_PAYOUTS_ENABLED

2026-05-31 15:25:46 -04:00

provablyFair.test.js

fix: dungeon reachability guard + per-substep monster collision

2026-05-31 14:08:45 -04:00

rateLimit.test.js

fix: reconnect-proof rate limiting (stable id + real client IP)

2026-05-31 10:21:28 -04:00

security.test.js

security: move session token to handshake auth and rotate on resume

2026-05-31 09:29:20 -04:00

singleGameRecovery.test.js

fix: recover unconsumed single-game payments; make game preservation deterministic

2026-05-31 09:36:09 -04:00

walletRPCService.test.js

fix edge cases and tests

2026-02-19 06:15:45 -05:00