mirror of
https://github.com/bilawalsidhu/gods-eye-view.git
synced 2026-11-04 02:14:01 +00:00
Said Turksever
01c764d4fd
- observeArrivalRotation reads the sample before the deadline check and keeps a late frame's angle on the timeout result; arrivalAngleViolated then makes it final. Regressions: wrong late reveal and wrong late settle, each followed by a clean second attempt, still fail; a clean late frame stays retryable. - Overpass admission tests: a monotonic per-test clock removes order dependence on the module-level limiters; the proxy test covers ::1 and ::ffff:127.0.0.1 sockets; a new test pins the proxied: upstream bucket. - Retry edges (wrong on-time reveal, maxAttempts, inclusive 10° limit) and a check that every name the track harness imports is exported. - Docs: nginx needs Host, X-Forwarded-Proto and X-Forwarded-For; Docker bridge networking makes every host client one remote peer; list the exact forwarding headers; owner misses can also see 503.
951 B
951 B
- Keep Overpass-backed layers working behind a reverse proxy:
/api/overpassnow uses the keyless same-site gate, admits forwarding headers and still refuses cross-site requests. Direct loopback requests keep their own admission window; proxied requests, including those a local reverse proxy relays over loopback, are admitted as remote traffic keyed by their socket, and IPv6 peers are keyed by /64, so neither LAN peers nor proxied users can exhaust the owner's admission. The upstream budget stays shared, so an owner cache miss can still be rate-limited (asturksever, #1308). - Give the tracking arrival check a wall-clock budget per observed frame and retry only an inconclusive timeout: a timeout keeps every angle it measured, including a late frame's, and a wrong one fails without retry, so slow software-rendered frames no longer fail the check and a real violation is never retried into a pass (asturksever, #1308).