/ 
PAGI-FastAPI-v1.6.0

Changes for version 1.6.0 - 2026-08-25

  • SECURITY FIXES
    • Added 'trust_proxies' configuration parameter to PAGI::FastAPI::Middleware::BotProtection, defaults to 0.
    • Added pow() reader method to PAGI::FastAPI::Middleware::BotProtection to expose the underlying PAGI::FastAPI::BotProtection::ProofOfWork instance for inspection and testing.
    • Fixed IP spoofing security vulnerability by ignoring untrusted 'X-Forwarded-For' headers unless 'trust_proxies' is explicitly enabled.
    • Properly extract the original client IP from comma-separated 'X-Forwarded-For' proxy chains when 'trust_proxies' is enabled.
  • TESTING
    • Added unit test: t/36-middleware_bot_protection_trust_proxies.t

Documentation

README.md
TODO.md

Modules

PAGI::FastAPI
Asynchronous, Type-Safe Micro-Framework with Dependency Injection and OpenAPI & Swagger UI
PAGI::FastAPI::BotProtection
Base Interface for PAGI::FastAPI Bot Protection
PAGI::FastAPI::BotProtection::ProofOfWork
Stateless Proof-of-Work Bot Mitigation Engine
PAGI::FastAPI::Context
Request and Response Lifecycle Context for PAGI::FastAPI
PAGI::FastAPI::Cookies
Request Cookie Parsing Helper for PAGI::FastAPI
PAGI::FastAPI::Depends
Dependency Injection Wrapper for PAGI::FastAPI
PAGI::FastAPI::Middleware::BotProtection
Asynchronous Proof-of-Work Bot Protection Middleware for PAGI::FastAPI
PAGI::FastAPI::Middleware::ExceptionHandler
Typed Exception-to-Handler Dispatch for PAGI::FastAPI
PAGI::FastAPI::Middleware::RateLimit
Async Rate Limiting Middleware for PAGI::FastAPI
PAGI::FastAPI::Queue
Pluggable Async Message Queue Facade for PAGI::FastAPI
PAGI::FastAPI::Queue::Driver
Abstract Base Class for Message Queue Storage Drivers
PAGI::FastAPI::Queue::Driver::Memory
Default In-Memory Storage Driver for PAGI::FastAPI::Queue
PAGI::FastAPI::RateLimit::Driver
Abstract Base Class for Rate Limiting Storage Drivers
PAGI::FastAPI::RateLimit::Driver::Memory
Default In-Memory Storage Driver for Rate Limiting
PAGI::FastAPI::Response
Base HTTP Response Class for PAGI::FastAPI
PAGI::FastAPI::Response::File
File Download Response for PAGI::FastAPI
PAGI::FastAPI::Response::HTML
HTML Response Class for PAGI::FastAPI
PAGI::FastAPI::Response::Redirect
HTTP Redirect Response for PAGI::FastAPI
PAGI::FastAPI::Response::SSE
Server-Sent Events (SSE) Streaming Response for PAGI::FastAPI
PAGI::FastAPI::ResponseModel
Response Shape Validation and Filtering for PAGI::FastAPI
PAGI::FastAPI::TypedPath
Path Parameter Validation for PAGI::FastAPI

Examples

Other files