6ab849be5e
Log analysis over 17 days showed 181 Sentinel-block retry attempts on /proxy, all 181 failed (0% success). Retrying every 90 minutes yields zero value right now and just adds more blocked-request noise against our own IP for nothing in return. Bumped lockdownTTL to 5h so it backs off harder while still recovering same-day if Microsoft's block ever eases. Also found /proxy never validated product_id against the known catalog, so a request for a nonexistent ID (e.g. product_id=2861, never a real product) still burned a full outbound Microsoft session attempt and a Sentinel-block hit for something that could never succeed anyway. Now rejected with 404 before any Microsoft call, reusing the existing validContributeProducts allow-list. Verified locally: unknown product_id -> 404 (no MS fetch attempted in logs), missing params -> 400 unchanged, known product_id -> proceeds to a real MS session attempt as before. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| Dockerfile | ||
| go.mod | ||
| go.sum | ||
| install.sh | ||
| main.go | ||