You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As far as I know, this feature would have to be included in HTTP.jl in order for oxygen to use this. I'd recommend raising this issue over there.
In the meantime, I'd recommend creating either creating an authentication middleware function to restrict who can connect to your websocket or creating a rate-limiting middleware function. Oxygen automatically inserts the clients ip address into the context dictionary of each HTTP.Request.
There should be a max payload size option for websockets to limit DOS attacks.
The text was updated successfully, but these errors were encountered: