Refactor environment variable names for authentication rate limiting

Author: mhajder

README.md

@@ -14,7 +14,7 @@ This project exposes a secure HTTP interface to common devil server operations.
 
 Environment-driven behavior:
 - Authentication requires DEVIL_API_KEY set at process start (loaded from the environment or a .env file).
-- Optional rate-limiting on authentication failures (per-IP) using DEVIL_AUTH_FAIL_THRESHOLD and DEVIL_AUTH_BLOCK_SECONDS.
+- Optional rate-limiting on authentication failures (per-IP) using AUTH_FAIL_THRESHOLD and AUTH_BLOCK_SECONDS.
 - Logging level can be controlled via LOG_LEVEL.
 
 ## Features
@@ -78,8 +78,8 @@ Set environment variables (in shell or in a .env file):
 export DEVIL_API_KEY="your-secret"
 # Optional:
 export LOG_LEVEL="INFO"
-export DEVIL_AUTH_FAIL_THRESHOLD="5"
-export DEVIL_AUTH_BLOCK_SECONDS="300"
+export AUTH_FAIL_THRESHOLD="5"
+export AUTH_BLOCK_SECONDS="300"
 ```
 
 ## Usage
@@ -124,15 +124,15 @@ Notes:
 
 - DEVIL_API_KEY (required): API key required to access all protected endpoints
 - LOG_LEVEL (optional): e.g., INFO, DEBUG
-- DEVIL_AUTH_FAIL_THRESHOLD (optional, default 5): number of failed attempts before blocking
-- DEVIL_AUTH_BLOCK_SECONDS (optional, default 300): block duration in seconds
+- AUTH_FAIL_THRESHOLD (optional, default 5): number of failed attempts before blocking
+- AUTH_BLOCK_SECONDS (optional, default 300): block duration in seconds
 
 Create a local .env file to load automatically:
 ```
 DEVIL_API_KEY=your-secret
 LOG_LEVEL=INFO
-DEVIL_AUTH_FAIL_THRESHOLD=5
-DEVIL_AUTH_BLOCK_SECONDS=300
+AUTH_FAIL_THRESHOLD=5
+AUTH_BLOCK_SECONDS=300
 ```
 
 ## Contributing
@@ -141,4 +141,4 @@ Contributions, issues, and feature requests are welcome! Feel free to check the
 
 ## License
 
-This project is licensed under the GNU AFFERO GENERAL PUBLIC LICENSE License. See the [LICENSE](LICENSE) file for details.
+This project is licensed under the GNU AFFERO GENERAL PUBLIC LICENSE. See the [LICENSE](LICENSE) file for details.

app/auth.py

@@ -27,8 +27,8 @@
 BearerScheme = HTTPBearer(auto_error=False)
 
 AUTH_FAILURE_TRACKER: dict[str, dict[str, float | int]] = {}
-AUTH_FAIL_THRESHOLD = int(os.getenv("DEVIL_AUTH_FAIL_THRESHOLD", "5"))
-AUTH_BLOCK_SECONDS = int(os.getenv("DEVIL_AUTH_BLOCK_SECONDS", "300"))
+AUTH_FAIL_THRESHOLD = int(os.getenv("AUTH_FAIL_THRESHOLD", "5"))
+AUTH_BLOCK_SECONDS = int(os.getenv("AUTH_BLOCK_SECONDS", "300"))
 
 
 def _client_ip(request: Request) -> str: