Merge remote-tracking branch 'origin/fix/fix/rate-limiter-ip-source'

src/rate_limit/mod.rs

@@ -64,24 +64,12 @@ pub async fn rate_limit_middleware(
     next: Next,
 ) -> axum::response::Response {
     let client_ip = req
-        .headers()
-        .get("x-forwarded-for")
-        .and_then(|v| v.to_str().ok())
-        .and_then(|v| v.split(',').next())
-        .and_then(|v| v.trim().parse::<IpAddr>().ok())
-        .or_else(|| {
-            req.extensions()
-                .get::<axum::extract::ConnectInfo<std::net::SocketAddr>>()
-                .map(|ci| ci.ip())
-        });
+        .extensions()
+        .get::<axum::extract::ConnectInfo<std::net::SocketAddr>>()
+        .map(|ci| ci.ip());
 
     let Some(ip) = client_ip else {
-        // If no client IP can be identified, the request passes through without rate
-        // limiting. In practice, ConnectInfo is always set by the server's
-        // ConnectInfoService, so this branch is unreachable. If the proxy were ever
-        // deployed without ConnectInfo propagation, rate limiting would silently become
-        // a no-op. Consider adding a warning log or returning 429 in a future phase.
-        return next.run(req).await;
+        return (StatusCode::TOO_MANY_REQUESTS, "Too Many Requests").into_response();
     };
 
     let host = req