2 Commits (a41eccbe3c29adced7f5e65bb2a9df1bf30c2d8d)

Author	SHA1	Message	Date
JohnBaumb	ea875cc7af	fix: throttle auth last_used_at config writes ... Every authenticated API request previously called config_mgr.set(api_keys), which rewrites the entire app config blob to SQLite. Under load this caused significant write amplification and lock contention. Persistence of last_used_at is now throttled per key hash to once every 15 minutes. The in-memory timestamp on the matched key is still updated immediately, so reads within the same process see the live value; only the on-disk persistence is throttled.	1 month ago
Broque Thomas	d9aa8303a7	Add SoulSync REST API (v1) with API key authentication ... Adds a full public REST API at /api/v1/ with 32 endpoints covering library, search, downloads, wishlist, watchlist, playlists, system status, and settings. Includes API key authentication (Bearer token), per-endpoint rate limiting, and consistent JSON response format. API keys can be generated and managed from the Settings page. No changes to existing functionality — the API delegates to the same backend services the web UI uses.	3 months ago