2 Commits (df304eb016f440ca01a597ade98180a87a9a407a)

Author	SHA1	Message	Date
JohnBaumb	ea875cc7af	fix: throttle auth last_used_at config writes ... Every authenticated API request previously called config_mgr.set(api_keys), which rewrites the entire app config blob to SQLite. Under load this caused significant write amplification and lock contention. Persistence of last_used_at is now throttled per key hash to once every 15 minutes. The in-memory timestamp on the matched key is still updated immediately, so reads within the same process see the live value; only the on-disk persistence is throttled.	2 months ago
Broque Thomas	d9aa8303a7	Add SoulSync REST API (v1) with API key authentication ... Adds a full public REST API at /api/v1/ with 32 endpoints covering library, search, downloads, wishlist, watchlist, playlists, system status, and settings. Includes API key authentication (Bearer token), per-endpoint rate limiting, and consistent JSON response format. API keys can be generated and managed from the Settings page. No changes to existing functionality — the API delegates to the same backend services the web UI uses.	3 months ago