Issues

• SECURITY: Wildcard CORS (ACAO: *) on all routes — diverges from Go module origin-echo policy

  felixfelix-bot/tollgate-module-basic-rust#10 · Filter by author felixfelix-bot opened on Aug 18, 2026

• BUG: Migration marker never written (repeated migration)

  felixfelix-bot/tollgate-module-basic-rust#9 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: Token verifier case-sensitive state comparison

  felixfelix-bot/tollgate-module-basic-rust#8 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: Lightning quote store never cleans up (memory leak)

  felixfelix-bot/tollgate-module-basic-rust#7 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: Allotment truncates to 0 for payments below price_per_step

  felixfelix-bot/tollgate-module-basic-rust#6 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: save_config() non-atomic write can corrupt config on crash

  felixfelix-bot/tollgate-module-basic-rust#5 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: Allotment formula ignored step_size, price_per_step, and metric

  felixfelix-bot/tollgate-module-basic-rust#4 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: POST / stored sessions under hardcoded MAC 00:00:00:00:00:00

  felixfelix-bot/tollgate-module-basic-rust#3 · Filter by author Amperstrand opened on Jul 24, 2026
  1

• BUG: /usage endpoint used IP as session key instead of MAC

  felixfelix-bot/tollgate-module-basic-rust#2 · Filter by author Amperstrand opened on Jul 24, 2026
  1