routers/calls.py:42 is gated only by the router-level "any valid Firebase token" dependency. Any authenticated viewer can trigger the full Whisper + Gemini pipeline on any call, repeatedly, with no rate limit and no quota.
A stranger with a free account can loop this and burn the owner's OpenAI and Gemini credit. The only thing currently preventing it is that accounts were handed out by hand — and that mitigation disappeared the moment self-serve signup shipped.
Scheduled as item B2c of SAAS_PLAN.md; filed separately because it is exploitable today, independent of the rest of the SaaS work.
`routers/calls.py:42` is gated only by the router-level "any valid Firebase token" dependency. Any authenticated viewer can trigger the full Whisper + Gemini pipeline on any call, repeatedly, with no rate limit and no quota.
A stranger with a free account can loop this and burn the owner's OpenAI and Gemini credit. The only thing currently preventing it is that accounts were handed out by hand — and that mitigation disappeared the moment self-serve signup shipped.
Scheduled as item B2c of `SAAS_PLAN.md`; filed separately because it is exploitable today, independent of the rest of the SaaS work.
Already fixed before this issue was filed — my mistake for filing it.
routers/calls.py now gates POST /calls/{id}/reprocess on require_admin_token, not the router-level "any valid Firebase token", and calls reprocess_limiter.check(call_id) before queueing the pipeline. The limiter is _RateLimiter(max_calls=3, window_seconds=600) in internal/auth.py:260.
Both landed in a3681ea ("Stamp org_id everywhere and gate every route that leaked across tenants"). The tally that produced this issue was written from the DEFERRED.md note rather than from the code, which is exactly the drift CLAUDE.md warns about.
The separate backlog reprocess (server-26#7) is still open and still needs its own spend ceiling.
Already fixed before this issue was filed — my mistake for filing it.
`routers/calls.py` now gates `POST /calls/{id}/reprocess` on `require_admin_token`, not the router-level "any valid Firebase token", and calls `reprocess_limiter.check(call_id)` before queueing the pipeline. The limiter is `_RateLimiter(max_calls=3, window_seconds=600)` in `internal/auth.py:260`.
Both landed in `a3681ea` ("Stamp org_id everywhere and gate every route that leaked across tenants"). The tally that produced this issue was written from the DEFERRED.md note rather than from the code, which is exactly the drift CLAUDE.md warns about.
The separate backlog reprocess (server-26#7) is still open and still needs its own spend ceiling.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
routers/calls.py:42is gated only by the router-level "any valid Firebase token" dependency. Any authenticated viewer can trigger the full Whisper + Gemini pipeline on any call, repeatedly, with no rate limit and no quota.A stranger with a free account can loop this and burn the owner's OpenAI and Gemini credit. The only thing currently preventing it is that accounts were handed out by hand — and that mitigation disappeared the moment self-serve signup shipped.
Scheduled as item B2c of
SAAS_PLAN.md; filed separately because it is exploitable today, independent of the rest of the SaaS work.Already fixed before this issue was filed — my mistake for filing it.
routers/calls.pynow gatesPOST /calls/{id}/reprocessonrequire_admin_token, not the router-level "any valid Firebase token", and callsreprocess_limiter.check(call_id)before queueing the pipeline. The limiter is_RateLimiter(max_calls=3, window_seconds=600)ininternal/auth.py:260.Both landed in
a3681ea("Stamp org_id everywhere and gate every route that leaked across tenants"). The tally that produced this issue was written from the DEFERRED.md note rather than from the code, which is exactly the drift CLAUDE.md warns about.The separate backlog reprocess (server-26#7) is still open and still needs its own spend ceiling.