bastodon/app/controllers/concerns/api
..
access_token_tracking_concern.rb
caching_concern.rb
content_security_policy.rb
rate_limit_headers.rb