Răsfoiți Sursa

Merge pull request #1512 from sharelatex/as-rate-limit-confirm-uni-domain-endpoint

Rate limit confirm university domain endpoint

GitOrigin-RevId: 1d03eec3c0e8208e5f643000693f685957e15442
Chrystal Maria Griffiths 7 ani în urmă
părinte
comite
d52c30f272
1 a modificat fișierele cu 5 adăugiri și 1 ștergeri
  1. 5 1
      services/web/app/coffee/router.coffee

+ 5 - 1
services/web/app/coffee/router.coffee

@@ -403,7 +403,11 @@ module.exports = class Router
 			),
 			AuthenticationController.httpAuth,
 			CompileController.getFileFromClsiWithoutUser
-		publicApiRouter.post '/api/institutions/confirm_university_domain', AuthenticationController.httpAuth, InstitutionsController.confirmDomain
+		publicApiRouter.post '/api/institutions/confirm_university_domain', RateLimiterMiddlewear.rateLimit({
+			endpointName: 'confirm-university-domain',
+			maxRequests: 1,
+			timeInterval: 60
+		}), AuthenticationController.httpAuth, InstitutionsController.confirmDomain
 
 		webRouter.get '/chrome', (req, res, next) ->
 			# Match v1 behaviour - this is used for a Chrome web app