Explorar el Código

Merge pull request #1512 from sharelatex/as-rate-limit-confirm-uni-domain-endpoint

Rate limit confirm university domain endpoint

GitOrigin-RevId: 1d03eec3c0e8208e5f643000693f685957e15442
Chrystal Maria Griffiths hace 7 años
padre
commit
d52c30f272
Se han modificado 1 ficheros con 5 adiciones y 1 borrados
  1. 5 1
      services/web/app/coffee/router.coffee

+ 5 - 1
services/web/app/coffee/router.coffee

@@ -403,7 +403,11 @@ module.exports = class Router
 			),
 			),
 			AuthenticationController.httpAuth,
 			AuthenticationController.httpAuth,
 			CompileController.getFileFromClsiWithoutUser
 			CompileController.getFileFromClsiWithoutUser
-		publicApiRouter.post '/api/institutions/confirm_university_domain', AuthenticationController.httpAuth, InstitutionsController.confirmDomain
+		publicApiRouter.post '/api/institutions/confirm_university_domain', RateLimiterMiddlewear.rateLimit({
+			endpointName: 'confirm-university-domain',
+			maxRequests: 1,
+			timeInterval: 60
+		}), AuthenticationController.httpAuth, InstitutionsController.confirmDomain
 
 
 		webRouter.get '/chrome', (req, res, next) ->
 		webRouter.get '/chrome', (req, res, next) ->
 			# Match v1 behaviour - this is used for a Chrome web app
 			# Match v1 behaviour - this is used for a Chrome web app