zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-07-28 21:46:24 +02:00
Code Issues Projects Releases Packages Wiki Activity

Add rate limiting to missing actions

Browse source
This commit is contained in:
Thiago Youssef 2022-08-07 11:31:58 -03:00 • committed by olegphenomenon
parent e65d55765a
commit 88090523ff
3 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/epp/sessions_controller.rb
View file

@ -3,7 +3,7 @@ module Epp
skip_authorization_check only: [:hello, :login, :logout] skip_authorization_check only: [:hello, :login, :logout]
before_action :set_paper_trail_whodunnit before_action :set_paper_trail_whodunnit
THROTTLED_ACTIONS = %i[login].freeze THROTTLED_ACTIONS = %i[login hello].freeze
include Shunter::Integration::Throttle include Shunter::Integration::Throttle
def hello def hello

7
app/controllers/repp/v1/registrar/accreditation_info_controller.rb
View file

@ -3,8 +3,11 @@ module Repp
module Registrar module Registrar
class AccreditationInfoController < BaseController class AccreditationInfoController < BaseController
if Feature.allow_accr_endspoints? if Feature.allow_accr_endspoints?
api :GET, 'repp/v1/registrar/accreditation/get_info' THROTTLED_ACTIONS = %i[index].freeze
desc 'check login user and return data' include Shunter::Integration::Throttle
api :GET, 'repp/v1/registrar/accreditation/get_info'
desc 'check login user and return data'
def index def index
login = current_user login = current_user

2
app/controllers/repp/v1/registrar/auth_controller.rb
View file

@ -6,7 +6,7 @@ module Repp
skip_before_action :check_ip_restriction, only: :tara_callback skip_before_action :check_ip_restriction, only: :tara_callback
skip_before_action :validate_client_certs, only: :tara_callback skip_before_action :validate_client_certs, only: :tara_callback
THROTTLED_ACTIONS = %i[index].freeze THROTTLED_ACTIONS = %i[index tara_callback].freeze
include Shunter::Integration::Throttle include Shunter::Integration::Throttle
api :GET, 'repp/v1/registrar/auth' api :GET, 'repp/v1/registrar/auth'