Merge pull request #1312 from sharelatex/ja-add-rate-limits

Add rate limits to adding emails and changing password

GitOrigin-RevId: e73c17985cc9c74d60f8856b3b47b28fecd0d489
This commit is contained in:
Ersun Warncke 2018-12-21 08:06:00 -04:00 committed by sharelatex
parent 2cf7fefaeb
commit 7bf860cde5

View file

@ -127,9 +127,19 @@ module.exports = class Router
if Features.hasFeature 'affiliations'
webRouter.post '/user/emails',
AuthenticationController.requireLogin(),
RateLimiterMiddlewear.rateLimit({
endpointName: 'add-email',
maxRequests: 10
timeInterval: 60
}),
UserEmailsController.add
webRouter.post '/user/emails/delete',
AuthenticationController.requireLogin(),
RateLimiterMiddlewear.rateLimit({
endpointName: 'delete-email',
maxRequests: 10
timeInterval: 60
}),
UserEmailsController.remove
webRouter.post '/user/emails/default',
AuthenticationController.requireLogin(),