Merge pull request #7295 from overleaf/jpa-require-login-multi-zip

[web] restrict multi-project zip download to logged-in users

GitOrigin-RevId: f1e80fd62a4d60a5e64d683108ef2547b1c18a30
This commit is contained in:
Jakob Ackermann 2022-03-31 08:54:53 +01:00 committed by Copybot
parent 2117d24bda
commit d949567391

View file

@ -691,6 +691,7 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
) )
webRouter.get( webRouter.get(
'/project/download/zip', '/project/download/zip',
AuthenticationController.requireLogin(),
RateLimiterMiddleware.rateLimit({ RateLimiterMiddleware.rateLimit({
endpointName: 'multiple-projects-zip-download', endpointName: 'multiple-projects-zip-download',
maxRequests: 10, maxRequests: 10,