Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add rate limiting to /api/v1/users/sign_in endpoint #6211

Open
2 tasks
7riumph opened this issue Feb 4, 2025 · 2 comments
Open
2 tasks

Add rate limiting to /api/v1/users/sign_in endpoint #6211

7riumph opened this issue Feb 4, 2025 · 2 comments
Labels
codethechange for codethechange developers

Comments

@7riumph
Copy link
Collaborator

7riumph commented Feb 4, 2025

Part of epic #3942

What type of user does this affect?

  • volunteers

How should it operate? ⚙️🛠️

Endpoint should now have rate limits.

No more than 5 requests every 60 seconds is allowed to /api/v1/users/sign_in from a given ip or email.

Acceptance Criteria

  • ip is throttled on the above criteria in config/initializers/rack_attack.rb
  • Email is throttled on the above criteria config/initializers/rack_attack.rb

Helpful Links

Rake::Attack Documentation ( Scroll down to "Throttling" header )
Rake::Attack file in this Codebase

@Raushan998
Copy link

@7riumph I want to try on this.

@xihai01
Copy link
Collaborator

xihai01 commented Feb 7, 2025

@Raushan998 these issues are reserved for another dev group to work on - codethechange

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
codethechange for codethechange developers
Projects
Development

No branches or pull requests

3 participants