Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rate limit login requests #1516

Merged
merged 1 commit into from Feb 25, 2022
Merged

Rate limit login requests #1516

merged 1 commit into from Feb 25, 2022

Conversation

yiannistri
Copy link
Contributor

Closes: #1090

What changed?
Added basic rate limit for requests to /sign_in endpoint

Why?
To protect the endpoint from a high volume of login attempts

How did you test it?
Manually

Release notes
N/A

Documentation Changes
N/A

return err
}

middleware, err := httplimit.NewMiddleware(store, httplimit.IPKeyFunc())
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Neato

Copy link
Contributor

@foot foot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💯

@yiannistri yiannistri merged commit e38cfb4 into main Feb 25, 2022
@yiannistri yiannistri deleted the rate-limit-login branch February 25, 2022 17:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

As a User, I want a default super user so that I have an auth without setting up the connection to my IdP
2 participants