chinwag/chinwagsocial
chinwag/chinwagsocial
2
0
Fork 0
Code Issues Pull requests Releases 4 Wiki Activity

Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483)

Browse source
This commit is contained in:
Claire 2024-05-30 14:56:18 +02:00
parent d770b61a74
commit 95ebcff98e
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/initializers/rack_attack.rb
View file

@ -30,7 +30,7 @@ class Rack::Attack
end end
def authenticated_user_id def authenticated_user_id
authenticated_token&.resource_owner_id || warden_user_id authenticated_token&.resource_owner_id
end end
def authenticated_token_id def authenticated_token_id
@ -138,7 +138,7 @@ class Rack::Attack
end end
throttle('throttle_password_change/account', limit: 10, period: 10.minutes) do |req| throttle('throttle_password_change/account', limit: 10, period: 10.minutes) do |req|
req.authenticated_user_id if req.put? || (req.patch? && req.path_matches?('/auth')) req.warden_user_id if req.put? || (req.patch? && req.path_matches?('/auth'))
end end
self.throttled_responder = lambda do |request| self.throttled_responder = lambda do |request|