agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-24 17:51:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7294 from overleaf/jpa-ratelimit-2fa-check

Browse Source 
[web] rate-limit 2fa check requests

GitOrigin-RevId: da3d2f15c68cff101de807c1eae91edbd86481e7
This commit is contained in:
Jakob Ackermann
2022-03-31 08:54:43 +01:00
committed by Copybot
parent b548d4e15b
commit 2117d24bda
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
services/web/app/src/Features/Security/RateLimiterMiddleware.js
View File

@@ -16,8 +16,10 @@ const settings = require('@overleaf/settings')
Unique clients are identified by user_id if logged in, and IP address if not.
*/
function rateLimit(opts) {
const getUserId =
opts.getUserId || (req => SessionManager.getLoggedInUserId(req.session))
return function (req, res, next) {
const userId = SessionManager.getLoggedInUserId(req.session) || req.ip
const userId = getUserId(req) || req.ip
if (
settings.smokeTest &&
settings.smokeTest.userId &&