agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-11-15 14:43:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #16000 from overleaf/jpa-web-join-project-rate-limit-per-user-id

Browse Source 
[web] apply rate limit for joinProject per user-id and project-id

GitOrigin-RevId: d03a81f4ff55d9a8f6d4ea4ca3633e3682e6dacb
This commit is contained in:
Jakob Ackermann
2023-11-30 09:03:46 +00:00
committed by Copybot
parent 5efe0d1452
commit 96bbffa704
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/web/app/src/Features/Editor/EditorHttpController.js
+1 -1
View File
@@ -58,7 +58,7 @@ const unsupportedSpellcheckLanguages = [
async function joinProject(req, res, next) { async function joinProject(req, res, next) {
const projectId = req.params.Project_id const projectId = req.params.Project_id
let userId = req.query.user_id let userId = req.query.user_id // keep schema in sync with router
if (userId === 'anonymous-user') { if (userId === 'anonymous-user') {
userId = null userId = null
} }
services/web/app/src/Features/Editor/EditorRouter.js
+2
View File
@@ -70,6 +70,8 @@ module.exports = {
AuthenticationController.requirePrivateApiAuth(), AuthenticationController.requirePrivateApiAuth(),
RateLimiterMiddleware.rateLimit(rateLimiters.joinProject, { RateLimiterMiddleware.rateLimit(rateLimiters.joinProject, {
params: ['Project_id'], params: ['Project_id'],
// keep schema in sync with controller
getUserId: req => req.query.user_id,
}), }),
EditorHttpController.joinProject EditorHttpController.joinProject
) )