Skip to content

Add rate limiting to /api/v1/users/sign_in endpoint #6211

@7riumph

Description

@7riumph

Part of epic #3942

What type of user does this affect?

  • volunteers

How should it operate? ⚙️🛠️

Endpoint should now have rate limits.

No more than 5 requests every 60 seconds is allowed to /api/v1/users/sign_in from a given ip or email.

Acceptance Criteria

  • ip is throttled on the above criteria in config/initializers/rack_attack.rb
  • Email is throttled on the above criteria config/initializers/rack_attack.rb

Helpful Links

Rake::Attack Documentation ( Scroll down to "Throttling" header )
Rake::Attack file in this Codebase

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    Todo

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions