Skip to content

Add rate limiting to /api/v1/users/sign_in endpoint #6211

@7riumph

Description

@7riumph

Part of epic #3942

What type of user does this affect?

  • volunteers

How should it operate? ⚙️🛠️

Endpoint should now have rate limits.

No more than 5 requests every 60 seconds is allowed to /api/v1/users/sign_in from a given ip or email.

Acceptance Criteria

  • ip is throttled on the above criteria in config/initializers/rack_attack.rb
  • Email is throttled on the above criteria config/initializers/rack_attack.rb

Helpful Links

Rake::Attack Documentation ( Scroll down to "Throttling" header )
Rake::Attack file in this Codebase

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status

    Todo

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions