Part of epic #3942
What type of user does this affect?
How should it operate? ⚙️🛠️
Endpoint should now have rate limits.
No more than 5 requests every 60 seconds is allowed to /api/v1/users/sign_in from a given ip or email.
Acceptance Criteria
Helpful Links
Rake::Attack Documentation ( Scroll down to "Throttling" header )
Rake::Attack file in this Codebase
Part of epic #3942
What type of user does this affect?
How should it operate? ⚙️🛠️
Endpoint should now have
rate limits.No more than
5requests every60seconds is allowed to/api/v1/users/sign_infrom a giveniporemail.Acceptance Criteria
ipis throttled on the above criteria inconfig/initializers/rack_attack.rbEmailis throttled on the above criteriaconfig/initializers/rack_attack.rbHelpful Links
Rake::Attack Documentation ( Scroll down to "Throttling" header )
Rake::Attack file in this Codebase