kaslo/pawkey-sk
1
0
Fork 0
Code Packages Activity

add rate limits to all public endpoints

Browse Source
This commit is contained in:
Hazelnoot
2024-11-22 13:43:06 -05:00
parent a38d8a91a1
commit e3b826db5a
243 changed files with 2908 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/backend/src/server/api/endpoints/i/2fa/done.ts
+7
View File
@@ -10,6 +10,7 @@ import { UserEntityService } from '@/core/entities/UserEntityService.js';
import type { UserProfilesRepository } from '@/models/_.js';
import { GlobalEventService } from '@/core/GlobalEventService.js';
import { DI } from '@/di-symbols.js';
import ms from 'ms';
export const meta = {
requireCredential: true,
@@ -28,6 +29,12 @@ export const meta = {
},
},
},
limit: {
duration: ms('1hour'),
max: 10,
minInterval: ms('1sec'),
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/2fa/password-less.ts
+7
View File
@@ -10,6 +10,7 @@ import type { UserProfilesRepository, UserSecurityKeysRepository } from '@/model
import { GlobalEventService } from '@/core/GlobalEventService.js';
import { DI } from '@/di-symbols.js';
import { ApiError } from '../../../error.js';
import ms from 'ms';
export const meta = {
requireCredential: true,
@@ -23,6 +24,12 @@ export const meta = {
id: 'f9c54d7f-d4c2-4d3c-9a8g-a70daac86512',
},
},
limit: {
duration: ms('1hour'),
max: 10,
minInterval: ms('1sec'),
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/2fa/update-key.ts
+7
View File
@@ -11,6 +11,7 @@ import { UserEntityService } from '@/core/entities/UserEntityService.js';
import { GlobalEventService } from '@/core/GlobalEventService.js';
import { DI } from '@/di-symbols.js';
import { ApiError } from '../../../error.js';
import ms from 'ms';
export const meta = {
requireCredential: true,
@@ -30,6 +31,12 @@ export const meta = {
id: '1fb7cb09-d46a-4fff-b8df-057708cce513',
},
},
limit: {
duration: ms('1hour'),
max: 10,
minInterval: ms('1sec'),
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/apps.ts
+6
View File
@@ -49,6 +49,12 @@ export const meta = {
},
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/authorized-apps.ts
+6
View File
@@ -48,6 +48,12 @@ export const meta = {
},
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/claim-achievement.ts
+6
View File
@@ -13,6 +13,12 @@ export const meta = {
requireCredential: true,
prohibitMoved: true,
kind: 'write:account',
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/favorites.ts
+6
View File
@@ -26,6 +26,12 @@ export const meta = {
ref: 'NoteFavorite',
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/gallery/likes.ts
+6
View File
@@ -37,6 +37,12 @@ export const meta = {
},
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/gallery/posts.ts
+6
View File
@@ -26,6 +26,12 @@ export const meta = {
ref: 'GalleryPost',
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/page-likes.ts
+6
View File
@@ -36,6 +36,12 @@ export const meta = {
},
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/pages.ts
+6
View File
@@ -26,6 +26,12 @@ export const meta = {
ref: 'Page',
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/pin.ts
+6
View File
@@ -42,6 +42,12 @@ export const meta = {
optional: false, nullable: false,
ref: 'MeDetailed',
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/read-all-unread-notes.ts
+6
View File
@@ -15,6 +15,12 @@ export const meta = {
requireCredential: true,
kind: 'write:account',
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/read-announcement.ts
+6
View File
@@ -16,6 +16,12 @@ export const meta = {
errors: {
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/get-all.ts
+6
View File
@@ -14,6 +14,12 @@ export const meta = {
res: {
type: 'object',
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/get-detail.ts
+6
View File
@@ -32,6 +32,12 @@ export const meta = {
},
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/get-unsecure.ts
+6
View File
@@ -22,6 +22,12 @@ export const meta = {
id: 'ac3ed68a-62f0-422b-a7bc-d5e09e8f6a6a',
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/get.ts
+7 -1
View File
@@ -22,7 +22,13 @@ export const meta = {
res: {
type: 'object',
}
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/keys-with-type.ts
+6
View File
@@ -17,6 +17,12 @@ export const meta = {
type: 'string',
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/keys.ts
+6
View File
@@ -17,6 +17,12 @@ export const meta = {
type: 'string',
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/remove.ts
+6
View File
@@ -21,6 +21,12 @@ export const meta = {
id: '1fac4e8a-a6cd-4e39-a4a5-3a7e11f1b019',
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/scopes-with-domain.ts
+7 -1
View File
@@ -31,7 +31,13 @@ export const meta = {
},
},
},
}
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/registry/set.ts
+6
View File
@@ -10,6 +10,12 @@ import { RegistryApiService } from '@/core/RegistryApiService.js';
export const meta = {
requireCredential: true,
kind: 'write:account',
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/revoke-token.ts
+6
View File
@@ -12,6 +12,12 @@ export const meta = {
requireCredential: true,
secure: true,
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/signin-history.ts
+6
View File
@@ -23,6 +23,12 @@ export const meta = {
ref: 'Signin',
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/unpin.ts
+6
View File
@@ -29,6 +29,12 @@ export const meta = {
optional: false, nullable: false,
ref: 'MeDetailed',
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/webhooks/create.ts
+6
View File
@@ -55,6 +55,12 @@ export const meta = {
latestStatus: { type: 'integer', nullable: true },
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/webhooks/delete.ts
+6
View File
@@ -24,6 +24,12 @@ export const meta = {
id: 'bae73e5a-5522-4965-ae19-3a8688e71d82',
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/webhooks/list.ts
+6
View File
@@ -46,6 +46,12 @@ export const meta = {
},
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/webhooks/show.ts
+6
View File
@@ -52,6 +52,12 @@ export const meta = {
latestStatus: { type: 'integer', nullable: true },
},
},
// 10 calls per 5 seconds
limit: {
duration: 1000 * 5,
max: 10,
},
} as const;
export const paramDef = {
packages/backend/src/server/api/endpoints/i/webhooks/update.ts
+5
View File
@@ -26,6 +26,11 @@ export const meta = {
},
},
// 2 calls per second
limit: {
duration: 1000,
max: 2,
},
} as const;
export const paramDef = {