Merge pull request #462 from ZcashFoundation/rate-limit-auth

Add rate limiting to auth endpoint
2019-06-25 12:19:47 -04:00 · 2019-06-25 12:19:47 -04:00 · c3449586b6
parent 8819ee3035 f352618e5c
commit c3449586b6
1 changed files with 1 additions and 0 deletions
--- a/backend/grant/user/views.py
+++ b/backend/grant/user/views.py
@ -122,6 +122,7 @@ def create_user(


@blueprint.route("/auth", methods=["POST"])
+@limiter.limit("30/hour;5/minute")
@body({
    "email": fields.Str(required=True),
    "password": fields.Str(required=True)