-
Notifications
You must be signed in to change notification settings - Fork 4.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add: rate limit the login page #1373
Conversation
b454fa8
to
7b68953
Compare
Added a test + squashed |
@@ -81,6 +81,7 @@ def forgot_password(org_slug=None): | |||
|
|||
|
|||
@routes.route(org_scoped_rule('/login'), methods=['GET', 'POST']) | |||
@limiter.limit("50/hour") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's make this configurable.
Added a conf variable |
@arikfr Anything blocking this PR for being merged? |
Sorry for not mentioning earlier -- I'm no longer merging stuff until I finish with the 0.12 release (#1378). Once it's out, I will merge it. |
Hi, @AntoineAugusti - because I removed the |
4863746
to
c440df9
Compare
c440df9
to
9118464
Compare
@arikfr Rebased and squashed 👍 |
Thanks! |
This is related to #115
Straightforward use of Flask limiter https://flask-limiter.readthedocs.io