mastodon

Author	SHA1	Message	Date
Eugen Rochko	921b781909	Increase rate limit on protected paths (#6229 ) Previously each protected path had a separate rate limit. Now they're all in the same bucket, so people are more likely to hit one with register->login. Increasing to 25 per 5 minutes should be fine.	7 years ago
Eugen Rochko	feed07227b	Apply a 25x rate limit by IP even to authenticated requests (#5948 )	7 years ago
Naoki Kosaka	4bce376fdc	Missing require 'authorization_decorator'. (#5947 )	7 years ago
Eugen Rochko	a865b62efc	Rate limit by user instead of IP when API user is authenticated (#5923 ) * Fix #668 - Rate limit by user instead of IP when API user is authenticated * Fix code style issue * Use request decorator provided by Doorkeeper	7 years ago
unarist	b42c018bb8	Add Content-Type header on throttled response to fix mojibake (#4558 ) application/json only allows Unicode, so this prevents from wrong charset detection.	8 years ago
alpaca-tc	db92eec876	Localize 'throttled' (#2755 )	8 years ago
Tristan Mahé	964035b118	allow localhost to bypass the ratelimit (#2554 )	8 years ago
Eugen	ff5baa5349	Add rate limits for logins and sign-ups by IP (5 in 5 minutes) (#2079 ) * Add rate limits for logins and sign-ups by IP (5 in 5 minutes) Should be enough for normal attempts * Add rate limit for forgotten password form as well	8 years ago