From 493a60f22115981053f4a1ba0160c1c33cd470b6 Mon Sep 17 00:00:00 2001
From: Damien Le Thiec <damien.lethiec@gmail.com>
Date: Wed, 14 Dec 2022 17:57:08 +0100
Subject: [PATCH] Add prefill api to rack_attack

---
 config/initializers/rack_attack.rb | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb
index 9a18f8936..687282391 100644
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@@ -17,6 +17,12 @@ class Rack::Attack
     end
   end
 
+  throttle('/api/public/v1/dossiers/ip', limit: 5, period: 20.seconds) do |req|
+    if req.path == '/api/public/v1/dossiers' && req.post? && rack_attack_enabled?
+      req.remote_ip
+    end
+  end
+
   Rack::Attack.safelist('allow from localhost') do |req|
     IPService.ip_trusted?(req.remote_ip)
   end