Merge pull request #8284 from demarches-simplifiees/feature/rate_limiting_prefill_api

Add prefill api to rack_attack
2023-01-11 16:47:47 +01:00 · 2023-01-11 16:47:47 +01:00 · 6f2912b4db
commit 6f2912b4db
parent 490a997e97 493a60f221
1 changed files with 6 additions and 0 deletions
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@ -17,6 +17,12 @@ class Rack::Attack
    end
  end

+  throttle('/api/public/v1/dossiers/ip', limit: 5, period: 20.seconds) do |req|
+    if req.path == '/api/public/v1/dossiers' && req.post? && rack_attack_enabled?
+      req.remote_ip
+    end
+  end
+
  Rack::Attack.safelist('allow from localhost') do |req|
    IPService.ip_trusted?(req.remote_ip)
  end