a865b62efc
Rate limit by user instead of IP when API user is authenticated ( #5923 )
...
* Fix #668 - Rate limit by user instead of IP when API user is authenticated
* Fix code style issue
* Use request decorator provided by Doorkeeper
7 years ago
b42c018bb8
Add Content-Type header on throttled response to fix mojibake ( #4558 )
...
application/json only allows Unicode, so this prevents from wrong charset detection.
7 years ago
db92eec876
Localize 'throttled' ( #2755 )
8 years ago
964035b118
allow localhost to bypass the ratelimit ( #2554 )
8 years ago
ff5baa5349
Add rate limits for logins and sign-ups by IP (5 in 5 minutes) ( #2079 )
...
* Add rate limits for logins and sign-ups by IP (5 in 5 minutes)
Should be enough for normal attempts
* Add rate limit for forgotten password form as well
8 years ago
Eugen Rochko
unarist
alpaca-tc
Tristan Mahé