Andal.LND/edx-platform
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ratelimit login_user endpoint.

Browse Source 
Ratelimited `login_user` endpoint using `django-ratelimit`, also
decreased default value of logistration rate limit to 100 requests
per five minutes per IP.

PROD-1877
This commit is contained in:
Waheed Ahmed
2020-07-07 22:44:22 +05:00
parent d26854c14f
commit a6a69224d1
6 changed files with 40 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cms/envs/common.py
View File

@@ -2253,4 +2253,4 @@ DISABLE_DEPRECATED_SIGNIN_URL = False
DISABLE_DEPRECATED_SIGNUP_URL = False
##### LOGISTRATION RATE LIMIT SETTINGS #####
LOGISTRATION_RATELIMIT_RATE = '500/5m'
LOGISTRATION_RATELIMIT_RATE = '100/5m'

3
cms/envs/test.py
View File

@@ -298,3 +298,6 @@ SYSTEM_WIDE_ROLE_CLASSES = os.environ.get("SYSTEM_WIDE_ROLE_CLASSES", [])
DEFAULT_MOBILE_AVAILABLE = True
PROCTORING_SETTINGS = {}
##### LOGISTRATION RATE LIMIT SETTINGS #####
LOGISTRATION_RATELIMIT_RATE = '5/5m'