Fix incorrect rate limit on PUT requests (#31356)
This commit is contained in:
parent
a5b4a2b7e7
commit
a5641a9244
1 changed files with 1 additions and 1 deletions
|
@ -142,7 +142,7 @@ class Rack::Attack
|
||||||
end
|
end
|
||||||
|
|
||||||
throttle('throttle_password_change/account', limit: 10, period: 10.minutes) do |req|
|
throttle('throttle_password_change/account', limit: 10, period: 10.minutes) do |req|
|
||||||
req.warden_user_id if req.put? || (req.patch? && req.path_matches?('/auth'))
|
req.warden_user_id if (req.put? || req.patch?) && (req.path_matches?('/auth') || req.path_matches?('/auth/password'))
|
||||||
end
|
end
|
||||||
|
|
||||||
self.throttled_responder = lambda do |request|
|
self.throttled_responder = lambda do |request|
|
||||||
|
|
Loading…
Reference in a new issue