yuuza/outline
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add rate limiting to unfurl endpoint

Browse Source
This commit is contained in:
Tom Moor
2023-07-22 13:27:58 -04:00
parent 5e705f3dc7
commit 8d549abaa9
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server/routes/api/urls/urls.ts
View File

@@ -3,17 +3,20 @@ import parseDocumentSlug from "@shared/utils/parseDocumentSlug";
import parseMentionUrl from "@shared/utils/parseMentionUrl"; import parseMentionUrl from "@shared/utils/parseMentionUrl";
import { NotFoundError } from "@server/errors"; import { NotFoundError } from "@server/errors";
import auth from "@server/middlewares/authentication"; import auth from "@server/middlewares/authentication";
import { rateLimiter } from "@server/middlewares/rateLimiter";
import validate from "@server/middlewares/validate"; import validate from "@server/middlewares/validate";
import { Document, User } from "@server/models"; import { Document, User } from "@server/models";
import { authorize } from "@server/policies"; import { authorize } from "@server/policies";
import { presentDocument, presentMention } from "@server/presenters/unfurls"; import { presentDocument, presentMention } from "@server/presenters/unfurls";
import { APIContext } from "@server/types"; import { APIContext } from "@server/types";
import { RateLimiterStrategy } from "@server/utils/RateLimiter";
import * as T from "./schema"; import * as T from "./schema";
const router = new Router(); const router = new Router();
router.post( router.post(
"urls.unfurl", "urls.unfurl",
rateLimiter(RateLimiterStrategy.OneThousandPerHour),
auth(), auth(),
validate(T.UrlsUnfurlSchema), validate(T.UrlsUnfurlSchema),
async (ctx: APIContext<T.UrlsUnfurlReq>) => { async (ctx: APIContext<T.UrlsUnfurlReq>) => {