NowChess/NowChessSystems
4
0
Fork 0
Code Issues Pull Requests 2 Packages Projects Releases Wiki Activity

feat(security): add per-IP rate limiting to account API endpoints #57

Open
Janis wants to merge 2 commits from feat/NCS-65-rate-limit-api-endpoints into main
pull from: feat/NCS-65-rate-limit-api-endpoints
merge into: NowChess:main
Conversation 1 Commits 2 Files Changed 8
+2 -1
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit a20bee3b93 - Show all commits
modules/security/src/main/scala/de/nowchess/security/RateLimitFilter.scala
+2 -1
View File
@@ -38,7 +38,8 @@ class RateLimitFilter extends ContainerRequestFilter:
override def filter(ctx: ContainerRequestContext): Unit =
val ip = clientIp(ctx)
if enabled && !isGatlingRequest(ctx) && isOverLimit(ip) then
log.warnf("Rate limit exceeded for IP %s on %s %s", ip, ctx.getMethod, ctx.getUriInfo.getPath)
val path = Option(ctx.getUriInfo).map(_.getPath).getOrElse("-")
log.warnf("Rate limit exceeded for IP %s on %s %s", ip, ctx.getMethod, path)
ctx.abortWith(Response.status(429).build())
private def isGatlingRequest(ctx: ContainerRequestContext): Boolean =