Commit Graph

14 Commits

Author SHA1 Message Date
carlad
7e438be4cf remove hard coded request path 2016-03-16 15:20:41 +01:00
Konstantin Haase
bddd9952a7 add ip whitelisting 2015-12-16 15:06:15 +01:00
Konstantin Haase
4f9cb29775 also add a throttle 2015-11-19 19:29:07 +01:00
Konstantin Haase
28ff2f6848 aggressive blocking on /auth/github 2015-11-19 19:24:18 +01:00
Konstantin Haase
cf416e6001 relax GET request throttling 2015-10-13 12:21:08 +02:00
Konstantin Haase
0249140dc8 auto banning: whitelist POST requests for in-browser handshake, on staging only ban for 10 seconds 2015-10-06 11:00:35 +02:00
Konstantin Haase
1bec0c1332 block clients sending many POST requests 2015-10-05 18:19:15 +02:00
Konstantin Haase
e218b13073 be less forgiving with /auth/github requests 2015-10-05 18:16:29 +02:00
carlad
9f2b880f83 increase throttle limit for authenticated requests 2015-09-18 09:58:34 +02:00
Konstantin Haase
e8769dddc5 add missing constant 2015-09-17 15:21:16 +02:00
Konstantin Haase
5e40f33fc1 remove left-overs from inheriting from Rack::Attack 2015-09-17 15:18:48 +02:00
Konstantin Haase
e478c621f2 no more inheritance 2015-09-17 15:13:33 +02:00
Konstantin Haase
dc0da3645a work around strange constant lookup 2015-09-17 15:10:27 +02:00
Konstantin Haase
9303a24595 base throttling on access token if the call is authenticated, rather than on IP address, improve throttling rules 2015-09-17 14:57:50 +02:00