set rate limit to 5/minute on new alias routes

This commit is contained in:
Son NK 2020-06-24 10:32:22 +02:00
parent 774ffcae3b
commit c91b44fa97
2 changed files with 6 additions and 2 deletions

View file

@ -11,7 +11,7 @@ from app.api.serializer import (
) )
from app.config import MAX_NB_EMAIL_FREE_PLAN from app.config import MAX_NB_EMAIL_FREE_PLAN
from app.dashboard.views.custom_alias import verify_prefix_suffix, signer from app.dashboard.views.custom_alias import verify_prefix_suffix, signer
from app.extensions import db from app.extensions import db, limiter
from app.log import LOG from app.log import LOG
from app.models import ( from app.models import (
Alias, Alias,
@ -27,6 +27,7 @@ from app.utils import convert_to_id
@api_bp.route("/alias/custom/new", methods=["POST"]) @api_bp.route("/alias/custom/new", methods=["POST"])
@limiter.limit("5/minute")
@require_api_auth @require_api_auth
def new_custom_alias(): def new_custom_alias():
""" """
@ -97,6 +98,7 @@ def new_custom_alias():
@api_bp.route("/v2/alias/custom/new", methods=["POST"]) @api_bp.route("/v2/alias/custom/new", methods=["POST"])
@limiter.limit("5/minute")
@require_api_auth @require_api_auth
def new_custom_alias_v2(): def new_custom_alias_v2():
""" """
@ -191,6 +193,7 @@ def new_custom_alias_v2():
@api_bp.route("/v3/alias/custom/new", methods=["POST"]) @api_bp.route("/v3/alias/custom/new", methods=["POST"])
@limiter.limit("5/minute")
@require_api_auth @require_api_auth
def new_custom_alias_v3(): def new_custom_alias_v3():
""" """

View file

@ -7,12 +7,13 @@ from app.api.serializer import (
serialize_alias_info_v2, serialize_alias_info_v2,
) )
from app.config import MAX_NB_EMAIL_FREE_PLAN from app.config import MAX_NB_EMAIL_FREE_PLAN
from app.extensions import db from app.extensions import db, limiter
from app.log import LOG from app.log import LOG
from app.models import Alias, AliasUsedOn, AliasGeneratorEnum from app.models import Alias, AliasUsedOn, AliasGeneratorEnum
@api_bp.route("/alias/random/new", methods=["POST"]) @api_bp.route("/alias/random/new", methods=["POST"])
@limiter.limit("5/minute")
@require_api_auth @require_api_auth
def new_random_alias(): def new_random_alias():
""" """