github-mirror/discourse
github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-04-14 19:06:49 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

DEV: Extract global admin api rate limiting into a dedicated method.

Browse Source 
* We have a use case for overriding the rate limiting logic in a
  plugin.
This commit is contained in:
Guo Xiang Tan 2018-09-04 16:35:49 +08:00
parent 6e3f249aea
commit d1af89e3b3
1 changed files with 14 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
lib/auth/default_current_user_provider.rb
View File

@ -81,12 +81,7 @@ class Auth::DefaultCurrentUserProvider
raise Discourse::InvalidAccess.new(I18n.t('invalid_api_credentials'), nil, custom_message: "invalid_api_credentials") unless current_user
raise Discourse::InvalidAccess if current_user.suspended? || !current_user.active
@env[API_KEY_ENV] = true
# we do not run this rate limiter while profiling
if Rails.env != "profile"
limiter_min = RateLimiter.new(nil, "admin_api_min_#{api_key}", GlobalSetting.max_admin_api_reqs_per_key_per_minute, 60)
limiter_min.performed!
end
rate_limit_admin_api_requests(api_key)
end
# user api key handling
@ -296,4 +291,17 @@ class Auth::DefaultCurrentUserProvider
end
end
private
def rate_limit_admin_api_requests(api_key)
return if Rails.env == "profile"
RateLimiter.new(
nil,
"admin_api_min_#{api_key}",
GlobalSetting.max_admin_api_reqs_per_key_per_minute,
60
).performed!
end
end