Skip to content
Snippets Groups Projects
  1. May 12, 2021
  2. Mar 30, 2021
    • Erik Johnston's avatar
      Make RateLimiter class check for ratelimit overrides (#9711) · 963f4309
      Erik Johnston authored
      This should fix a class of bug where we forget to check if e.g. the appservice shouldn't be ratelimited.
      
      We also check the `ratelimit_override` table to check if the user has ratelimiting disabled. That table is really only meant to override the event sender ratelimiting, so we don't use any values from it (as they might not make sense for different rate limits), but we do infer that if ratelimiting is disabled for the user we should disabled all ratelimits.
      
      Fixes #9663
      Unverified
      963f4309
  3. Feb 16, 2021
  4. Oct 29, 2020
    • Erik Johnston's avatar
      Add ability for access tokens to belong to one user but grant access to another user. (#8616) · f21e24ff
      Erik Johnston authored
      We do it this way round so that only the "owner" can delete the access token (i.e. `/logout/all` by the "owner" also deletes that token, but `/logout/all` by the "target user" doesn't).
      
      A future PR will add an API for creating such a token.
      
      When the target user and authenticated entity are different the `Processed request` log line will be logged with a: `{@admin:server as @bob:server} ...`. I'm not convinced by that format (especially since it adds spaces in there, making it harder to use `cut -d ' '` to chop off the start of log lines). Suggestions welcome.
      Unverified
      f21e24ff
  5. Aug 24, 2020
  6. Aug 21, 2020
  7. Jun 05, 2020
  8. May 10, 2019
  9. Mar 05, 2019
    • Brendan Abolivier's avatar
      Add rate-limiting on registration (#4735) · a4c3a361
      Brendan Abolivier authored
      
      * Rate-limiting for registration
      
      * Add unit test for registration rate limiting
      
      * Add config parameters for rate limiting on auth endpoints
      
      * Doc
      
      * Fix doc of rate limiting function
      
      Co-Authored-By: default avatarbabolivier <contact@brendanabolivier.com>
      
      * Incorporate review
      
      * Fix config parsing
      
      * Fix linting errors
      
      * Set default config for auth rate limiting
      
      * Fix tests
      
      * Add changelog
      
      * Advance reactor instead of mocked clock
      
      * Move parameters to registration specific config and give them more sensible default values
      
      * Remove unused config options
      
      * Don't mock the rate limiter un MAU tests
      
      * Rename _register_with_store into register_with_store
      
      * Make CI happy
      
      * Remove unused import
      
      * Update sample config
      
      * Fix ratelimiting test for py2
      
      * Add non-guest test
      Unverified
      a4c3a361
  10. Aug 10, 2018
  11. Feb 19, 2016
  12. Sep 12, 2014
  13. Sep 02, 2014
Loading