Browse Source

Add rate limit for reporting (#13390)

Eugen Rochko 4 years ago
parent
commit
c9efb400b4
3 changed files with 8 additions and 3 deletions
  1. 2 0
      app/controllers/api/v1/reports_controller.rb
  2. 3 3
      app/lib/rate_limiter.rb
  3. 3 0
      app/models/report.rb

+ 2 - 0
app/controllers/api/v1/reports_controller.rb

@@ -4,6 +4,8 @@ class Api::V1::ReportsController < Api::BaseController
   before_action -> { doorkeeper_authorize! :write, :'write:reports' }, only: [:create]
   before_action :require_user!
 
+  override_rate_limit_headers :create, family: :reports
+
   def create
     @report = ReportService.new.call(
       current_account,

+ 3 - 3
app/lib/rate_limiter.rb

@@ -14,9 +14,9 @@ class RateLimiter
       period: 3.hours.freeze,
     }.freeze,
 
-    media: {
-      limit: 30,
-      period: 30.minutes.freeze,
+    reports: {
+      limit: 400,
+      period: 24.hours.freeze,
     }.freeze,
   }.freeze
 

+ 3 - 0
app/models/report.rb

@@ -18,6 +18,9 @@
 
 class Report < ApplicationRecord
   include Paginable
+  include RateLimitable
+
+  rate_limit by: :account, family: :reports
 
   belongs_to :account
   belongs_to :target_account, class_name: 'Account'