diff options
| author | syuilo <Syuilotan@yahoo.co.jp> | 2021-10-08 14:05:07 +0900 |
|---|---|---|
| committer | syuilo <Syuilotan@yahoo.co.jp> | 2021-10-08 14:05:07 +0900 |
| commit | 5bf69476f625f3c4764cfb242d7d6a21c808f8b8 (patch) | |
| tree | d7ed00070479af5d2de34a728b4a6a0b158b91c2 /src/server/api/endpoints/ap/get.ts | |
| parent | Revert "Revert "Fix idb"" (#7860) (diff) | |
| download | sharkey-5bf69476f625f3c4764cfb242d7d6a21c808f8b8.tar.gz sharkey-5bf69476f625f3c4764cfb242d7d6a21c808f8b8.tar.bz2 sharkey-5bf69476f625f3c4764cfb242d7d6a21c808f8b8.zip | |
enhance(api): ap系のエンドポイントをログイン必須化+レートリミット追加
他のサーバーにリクエストを送信するという性質上、攻撃の踏み台にされることがあるため
Diffstat (limited to 'src/server/api/endpoints/ap/get.ts')
| -rw-r--r-- | src/server/api/endpoints/ap/get.ts | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/src/server/api/endpoints/ap/get.ts b/src/server/api/endpoints/ap/get.ts index 2cffce1f16..2f97a24774 100644 --- a/src/server/api/endpoints/ap/get.ts +++ b/src/server/api/endpoints/ap/get.ts @@ -2,11 +2,17 @@ import $ from 'cafy'; import define from '../../define'; import Resolver from '@/remote/activitypub/resolver'; import { ApiError } from '../../error'; +import ms from 'ms'; export const meta = { tags: ['federation'], - requireCredential: false as const, + requireCredential: true as const, + + limit: { + duration: ms('1hour'), + max: 30 + }, params: { uri: { |