diff options
| author | syuilo <Syuilotan@yahoo.co.jp> | 2021-10-08 14:05:07 +0900 |
|---|---|---|
| committer | syuilo <Syuilotan@yahoo.co.jp> | 2021-10-08 14:05:07 +0900 |
| commit | 5bf69476f625f3c4764cfb242d7d6a21c808f8b8 (patch) | |
| tree | d7ed00070479af5d2de34a728b4a6a0b158b91c2 /src/server/api/endpoints/ap/show.ts | |
| parent | Revert "Revert "Fix idb"" (#7860) (diff) | |
| download | sharkey-5bf69476f625f3c4764cfb242d7d6a21c808f8b8.tar.gz sharkey-5bf69476f625f3c4764cfb242d7d6a21c808f8b8.tar.bz2 sharkey-5bf69476f625f3c4764cfb242d7d6a21c808f8b8.zip | |
enhance(api): ap系のエンドポイントをログイン必須化+レートリミット追加
他のサーバーにリクエストを送信するという性質上、攻撃の踏み台にされることがあるため
Diffstat (limited to 'src/server/api/endpoints/ap/show.ts')
| -rw-r--r-- | src/server/api/endpoints/ap/show.ts | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/src/server/api/endpoints/ap/show.ts b/src/server/api/endpoints/ap/show.ts index aa0dae070c..32685d44bd 100644 --- a/src/server/api/endpoints/ap/show.ts +++ b/src/server/api/endpoints/ap/show.ts @@ -11,11 +11,17 @@ import { Note } from '@/models/entities/note'; import { User } from '@/models/entities/user'; import { fetchMeta } from '@/misc/fetch-meta'; import { isActor, isPost, getApId } from '@/remote/activitypub/type'; +import ms from 'ms'; export const meta = { tags: ['federation'], - requireCredential: false as const, + requireCredential: true as const, + + limit: { + duration: ms('1hour'), + max: 30 + }, params: { uri: { |