Merge branch 'develop' into fix/conversation_search_api

fix: throttle conversation search endpoint to prevent abuse
2024-02-15 14:09:25 +05:30 · 2024-02-13 18:57:54 +05:30
1 changed files with 6 additions and 0 deletions
@@ -154,6 +154,12 @@ class Rack::Attack
    match_data[:account_id] if match_data.present?
  end

+  # Prevent abuse of conversation search api
+  throttle('/api/v1/accounts/:account_id/conversations/search', limit: 5, period: 1.minute) do |req|
+    match_data = %r{/api/v1/accounts/(?<account_id>\d+)/conversations/search}.match(req.path)
+    match_data[:account_id] if match_data.present?
+  end
+
  ## ----------------------------------------------- ##
 end
Author	SHA1	Message	Date
Muhsin KelothandGitHub	81b64f02f6	Merge branch 'develop' into fix/conversation_search_api	2024-02-15 14:09:25 +05:30
Muhsin Keloth	cd31cc8e71	fix: throttle conversation search endpoint to prevent abuse	2024-02-13 18:57:54 +05:30