4 Commits

Author	SHA1	Message	Date
Fabien 'egg' O'Carroll	1af2b50dcf	Added userAuth brute middleware to members auth endpoint (#13152) ... refs https://github.com/TryGhost/Team/issues/696 The userAuth spam prevention logic is reused, but a new piece of middleware has to be created so that we can use a custom lookup key to conatin the member email. We must also add json parsing middleware to the route so that the brute middleware can read the email. The express body-parser middleware handles multiple instances on the same route, so this doesn't cause problems upstream. https://github.com/expressjs/body-parser/blob/1.19.0/lib/types/json.js#L99-L103	2021-07-19 09:40:38 +01:00
naz	8ddf83f3c5	Fixed "no-shadow" linting error in server modules (#12287) ... refs 143921948d - Continuation of changes started in referenced commit	2020-10-20 12:02:56 +13:00
Fabien O'Carroll	5cecf0cd61	Added brute protection to content api (#10343) ... * Added spam config for content api key no-issue * Created contentApiKey spam prevention method * Added contentApiKey brute middleware no-issue This middleware attaches a listener for when the request has completed, if the request ends with a successful response code, we reset any spam prevention data for that ip. * Added contentApiKey brute middleware to the content api * Multipled maxWait by 24, to 24 hours	2019-01-07 20:03:46 +07:00
Rishabh Garg	fcd275f6c0	Refactored web/middleware and web/utils to web/shared (#9892) ... refs #9866 - Moved web/middleware to web/shared/middlewares - Moved util file to web/shared/utils	2018-09-20 20:04:34 +02:00