Ghost/core/server/web/shared/middlewares
Fabien 'egg' O'Carroll 1af2b50dcf
Added userAuth brute middleware to members auth endpoint (#13152)
refs https://github.com/TryGhost/Team/issues/696

The userAuth spam prevention logic is reused, but a new piece of
middleware has to be created so that we can use a custom lookup key to
conatin the member email.

We must also add json parsing middleware to the route so that the brute
middleware can read the email.

The express body-parser middleware handles multiple instances on the
same route, so this doesn't cause problems upstream.

https://github.com/expressjs/body-parser/blob/1.19.0/lib/types/json.js#L99-L103
2021-07-19 09:40:38 +01:00
..
api Change to use @tryghost/logging 2021-06-15 15:59:11 +01:00
brute.js Added userAuth brute middleware to members auth endpoint (#13152) 2021-07-19 09:40:38 +01:00
cache-control.js Refactored cache-control mw to remove dependencies 2020-04-22 18:01:01 +01:00
custom-redirects.js Switch to @tryghost/debug, remove ghost-ignition 2021-06-15 17:24:22 +01:00
error-handler.js Corrected deprecation comment 2021-07-02 13:50:11 +04:00
index.js Moved normalize image mw into api app 2020-04-22 17:48:54 +01:00
maintenance.js Moved i18n to shared 2021-05-04 13:03:38 +01:00
pretty-urls.js Swapped to American English spellings 2021-06-09 16:39:06 +01:00
uncapitalise.js Moved i18n to shared 2021-05-04 13:03:38 +01:00
url-redirects.js Switch to @tryghost/debug, remove ghost-ignition 2021-06-15 17:24:22 +01:00