f.weber/homebrewery
0
0
Fork 0
mirror of https://github.com/naturalcrit/homebrewery.git synced 2026-01-11 19:52:41 +00:00
Code Wiki Activity

remove rateLimiter

Browse Source
This commit is contained in:
Víctor Losada Hernández
2024-10-01 21:58:42 +02:00
parent ab32695ac9
commit d6ca6592a2
1 changed files with 14 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
server/admin.api.js
View File

@@ -3,38 +3,27 @@ const router = require('express').Router();
const Moment = require('moment'); const Moment = require('moment');
const templateFn = require('../client/template.js'); const templateFn = require('../client/template.js');
const zlib = require('zlib'); const zlib = require('zlib');
const rateLimit = require('express-rate-limit');
// Define rate limiter options
const loginLimiter = rateLimit({
timeWindow : 24 * 60 * 60 * 1000, // 24 hours window
max : 10, // limit each IP to 10 requests per timeWindow
handler : ()=>{throw { HBErrorCode: '54', code: 470, message: 'Too many failed login attempts, try again later' }; }
});
//Local version username and password //Local version username and password
process.env.ADMIN_USER = process.env.ADMIN_USER || 'admin'; process.env.ADMIN_USER = process.env.ADMIN_USER || 'admin';
process.env.ADMIN_PASS = process.env.ADMIN_PASS || 'password3'; process.env.ADMIN_PASS = process.env.ADMIN_PASS || 'password3';
const mw = { const mw = {
adminOnly : [ adminOnly : (req, res, next)=> {
loginLimiter, if(!req.get('authorization')) {
(req, res, next)=>{ return res
if(!req.get('authorization')) { .set('WWW-Authenticate', 'Basic realm="Authorization Required"')
return res .status(401)
.set('WWW-Authenticate', 'Basic realm="Authorization Required"') .send('Authorization Required');
.status(401)
.send('Authorization Required');
}
const [username, password] = Buffer.from(req.get('authorization').split(' ').pop(), 'base64')
.toString('ascii')
.split(':');
if(process.env.ADMIN_USER === username && process.env.ADMIN_PASS === password) {
return next();
}
throw { HBErrorCode: '52', code: 401, message: 'Access denied' };
} }
] const [username, password] = Buffer.from(req.get('authorization').split(' ').pop(), 'base64')
.toString('ascii')
.split(':');
if(process.env.ADMIN_USER === username && process.env.ADMIN_PASS === password) {
return next();
}
throw { HBErrorCode: '52', code: 401, message: 'Access denied' };
}
}; };
const junkBrewPipeline = [ const junkBrewPipeline = [