Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use Privacy Access Tokens, CAPTCHA, and Rack to rate limit sign ins and sign ups #3519

Open
wants to merge 40 commits into
base: master
Choose a base branch
from
Open

Use Privacy Access Tokens, CAPTCHA, and Rack to rate limit sign ins and sign ups #3519

wants to merge 40 commits into from

Commits on Mar 19, 2023

  1. throttle login by user, no more than 15 per hour

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    c336047 View commit details
    Browse the repository at this point in the history

  2. throttle sign up by ip, no more than 50 per hour

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    5962b58 View commit details
    Browse the repository at this point in the history

  3. create const to expose rack login cache key

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    96ed264 View commit details
    Browse the repository at this point in the history

  4. add content security policy config for hcaptcha

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    c101b7b View commit details
    Browse the repository at this point in the history

  5. add i18n for captcha

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    e520d8a View commit details
    Browse the repository at this point in the history

  6. add service class to handle hcaptcha verification

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    46c123c View commit details
    Browse the repository at this point in the history

  7. add captcha to sign in flow for login attempts 4-15

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    540dab4 View commit details
    Browse the repository at this point in the history

  8. rename should_verify_login to should_verify_sign_in

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    d3f30be View commit details
    Browse the repository at this point in the history

  9. create const to expose rack sign up cache key

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    228927d View commit details
    Browse the repository at this point in the history

  10. add method to check if we should captcha verify a sign up

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    cdd917d View commit details
    Browse the repository at this point in the history

  11. update i18n for captcha so they can be shared

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    e9ae239 View commit details
    Browse the repository at this point in the history

  12. use request.remote_ip instead of request.ip

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    a2be52e View commit details
    Browse the repository at this point in the history

  13. add captcha to sign up flow for attempts 2-50

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    bcc1f71 View commit details
    Browse the repository at this point in the history

  14. creating privacy pass challenge and redeeming token working

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    aeffdae View commit details
    Browse the repository at this point in the history

  15. hook up privacy pass logic to sign in

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    61d19a8 View commit details
    Browse the repository at this point in the history

  16. move privacy pass stuff into concern

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    1bb46a7 View commit details
    Browse the repository at this point in the history

  17. fix bug when reading int from cache

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    c4aa940 View commit details
    Browse the repository at this point in the history

  18. hook up privacy pass logic to sign up

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    cf2146a View commit details
    Browse the repository at this point in the history

  19. tokenizer and redeemer unit tests

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    39f5277 View commit details
    Browse the repository at this point in the history

  20. integration test privacy pass sign in and sign up flows

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    7c2cadc View commit details
    Browse the repository at this point in the history

  21. handle nil auth header

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    f215648 View commit details
    Browse the repository at this point in the history

  22. cleanup comments

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    9abaaef View commit details
    Browse the repository at this point in the history

  23. lint fix

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    20cecb9 View commit details
    Browse the repository at this point in the history

  24. fix base64 string

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    54eb409 View commit details
    Browse the repository at this point in the history

  25. resolve rack test now that captcha is added

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    494769e View commit details
    Browse the repository at this point in the history

  26. resolve PR feedback

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    508b0b2 View commit details
    Browse the repository at this point in the history

  27. add env vars to unicorn k8s container definition

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    6dd4474 View commit details
    Browse the repository at this point in the history

  28. add hcaptcha secrets

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    3cc8e6d View commit details
    Browse the repository at this point in the history

  29. clean up concerns

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    7208230 View commit details
    Browse the repository at this point in the history

  30. feature flag privacy pass

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    72bc324 View commit details
    Browse the repository at this point in the history

  31. lint fix

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    71880ce View commit details
    Browse the repository at this point in the history

  32. rename LD variation

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    1b89db2 View commit details
    Browse the repository at this point in the history

  33. lint fix

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    da8d566 View commit details
    Browse the repository at this point in the history

  34. add context kind

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    007936d View commit details
    Browse the repository at this point in the history

  35. add hcaptcha vals to secrets

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    8b7384f View commit details
    Browse the repository at this point in the history

  36. use Faraday instead of RestClient

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    d7c709b View commit details
    Browse the repository at this point in the history

  37. fix bug when user not found on signing in and captcha conditions met

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    cffedcc View commit details
    Browse the repository at this point in the history

  38. fix tests

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    50a120f View commit details
    Browse the repository at this point in the history

  39. add privacy pass issuer public key to secrets

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    a984568 View commit details
    Browse the repository at this point in the history

  40. flip negative conditional

    @mercedesb
    mercedesb committed Mar 19, 2023
    Configuration menu
    Copy the full SHA
    2619a61 View commit details
    Browse the repository at this point in the history