summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorMark Felder <feld@feld.me>2024-09-04 09:19:07 -0400
committerMark Felder <feld@feld.me>2024-09-04 09:22:58 -0400
commit427da7a99a30ebc7a7deb54e7704b5d8dffea199 (patch)
tree0db83eafc104c5459851170dc8b91241691dcbd3 /lib
parentfbcfbde833b48f880fd4f55314e0d2a51186701b (diff)
downloadpleroma-427da7a99a30ebc7a7deb54e7704b5d8dffea199.tar.gz
pleroma-427da7a99a30ebc7a7deb54e7704b5d8dffea199.zip
Rate Limit the OAuth App spam
Diffstat (limited to 'lib')
-rw-r--r--lib/pleroma/web/mastodon_api/controllers/app_controller.ex2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/pleroma/web/mastodon_api/controllers/app_controller.ex b/lib/pleroma/web/mastodon_api/controllers/app_controller.ex
index 844673ae0..6cfeb712e 100644
--- a/lib/pleroma/web/mastodon_api/controllers/app_controller.ex
+++ b/lib/pleroma/web/mastodon_api/controllers/app_controller.ex
@@ -19,6 +19,8 @@ defmodule Pleroma.Web.MastodonAPI.AppController do
action_fallback(Pleroma.Web.MastodonAPI.FallbackController)
+ plug(Pleroma.Web.Plugs.RateLimiter, [name: :oauth_app_creation] when action == :create)
+
plug(:skip_auth when action in [:create, :verify_credentials])
plug(Pleroma.Web.ApiSpec.CastAndValidate)