saret/vaultwarden
1
0 Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.wiki.git synced 2026-10-24 22:06:49 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): rate limit prelogin and auth request endpoints (#7681)

Browse Source
This commit is contained in:
Bryan authored and GitHub committed 2026-09-08 12:14:16 +02:00
1 parent f1ff613008
commit f1c36b8c1d
2 files changed
+15 -9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/api/identity.rs
+4 -4
View File
@@ -1056,13 +1056,13 @@ async fn json_err_twofactor(
}
#[post("/accounts/prelogin", data = "<data>")]
async fn post_prelogin(data: Json<PreloginData>, conn: DbConn) -> Json<Value> {
prelogin(data, conn).await
async fn post_prelogin(data: Json<PreloginData>, ip: ClientIp, conn: DbConn) -> JsonResult {
prelogin(data, ip, conn).await
}
#[post("/accounts/prelogin/password", data = "<data>")]
async fn prelogin_password(data: Json<PreloginData>, conn: DbConn) -> Json<Value> {
prelogin(data, conn).await
async fn prelogin_password(data: Json<PreloginData>, ip: ClientIp, conn: DbConn) -> JsonResult {
prelogin(data, ip, conn).await
}
#[post("/accounts/register", data = "<data>")]