enhance(api): ap系のエンドポイントをログイン必須化+レートリミット追加
他のサーバーにリクエストを送信するという性質上、攻撃の踏み台にされることがあるため
This commit is contained in:
parent
597c9761cb
commit
5bf69476f6
3 changed files with 15 additions and 2 deletions
|
|
@ -2,11 +2,17 @@ import $ from 'cafy';
|
|||
import define from '../../define';
|
||||
import Resolver from '@/remote/activitypub/resolver';
|
||||
import { ApiError } from '../../error';
|
||||
import ms from 'ms';
|
||||
|
||||
export const meta = {
|
||||
tags: ['federation'],
|
||||
|
||||
requireCredential: false as const,
|
||||
requireCredential: true as const,
|
||||
|
||||
limit: {
|
||||
duration: ms('1hour'),
|
||||
max: 30
|
||||
},
|
||||
|
||||
params: {
|
||||
uri: {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue