0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-10 23:36:14 -05:00
ghost/core/server/web
Fabien 'egg' O'Carroll 1af2b50dcf
Added userAuth brute middleware to members auth endpoint (#13152)
refs https://github.com/TryGhost/Team/issues/696

The userAuth spam prevention logic is reused, but a new piece of
middleware has to be created so that we can use a custom lookup key to
conatin the member email.

We must also add json parsing middleware to the route so that the brute
middleware can read the email.

The express body-parser middleware handles multiple instances on the
same route, so this doesn't cause problems upstream.

https://github.com/expressjs/body-parser/blob/1.19.0/lib/types/json.js#L99-L103
2021-07-19 09:40:38 +01:00
..
admin Switch to @tryghost/debug, remove ghost-ignition 2021-06-15 17:24:22 +01:00
api Refactor imports in API's routes files 2021-07-07 18:33:25 +04:00
members Added userAuth brute middleware to members auth endpoint (#13152) 2021-07-19 09:40:38 +01:00
oauth Moved settings/cache to shared/settings-cache 2021-06-30 15:49:10 +01:00
parent Revert "Moved vhost mounts into boot file" 2021-07-08 07:10:18 +01:00
shared Added userAuth brute middleware to members auth endpoint (#13152) 2021-07-19 09:40:38 +01:00
site Fixed error when requesting resize of a blank image 2021-07-07 19:11:24 +01:00
index.js
well-known.js Moved settings/cache to shared/settings-cache 2021-06-30 15:49:10 +01:00