Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-27 22:49:56 -05:00
Code Issues Activity
ghost/core/server/web/api
History
Fabien O'Carroll ae71f2deca Added spam prevention for v2 sessions (#10030) 
no-issue

- Added spam prevention to POST /session
  - This blocks repeated requests the the /session endpoint preventing brute
force password attacks
- Updated session controller to reset brute middleware
  - This updates the session controller to reset the brute force protection
on a successful login. This is required so that a user is not locked out
forever :o!!
2018-10-18 09:58:29 +01:00
..
v0.1 Optimised web/ debug logs 2018-10-04 17:43:08 +02:00
v2 Added spam prevention for v2 sessions (#10030) 2018-10-18 09:58:29 +01:00
README.md Added v2 api endpoints (#9874) 2018-09-18 15:59:06 +02:00

README.md

Ghost APIs

Ghost is moving towards providing more robust APIs in the future. A plan and decisions can be found here.

WARNING!

The v2 API (/ghost/api/v2/* endpoints) is to be considered under active development until this message is removed. Please use with caution and don't rely too heavy on it just yet :)