tt/ttstd-infinite-canvas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): 登录限流按解析后的用户身份共享计数

Browse Source 
合并 #680：登录限流按解析后的用户身份共享计数
This commit is contained in:
Catlaxy AI
2026-10-06 09:22:29 +08:00
committed by GitHub
parent 3daf9db53a
commit d996e5a061
5 changed files with 104 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
backend/internal/handler/auth.go
View File

@@ -124,7 +124,12 @@ func RegisterAuthRoutes(r *gin.RouterGroup, svc *service.Service) {
if !available || !enforceRateLimit(c, "login-ip:"+c.ClientIP(), policy.Request.LoginIPPerTenMinutes, 10*time.Minute) {
return
}
if !enforceRateLimit(c, "login:"+c.ClientIP()+":"+strings.ToLower(strings.TrimSpace(req.Username)), policy.Request.LoginAccountPerTenMinutes, 10*time.Minute) {
subject, err := svc.LoginRateLimitSubject(req.Username)
if err != nil {
failService(c, err)
return
}
if !enforceRateLimit(c, "login:"+c.ClientIP()+":"+subject, policy.Request.LoginAccountPerTenMinutes, 10*time.Minute) {
return
}
result, err := svc.Login(req)