foltik/shimapan
1
0
Fork 0
mirror of https://github.com/Foltik/Shimapan synced 2024-12-02 10:40:14 -05:00
Code Issues Releases Wiki Activity

Fix rate limit error and remove log

Browse Source
This commit is contained in:
Jack Foltz 2019-01-02 17:18:07 -05:00
parent bbfb1c4e35
commit b5147c13ca
Signed by: foltik
GPG Key ID: D1F0331758D1F29A
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
app/routes/api/auth.js
View File

@ -37,7 +37,7 @@ const registerParams = [
{name: 'invite', type: 'string'}]; {name: 'invite', type: 'string'}];
router.post('/register', router.post('/register',
rateLimit(config.get('RateLimit.register.window'), config.get('RateLimit.register.max'), true), rateLimit(config.get('RateLimit.register.window'), config.get('RateLimit.register.max')),
verifyBody(registerParams), verifyBody(registerParams),
async (req, res) => { async (req, res) => {
const username = canonicalize(req.body.displayname); const username = canonicalize(req.body.displayname);
@ -81,18 +81,15 @@ const loginParams = [
{name: 'password', type: 'string'}]; {name: 'password', type: 'string'}];
router.post('/login', router.post('/login',
rateLimit(config.get('RateLimit.login.window'), config.get('RateLimit.login.max'), true), rateLimit(config.get('RateLimit.login.window'), config.get('RateLimit.login.max')),
verifyBody(loginParams), verifyBody(loginParams),
async (req, res, next) => { async (req, res, next) => {
req.body.username = canonicalize(req.body.displayname); req.body.username = canonicalize(req.body.displayname);
// Authenticate // Authenticate
const user = await passportAuthenticate(req, res, next); const user = await passportAuthenticate(req, res, next);
if (!user) { if (!user)
// Log failure
await fs.appendFile('auth.log', `${new Date().toISOString()} login ${req.ip}\n`);
return res.status(401).json({'message': 'Unauthorized.'}); return res.status(401).json({'message': 'Unauthorized.'});
}
// Create session // Create session
await passportLogin(user, req); await passportLogin(user, req);