pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-02-15 09:26:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

introduce strict rate limitso on auth router endpoints

Browse Source
This commit is contained in:
miloschwartz
2025-07-14 18:00:41 -07:00
parent d6fdb38c22
commit b7df0b122d
6 changed files with 236 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
server/routers/auth/verifyTotp.ts
View File

@@ -75,6 +75,14 @@ export async function verifyTotp(
)
);
user = res;
const validPassword = await verifyPassword(
password,
user.passwordHash!
);
if (!validPassword) {
return next(unauthorized());
}
}
if (!user) {
@@ -91,14 +99,6 @@ export async function verifyTotp(
);
}
const validPassword = await verifyPassword(
password,
user.passwordHash!
);
if (!validPassword) {
return next(unauthorized());
}
if (user.type !== UserType.Internal) {
return next(
createHttpError(