fix: Tighten rate limits on email.callback endpoint from defaults (#9917)

This commit is contained in:
Tom Moor
2025-08-13 22:45:03 -04:00
committed by GitHub
parent ba8ade0244
commit e8046f0d2f
+12 -2
View File
@@ -177,7 +177,17 @@ const emailCallback = async (ctx: APIContext<T.EmailCallbackReq>) => {
client,
});
};
router.get("email.callback", validate(T.EmailCallbackSchema), emailCallback);
router.post("email.callback", validate(T.EmailCallbackSchema), emailCallback);
router.get(
"email.callback",
rateLimiter(RateLimiterStrategy.TenPerHour),
validate(T.EmailCallbackSchema),
emailCallback
);
router.post(
"email.callback",
rateLimiter(RateLimiterStrategy.TenPerHour),
validate(T.EmailCallbackSchema),
emailCallback
);
export default router;