Christopher Poile 17d11db395 MM-55320 - Limit length of browser user agent version; ratelimit the /sessions endpoint (#25900) ...

* add ratelimit to /sessions; cap userAgent version length; tests

* add MaxSessionsLimit; remove oldest session first; tests

* can't use slices in 1.20; improve test

* nits

* add GetLRUSessions; move limiting to CreateSession; remove rate limiting

* use queryBuilder

* mysql needs a limit when using offset

* update i18n

* refactor into limitNumberOfSessions; protect createSessionForUserAccessToken

* add comment to GetLRUSessions

* add limit to oauth path; PR comments

2024-03-21 08:48:24 -04:00

346 KiB

Исходник Ответственный История

Посмотреть исходник