Alan Parra f4b0b5b3ac Add rate limiting to passwordless endpoints (#10737) ...

Passwordless endpoints are rate limited because they allow unauthenticated
challenge generation. The endpoint rate limits are applied in addition to
(pre-existing) storage limits.

Setting limits to Auth only would be sufficient, but it seems best to apply
limits to Proxy as well, so we may spare Auth of unnecessary load.

Auth already has a framework for RPC rate limiting, so we took advantage of it.
The solution for the Proxy is rather simple - the handler is decorated with the
appropriate limits.

#9160

* Fix shadowing of grpcServer variable
* Add rate limiting for CreateAuthenticateChallenge
* Add rate limiting for /mfa/login/begin
* Safe parallel tests

2022-03-03 13:44:06 +00:00

..

defaults_test.go

Handle HTTP connections to TLS socket in a more graceful way (#2886)

2019-08-13 14:03:22 -03:00

defaults.go

Add rate limiting to passwordless endpoints (#10737)

2022-03-03 13:44:06 +00:00