Add rate limits for logins and sign-ups by IP (5 in 5 minutes) (#2079)

* Add rate limits for logins and sign-ups by IP (5 in 5 minutes)
Should be enough for normal attempts

* Add rate limit for forgotten password form as well

1 files changed, 0 insertions, 19 deletions

diff --git a/config/initializers/rack-attack.rb b/config/initializers/rack-attack.rb
deleted file mode 100644
index 70f7846d1..000000000
--- a/config/initializers/rack-attack.rb
+++ /dev/null
@@ -1,19 +0,0 @@
-class Rack::Attack
-  # Rate limits for the API
-  throttle('api', limit: 300, period: 5.minutes) do |req|
-    req.ip if req.path.match(/\A\/api\/v/)
-  end
-
-  self.throttled_response = lambda do |env|
-    now        = Time.now.utc
-    match_data = env['rack.attack.match_data']
-
-    headers = {
-      'X-RateLimit-Limit'     => match_data[:limit].to_s,
-      'X-RateLimit-Remaining' => '0',
-      'X-RateLimit-Reset'     => (now + (match_data[:period] - now.to_i % match_data[:period])).iso8601(6),
-    }
-
-    [429, headers, [{ error: 'Throttled' }.to_json]]
-  end
-end