melosh/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ratelimit): block on 5th attempt not 6th

Browse Source
This commit is contained in:
mkelvers
2026-04-22 10:49:03 +02:00
parent e4cff38773
commit 621d4e1bf1
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/middleware/ratelimit.go
View File

@@ -76,8 +76,8 @@ func RateLimitAuth(next http.Handler) http.Handler {
v.lastSeen = time.Now() v.lastSeen = time.Now()
} }
// If more than 5 attempts within a minute, block // If 5 or more attempts within a minute, block
if exists && v.attempts > 5 { if exists && v.attempts >= 5 {
mu.Unlock() mu.Unlock()
if strings.HasPrefix(r.URL.Path, "/") { if strings.HasPrefix(r.URL.Path, "/") {
http.Redirect(w, r, fmt.Sprintf("%s?error=rate_limited", r.URL.Path), http.StatusFound) http.Redirect(w, r, fmt.Sprintf("%s?error=rate_limited", r.URL.Path), http.StatusFound)