Austin/dify
1
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2024-11-16 19:59:50 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

feat: add email code login rate limiter

Browse Source
This commit is contained in:
Joe 2024-09-23 10:17:51 +08:00
parent 75fb4ca74d
commit 346cae9b3c
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
api/services/account_service.py
View File

@ -45,6 +45,9 @@ from tasks.mail_reset_password_task import send_reset_password_mail_task
class AccountService:
reset_password_rate_limiter = RateLimiter(prefix="reset_password_rate_limit", max_attempts=5, time_window=60 * 60)
email_code_login_rate_limiter = RateLimiter(
prefix="email_code_login_rate_limit", max_attempts=5, time_window=60 * 5
)
@staticmethod
def load_user(user_id: str) -> None | Account:
@ -280,6 +283,9 @@ class AccountService:
@classmethod
def send_email_code_login_email(cls, account: Optional[Account] = None, email: Optional[str] = None):
if cls.email_code_login_rate_limiter.is_rate_limited(email):
raise RateLimitExceededError(f"Rate limit exceeded for email: {email}. Please try again later.")
code = "".join([str(random.randint(0, 9)) for _ in range(6)])
token = TokenManager.generate_token(
account=account, email=email, token_type="email_code_login", additional_data={"code": code}
@ -289,7 +295,7 @@ class AccountService:
to=account.email if account else email,
code=code,
)
cls.email_code_login_rate_limiter.increment_rate_limit(email)
return token
@classmethod