Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(appointments): Rate limit config creation and booking #5680

Merged
merged 1 commit into from
Jan 10, 2024

Conversation

ChristophWurst
Copy link
Member

Limits the number of bookings a single user can do.

@ChristophWurst ChristophWurst added the 3. to review Waiting for reviews label Jan 10, 2024
@ChristophWurst ChristophWurst self-assigned this Jan 10, 2024
@ChristophWurst
Copy link
Member Author

/backport to stable4.6

@backportbot-nextcloud backportbot-nextcloud bot added the backport-request A backport was requested for this pull request label Jan 10, 2024
@ChristophWurst
Copy link
Member Author

/backport to stable3.5

Copy link

codecov bot commented Jan 10, 2024

Codecov Report

Attention: 10 lines in your changes are missing coverage. Please review.

Comparison is base (da06ac5) 24.44% compared to head (0f77b41) 24.42%.
Report is 3 commits behind head on main.

Files Patch % Lines
src/components/AppointmentConfigModal.vue 0.00% 6 Missing ⚠️
src/components/Appointments/AppointmentDetails.vue 0.00% 4 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##               main    #5680      +/-   ##
============================================
- Coverage     24.44%   24.42%   -0.03%     
  Complexity      418      418              
============================================
  Files           243      243              
  Lines         10859    10870      +11     
  Branches       1780     1787       +7     
============================================
  Hits           2655     2655              
- Misses         8204     8215      +11     
Flag Coverage Δ
javascript 15.50% <0.00%> (-0.02%) ⬇️
php 61.63% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@ChristophWurst
Copy link
Member Author

Psalm fails

Abusing the appointment config endpoint can lead to additional server
load. Sending bulks of booking requests can lead to mass notifications
and emails and server load, too.

Signed-off-by: Christoph Wurst <[email protected]>
@ChristophWurst ChristophWurst force-pushed the fix/appointments/rate-limit-config-creation branch from af1f17f to 0f77b41 Compare January 10, 2024 14:34
@ChristophWurst ChristophWurst added 4. to release Ready to be released and/or waiting for tests to finish and removed 3. to review Waiting for reviews labels Jan 10, 2024
@ChristophWurst ChristophWurst merged commit b19443d into main Jan 10, 2024
36 of 38 checks passed
@ChristophWurst ChristophWurst deleted the fix/appointments/rate-limit-config-creation branch January 10, 2024 14:42
@backportbot-nextcloud
Copy link

The backport to stable3.5 failed. Please do this backport manually.

# Switch to the target branch and update it
git checkout stable3.5
git pull origin stable3.5

# Create the new backport branch
git checkout -b fix/foo-stable3.5

# Cherry pick the change from the commit sha1 of the change against the default branch
# This might cause conflicts. Resolve them.
git cherry-pick abc123

# Push the cherry pick commit to the remote repository and open a pull request
git push origin fix/foo-stable3.5

Error: Unknown error

More info at https://docs.nextcloud.com/server/latest/developer_manual/getting_started/development_process.html#manual-backport

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
4. to release Ready to be released and/or waiting for tests to finish backport-request A backport was requested for this pull request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants