Merge pull request #4435 from nextcloud/allow-at-maximum-10-reset-mails-requests-per-5-minutes
Add at most 10 password reset requests per 5 minutes and IP range
This commit is contained in:
commit
1bd3bd33f9
|
@ -206,6 +206,7 @@ class LostController extends Controller {
|
||||||
/**
|
/**
|
||||||
* @PublicPage
|
* @PublicPage
|
||||||
* @BruteForceProtection(action=passwordResetEmail)
|
* @BruteForceProtection(action=passwordResetEmail)
|
||||||
|
* @AnonRateThrottle(limit=10, period=300)
|
||||||
*
|
*
|
||||||
* @param string $user
|
* @param string $user
|
||||||
* @return JSONResponse
|
* @return JSONResponse
|
||||||
|
|
|
@ -31,7 +31,9 @@ OC.Lostpassword = {
|
||||||
user : $('#user').val()
|
user : $('#user').val()
|
||||||
},
|
},
|
||||||
OC.Lostpassword.sendLinkDone
|
OC.Lostpassword.sendLinkDone
|
||||||
);
|
).fail(function() {
|
||||||
|
OC.Lostpassword.sendLinkError(OC.Lostpassword.sendErrorMsg);
|
||||||
|
});
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
|
|
Loading…
Reference in New Issue