summaryrefslogtreecommitdiff
path: root/lib/gitlab/auth
diff options
context:
space:
mode:
authorPawel Chojnacki <pawel@chojnacki.ws>2017-02-20 15:09:05 +0100
committerPawel Chojnacki <pawel@chojnacki.ws>2017-03-06 15:41:25 +0100
commit0ef8a643489ad1a3da4431155326f0a6e206d870 (patch)
treebeb7bceb362f627e4864075e76d05e81f9b743da /lib/gitlab/auth
parent9cc0ff8f468c54e23172492d97f6d9b428d3ad2e (diff)
downloadgitlab-ce-0ef8a643489ad1a3da4431155326f0a6e206d870.tar.gz
Remove unecessary calls to limit_user!, UniqueIps Middleware, and address MR review
- cleanup formating in haml - clarify time window is in seconds - cleanup straneous chunks in db/schema - rename count_uniqe_ips to update_and_return_ips_count - other
Diffstat (limited to 'lib/gitlab/auth')
-rw-r--r--lib/gitlab/auth/too_many_ips.rb17
-rw-r--r--lib/gitlab/auth/unique_ips_limiter.rb34
2 files changed, 20 insertions, 31 deletions
diff --git a/lib/gitlab/auth/too_many_ips.rb b/lib/gitlab/auth/too_many_ips.rb
new file mode 100644
index 00000000000..ed862791551
--- /dev/null
+++ b/lib/gitlab/auth/too_many_ips.rb
@@ -0,0 +1,17 @@
+module Gitlab
+ module Auth
+ class TooManyIps < StandardError
+ attr_reader :user_id, :ip, :unique_ips_count
+
+ def initialize(user_id, ip, unique_ips_count)
+ @user_id = user_id
+ @ip = ip
+ @unique_ips_count = unique_ips_count
+ end
+
+ def message
+ "User #{user_id} from IP: #{ip} tried logging from too many ips: #{unique_ips_count}"
+ end
+ end
+ end
+end
diff --git a/lib/gitlab/auth/unique_ips_limiter.rb b/lib/gitlab/auth/unique_ips_limiter.rb
index 4b2b758be8a..7b1aa736769 100644
--- a/lib/gitlab/auth/unique_ips_limiter.rb
+++ b/lib/gitlab/auth/unique_ips_limiter.rb
@@ -1,19 +1,5 @@
module Gitlab
module Auth
- class TooManyIps < StandardError
- attr_reader :user_id, :ip, :unique_ips_count
-
- def initialize(user_id, ip, unique_ips_count)
- @user_id = user_id
- @ip = ip
- @unique_ips_count = unique_ips_count
- end
-
- def message
- "User #{user_id} from IP: #{ip} tried logging from too many ips: #{unique_ips_count}"
- end
- end
-
class UniqueIpsLimiter
USER_UNIQUE_IPS_PREFIX = 'user_unique_ips'
@@ -21,7 +7,7 @@ module Gitlab
def limit_user_id!(user_id)
if config.unique_ips_limit_enabled
ip = RequestContext.client_ip
- unique_ips = count_unique_ips(user_id, ip)
+ unique_ips = update_and_return_ips_count(user_id, ip)
raise TooManyIps.new(user_id, ip, unique_ips) if unique_ips > config.unique_ips_limit_per_user
end
end
@@ -36,8 +22,8 @@ module Gitlab
Gitlab::CurrentSettings.current_application_settings
end
- def count_unique_ips(user_id, ip)
- time = Time.now.to_i
+ def update_and_return_ips_count(user_id, ip)
+ time = Time.now.utc.to_i
key = "#{USER_UNIQUE_IPS_PREFIX}:#{user_id}"
Gitlab::Redis.with do |redis|
@@ -51,20 +37,6 @@ module Gitlab
end
end
end
-
- def initialize(app)
- @app = app
- end
-
- def call(env)
- begin
- @app.call(env)
- rescue TooManyIps => ex
-
- Rails.logger.info ex.message
- [403, { 'Content-Type' => 'text/plain', 'Retry-After' => UniqueIpsLimiter.config.unique_ips_limit_time_window }, ["Too many logins from different IPs\n"]]
- end
- end
end
end
end