Harden explorer API to abuse

hyperlane-xyz / hyperlane-explorer

Web app for the Hyperlane Explorer

https://explorer.hyperlane.xyz

Other

50 stars 46 forks source link

Harden explorer API to abuse #87

Open jmrossy opened 4 weeks ago

jmrossy commented 4 weeks ago

In response to abuse discussed here: https://discord.com/channels/935678348330434570/1244947293392736387/1244953319391236108

Options include authentication, rate limiting, DDoS protection services, or privatizing the API entirely.

avious00 commented 3 weeks ago

ser is https://github.com/hyperlane-xyz/hyperlane-explorer/issues/9 a dupe? seems like a component of this issue

avious00 commented 3 weeks ago

capturing that Cryptorank.io has asked for this, will need more requests to prioritize and reenable explorer api

jmrossy commented 3 weeks ago

@avious00 No #9 is not a dupe. There are two separate APIs. The Hasura GraphQL API, and the Explorer API (which under the covers uses hasura). Both are susceptible to abuse