opencrvs / opencrvs-core

A global solution to civil registration
https://www.opencrvs.org
Other
79 stars 58 forks source link

fix: increase rate limit on team searches #7277

Closed naftis closed 5 days ago

naftis commented 5 days ago

Due to QA running into the rate limit with the team page, we can increase the limit from 10 to 20. It should still be quite slow for brute-forcing attacks, although it allows a bit more flexibility for a.mweene b.mweene c.mweene ... k.mweene types of brute-force attacks where the attacker might already know something about the user.

Bruteforce attacks in general should be fairly well mitigated though, as they need a JWT, and VPN access.