fix(core): Rate limit MFA verification endpoint

n8n-io · Aug 8, 2024 · f330449 · f330449
1 parent ee03400
commit f330449
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/cli/src/controllers/mfa.controller.ts b/packages/cli/src/controllers/mfa.controller.ts
@@ -47,7 +47,7 @@ export class MFAController {
 		};
 	}
 
-	@Post('/enable')
+	@Post('/enable', { rateLimit: true })
 	async activateMFA(req: MFA.Activate) {
 		const { token = null } = req.body;
 		const { id, mfaEnabled } = req.user;
@@ -78,7 +78,7 @@ export class MFAController {
 		await this.mfaService.disableMfa(id);
 	}
 
-	@Post('/verify')
+	@Post('/verify', { rateLimit: true })
 	async verifyMFA(req: MFA.Verify) {
 		const { id } = req.user;
 		const { token } = req.body;