Added Logic to allow Username and IP to be used for RateLimiting

polonel · Aug 19, 2022 · 38e3fae · 38e3fae
1 parent 8ab0417
commit 38e3fae
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/controllers/main.js b/src/controllers/main.js
@@ -110,7 +110,8 @@ mainController.loginPost = async function (req, res, next) {
   if (process.env.USE_XFORWARDIP == 'true') 
     ipAddress= req.headers["x-forwarded-for"]
 
-
+  if (process.env.USE_USERRATELIMIT == 'true')
+    ipAddress = ipAddress + req.body['username']
 
   const [resEmailAndIP] = await Promise.all([limiterSlowBruteByIP.get(ipAddress)])