From 14fe03272295b8ffd9ef1a2baf23566c82de786d Mon Sep 17 00:00:00 2001 From: Egor fureunoir Gorbunov Date: Sat, 7 Jun 2025 16:25:26 +0300 Subject: [PATCH] Fixes: buy_unregistered ratelimiting fix --- core/viewsets.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/core/viewsets.py b/core/viewsets.py index dc941bc9..2c2f3b71 100644 --- a/core/viewsets.py +++ b/core/viewsets.py @@ -97,6 +97,7 @@ from core.serializers.utility import ( from core.utils import format_attributes from core.utils.messages import permission_denied_message from core.utils.nominatim import fetch_address_suggestions +from evibes.settings import DEBUG from payments.serializers import TransactionProcessSerializer @@ -284,7 +285,7 @@ class OrderViewSet(EvibesViewSet): return Response(status=status.HTTP_404_NOT_FOUND, data={"detail": _(f"order {order_uuid} not found")}) @action(detail=False, methods=["post"], url_path="buy_unregistered") - @method_decorator(ratelimit(key="ip", rate="2/h", block=True)) + @method_decorator(ratelimit(key="ip", rate="5/h" if not DEBUG else "888/h")) def buy_unregistered(self, request): serializer = BuyUnregisteredOrderSerializer(data=request.data) serializer.is_valid(raise_exception=True)