fureunoir/schon
fureunoir/schon
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fixes: buy_unregistered ratelimiting fix

Browse source
This commit is contained in:
Egor Pavlovich Gorbunov 2025-06-07 16:25:26 +03:00
parent e89d9a0e8c
commit 14fe032722
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
core/viewsets.py
View file

@ -97,6 +97,7 @@ from core.serializers.utility import (
from core.utils import format_attributes
from core.utils.messages import permission_denied_message
from core.utils.nominatim import fetch_address_suggestions
from evibes.settings import DEBUG
from payments.serializers import TransactionProcessSerializer
@ -284,7 +285,7 @@ class OrderViewSet(EvibesViewSet):
return Response(status=status.HTTP_404_NOT_FOUND, data={"detail": _(f"order {order_uuid} not found")})
@action(detail=False, methods=["post"], url_path="buy_unregistered")
@method_decorator(ratelimit(key="ip", rate="2/h", block=True))
@method_decorator(ratelimit(key="ip", rate="5/h" if not DEBUG else "888/h"))
def buy_unregistered(self, request):
serializer = BuyUnregisteredOrderSerializer(data=request.data)
serializer.is_valid(raise_exception=True)