Skip to content

Commit

Permalink
AYS-379 | Actuator Endpoints Have Been Allowed to Use without Rate Limit
Browse files Browse the repository at this point in the history
  • Loading branch information
agitrubard committed Sep 26, 2024
1 parent daaf7d4 commit c6b1cd4
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,7 @@ protected void doFilterInternal(@NotNull HttpServletRequest httpServletRequest,
final String tokenId = tokenService.getPayload(jwt).getId();
invalidTokenService.checkForInvalidityOfToken(tokenId);

if (this.isNotAllowedPath(httpServletRequest) || isAuthorizedRateLimitEnabled) {
if (isAuthorizedRateLimitEnabled) {
boolean isRateLimitExceeded = this.isRateLimitExceeded(ipAddress, authorizedBuckets, httpServletResponse);
if (isRateLimitExceeded) {
return;
Expand Down

0 comments on commit c6b1cd4

Please sign in to comment.