Skip to content

Domain is blocked [github.com] #7435

Answered by calebcartwright
MNThomson asked this question in Q&A
Discussion options

You must be logged in to vote

Because GitHub rate limits their APIs fairly aggressively, exceptionally so for unauthenticated requests. We deal with a fairly large volume of badge requests which means that we send a lot of API traffic at GitHub, and in order to avoid hitting the rate limits and having all of our GitHub badges taken offline, we have to authenticate all those requests.

We can't start sending GitHub auth tokens from our pool to random user-defined endpoints, nor can we let someone "use" the endpoint badge to simply fetch content from GitHub anonymously directly from our servers as it would be a huge surface for abuse and DOS of our GitHub badges (which is the most used badge family we provide).

There's a…

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@MNThomson
Comment options

Answer selected by MNThomson
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants