FIX: Don't throttle local lookups

2018-02-07 00:31:05 -05:00 · 2018-02-07 00:31:05 -05:00 · 8c04893a04
parent 016b9cd0e9
commit 8c04893a04
1 changed files with 1 additions and 1 deletions
--- a/lib/auth/default_current_user_provider.rb
+++ b/lib/auth/default_current_user_provider.rb
@ -48,7 +48,7 @@ class Auth::DefaultCurrentUserProvider
    if auth_token && auth_token.length == 32
      limiter = RateLimiter.new(nil, "cookie_auth_#{request.ip}", COOKIE_ATTEMPTS_PER_MIN , 60)

-      if limiter.can_perform?
+      if request.ip == "127.0.0.1" || request.ip == "::1" || limiter.can_perform?
        @user_token = UserAuthToken.lookup(auth_token,
                                           seen: true,
                                           user_agent: @env['HTTP_USER_AGENT'],