Add throttling to login, signup and password related handlers

Attendize · Oct 22, 2021 · 9665768 · 9665768
1 parent 2fe47eb
commit 9665768
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/routes/web.php b/routes/web.php
@@ -72,7 +72,7 @@
          */
         Route::get('/login',
             [UserLoginController::class, 'showLogin']
-        )->name('login');
+        )->name('login')->middleware('throttle:10,1');
 
         Route::post('/login',
             [UserLoginController::class, 'postLogin']
@@ -87,7 +87,7 @@
 
         Route::post('login/forgot-password',
             [RemindersController::class, 'postRemind']
-        )->name('postForgotPassword');
+        )->name('postForgotPassword')->middleware('throttle:3,1');
 
         /*
          * Reset Password
@@ -98,7 +98,7 @@
 
         Route::post('login/reset-password',
             [RemindersController::class, 'postReset']
-        )->name('postResetPassword');
+        )->name('postResetPassword')->middleware('throttle:3,1');
 
         /*
          * Registration / Account creation
@@ -108,14 +108,14 @@
         )->name('showSignup');
 
         Route::post('/signup',
-            [UserSignupController::class, 'postSignup']);
+            [UserSignupController::class, 'postSignup'])->middleware('throttle:3,1');
 
         /*
          * Confirm Email
          */
         Route::get('signup/confirm_email/{confirmation_code}',
             [UserSignupController::class, 'confirmEmail']
-        )->name('confirmEmail');
+        )->name('confirmEmail')->middleware('throttle:3,1');
     });
 
     /*