58 Commits

Author	SHA1	Message	Date
Jon Chambers	8825396fc1	Restore Redis retries for select operations	2025-08-27 11:52:16 -04:00
Jonathan Klabunde Tomer	35604cf151	Simplify rate limiters by making them all dynamic	2025-05-21 10:29:26 -07:00
Jon Chambers	30c194c557	Exclude RateLimitExceededException from fail-open checks	2025-05-12 15:24:57 -07:00
Jon Chambers	771a700acd	Configure fail-open policy on individual rate limiters	2025-05-02 10:30:29 -04:00
Jon Chambers	6af4d41322	Enumerate rate limit challenge options	2025-04-02 08:48:43 -04:00
Jonathan Klabunde Tomer	ea17eee320	Make logging of message delivery loops configurable, default off	2025-02-07 13:43:28 -06:00
Chris Eager	dd4bc23e4f	Update to Dropwizard 4	2024-11-11 16:32:24 -06:00
Ameya Lokare	190f2a7fc2	Pass ACI to captcha checker	2024-10-31 14:24:43 -07:00
Jon Chambers	a9117010f9	Introduce FaultTolerantRedisClient	2024-10-09 09:22:10 -04:00
Ameya Lokare	d6acfa56c2	Add platform tag to invalid HCaptcha reason metric	2024-09-04 15:28:36 -07:00
Jon Chambers	f09cc03164	Detect message delivery loops	2024-08-30 16:27:21 -04:00
Katherine	0e4625ef88	Migrate to 429 for all ratelimit responses	2024-08-05 12:02:11 -07:00
Jon Chambers	101ecf342f	Remove now-unused rate limiters	2024-05-16 16:56:42 -05:00
Chris Eager	2c2b5d555e	Rename obsolete uses of recaptcha	2024-03-13 16:40:32 -05:00
Chris Eager	2ab14ca59e	Refactor remote address/X-Forwarded-For handling	2024-02-05 13:37:06 -06:00
Ravi Khadiwala	360a4793ae	Remove global lock in RateLimitChallengeManager	2024-01-19 13:56:09 -06:00
Chris Eager	9c54d2407b	Update tests	2023-11-29 15:48:24 -06:00
Chris Eager	a027c4ce1f	Conditionally use request.remoteAddr instead of X-Forwarded-For	2023-11-29 15:48:24 -06:00
Jonathan Klabunde Tomer	fd19299ae0	Accept a captcha score threshold for challenges from the spam filter	2023-10-20 09:09:22 -07:00
Sergey Skrobotov	977243ebfd	DRY gRPC tests, refactor error mapping	2023-09-08 17:12:08 -07:00
Jonathan Klabunde Tomer	9577d552c6	pass challenge type to rate limit reset listeners	2023-08-29 15:19:49 -07:00
ravi-signal	888879dfb2	Estimate message byte limit exceeded error count	2023-08-04 11:10:58 -05:00
Jon Chambers	e38a713ccc	Support sub-millisecond permit regeneration durations in rate limiters	2023-07-14 16:25:33 -04:00
Sergey Skrobotov	a45aadae16	Cleaning up references to the legacy format from the rate limiters lua script	2023-06-21 15:09:46 -04:00
Jon Chambers	91805caa9a	Finalize rate limit unit inversion	2023-05-26 14:17:30 -04:00
Jon Chambers	184969336e	Allow RateLimiterConfig to accept either a leak rate per minute or a permit regeneration duration	2023-05-26 11:37:06 -04:00
Chris Eager	57b6c10dd1	Remove obsolete dynamic configuration	2023-05-03 13:20:44 -05:00
ravi-signal	0fe6485038	Add a configuration to make rate limiters fail open	2023-04-14 13:08:14 -05:00
Ravi Khadiwala	ee53260d72	Add filter-provided captcha score thresholds	2023-03-21 17:34:58 -05:00
Ravi Khadiwala	a8eb27940d	Add per-action captcha site-key configuration ... - reject captcha requests without valid actions - require specific site keys for each action	2023-03-21 17:34:58 -05:00
Sergey Skrobotov	c14ef7e6cf	migrate token bucket redis record format from json to hash: phase 2	2023-03-16 09:15:22 -07:00
Sergey Skrobotov	483e444174	migrate token bucket redis record format from json to hash: phase 1	2023-03-15 16:01:06 -07:00
Sergey Skrobotov	4c85e7ba66	Moving RateLimiter logic to Redis Lua and adding async API	2023-03-13 14:50:26 -07:00
Sergey Skrobotov	b9b4e3fdd8	Adding a uniform configuration for all json/yaml mapper use cases: part 1	2023-02-23 16:38:48 -08:00
Sergey Skrobotov	7529c35013	Rate limiters code refactored	2023-02-23 10:49:06 -08:00
Chris Eager	c16006dc4b	Add PUT /v2/account/number	2023-02-10 12:09:03 -06:00
Sergey Skrobotov	dc8f62a4ad	/v1/backup/auth/check endpoint added	2023-01-30 15:39:42 -08:00
erik-signal	a89e30fe75	Clarify naming around spam filtering.	2023-01-27 11:40:33 -05:00
Ravi Khadiwala	65ad3fe623	Add hCaptcha support	2022-12-16 11:28:30 -06:00
Ravi Khadiwala	c14621a09f	Add metrics for captcha scores	2022-09-14 16:00:11 -05:00
Ehren Kret	5df24edebf	Remove all unused imports remaining in project	2022-05-25 17:15:20 -05:00
Jon Chambers	c048074c31	Tag captcha attempt metrics with UA platform	2022-03-16 15:00:04 -04:00
Jon Chambers	3a1c716c73	Remove an unused rate limiter	2022-02-25 13:50:17 -08:00
Jon Chambers	14cff958e9	Migrate challenge-issuing rate limiters to the abusive message filter	2021-12-03 11:52:58 -05:00
Jon Chambers	9628f147f1	Separate statically- and dynamically-configured rate limiters	2021-12-03 11:01:15 -05:00
Chris Eager	27844fe692	Add JUnit 5 RedisClusterExtension	2021-08-13 12:07:04 -05:00
Chris Eager	b3e6a50dee	Send 508 status code for legacy clients that produce rate limit challenges	2021-08-11 11:57:30 -05:00
Jon Chambers	a680639718	Use UUIDs as rate limiter keys.	2021-08-04 14:15:21 -04:00
Ehren Kret	33fb7a72de	Use RecaptchaClient interface	2021-08-02 13:14:44 -05:00
Ehren Kret	2aaddd721f	Rename existing captcha client	2021-08-02 13:14:44 -05:00