return 401 for login failures (#15432)

* return 401 for login failures

* only setup the rate limiter when configured
This commit is contained in:
Blake Blackshear
2024-12-10 06:42:55 -07:00
committed by GitHub
parent 0b9c4c18dd
commit 6b12a45a95
4 changed files with 13 additions and 6 deletions
+5 -1
View File
@@ -87,7 +87,11 @@ def create_fastapi_app(
logger.info("FastAPI started")
# Rate limiter (used for login endpoint)
auth.rateLimiter.set_limit(frigate_config.auth.failed_login_rate_limit or "")
if frigate_config.auth.failed_login_rate_limit is None:
limiter.enabled = False
else:
auth.rateLimiter.set_limit(frigate_config.auth.failed_login_rate_limit)
app.state.limiter = limiter
app.add_exception_handler(RateLimitExceeded, _rate_limit_exceeded_handler)
app.add_middleware(SlowAPIMiddleware)