houseassassin/twenty
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security - add throttle in message resend (#16070)

Browse Source 
closes https://github.com/twentyhq/private-issues/issues/356
This commit is contained in:
Etienne
2025-11-28 18:33:05 +01:00
committed by GitHub
parent 9f62188ba6
commit 63afed6400
5 changed files with 93 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/twenty-server/src/engine/core-modules/twenty-config/config-variables.ts
+37 -1
View File
@@ -975,7 +975,7 @@ export class ConfigVariables {
type: ConfigVariableType.NUMBER,
})
@CastToPositiveNumber()
API_RATE_LIMITING_LONG_TTL_IN_MS = 60000;
API_RATE_LIMITING_LONG_TTL_IN_MS = 60_000;
@ConfigVariablesMetadata({
group: ConfigVariablesGroup.RATE_LIMITING,
@@ -994,6 +994,42 @@ export class ConfigVariables {
})
GRAPHQL_MAX_COMPLEXITY = 2000;
@ConfigVariablesMetadata({
group: ConfigVariablesGroup.RATE_LIMITING,
description:
'Time-to-live for workspace-level invitations resending rate limiting in milliseconds',
type: ConfigVariableType.NUMBER,
})
@CastToPositiveNumber()
INVITATION_SENDING_BY_WORKSPACE_THROTTLE_TTL_IN_MS = 604_800_000; // 7 days
@ConfigVariablesMetadata({
group: ConfigVariablesGroup.RATE_LIMITING,
description:
'Maximum number of workspace-level invitations resending allowed in the rate limiting window',
type: ConfigVariableType.NUMBER,
})
@CastToPositiveNumber()
INVITATION_SENDING_BY_WORKSPACE_THROTTLE_LIMIT = 500;
@ConfigVariablesMetadata({
group: ConfigVariablesGroup.RATE_LIMITING,
description:
'Time-to-live for email-level invitations sending rate limiting in milliseconds',
type: ConfigVariableType.NUMBER,
})
@CastToPositiveNumber()
INVITATION_SENDING_BY_EMAIL_THROTTLE_TTL_IN_MS = 604_800_000; // 7 days
@ConfigVariablesMetadata({
group: ConfigVariablesGroup.RATE_LIMITING,
description:
'Maximum number of email-level invitations sending allowed in the rate limiting window',
type: ConfigVariableType.NUMBER,
})
@CastToPositiveNumber()
INVITATION_SENDING_BY_EMAIL_THROTTLE_LIMIT = 10;
@ConfigVariablesMetadata({
group: ConfigVariablesGroup.SSL,
description: 'Path to the SSL key for enabling HTTPS in local development',