Security hardening - Rate limiter

jderusse · jderusse · commit 88fb0888cd41 · 2021-03-22T20:26:15.000+01:00
diff --git a/RateLimiter/DefaultLoginRateLimiter.php b/RateLimiter/DefaultLoginRateLimiter.php
@@ -41,7 +41,7 @@ protected function getLimiters(Request $request): array
     {
         return [
             $this->globalFactory->create($request->getClientIp()),
-            $this->localFactory->create($request->attributes->get(Security::LAST_USERNAME).$request->getClientIp()),
+            $this->localFactory->create($request->attributes->get(Security::LAST_USERNAME).'-'.$request->getClientIp()),
         ];
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -41,7 +41,7 @@ protected function getLimiters(Request $request): array`
`41`	`41`	`{`
`42`	`42`	`return [`
`43`	`43`	`$this->globalFactory->create($request->getClientIp()),`
`44`		`- $this->localFactory->create($request->attributes->get(Security::LAST_USERNAME).$request->getClientIp()),`
	`44`	`+ $this->localFactory->create($request->attributes->get(Security::LAST_USERNAME).'-'.$request->getClientIp()),`
`45`	`45`	`];`
`46`	`46`	`}`
`47`	`47`	`}`