diff --git a/app/api/views/alias.py b/app/api/views/alias.py index 9e593f31..93859807 100644 --- a/app/api/views/alias.py +++ b/app/api/views/alias.py @@ -31,6 +31,7 @@ from app.models import Alias, Contact, Mailbox, AliasMailbox @deprecated @api_bp.route("/aliases", methods=["GET", "POST"]) @require_api_auth +@limiter.limit("10/minute", key_func=lambda: g.user.id) def get_aliases(): """ Get aliases @@ -72,10 +73,8 @@ def get_aliases(): @api_bp.route("/v2/aliases", methods=["GET", "POST"]) -@limiter.limit( - "5/minute", -) @require_api_auth +@limiter.limit("10/minute", key_func=lambda: g.user.id) def get_aliases_v2(): """ Get aliases diff --git a/app/dashboard/views/index.py b/app/dashboard/views/index.py index 6a145332..829f1702 100644 --- a/app/dashboard/views/index.py +++ b/app/dashboard/views/index.py @@ -57,10 +57,7 @@ def get_stats(user: User) -> Stats: methods=["POST"], exempt_when=lambda: request.form.get("form-name") != "create-random-email", ) -@limiter.limit( - "5/minute", - methods=["GET"], -) +@limiter.limit("10/minute", methods=["GET"], key_func=lambda: current_user.id) @login_required @parallel_limiter.lock( name="alias_creation",