scriptoriumadmin/GitNexus
1
0
Fork 0
mirror of https://github.com/abhigyanpatwari/GitNexus.git synced 2026-10-10 03:27:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

fix(server): rate-limit /api/analyze and /api/embed endpoints (#1328) (#1339)
Some checks are pending
CodeQL / Analyze (javascript-typescript) (push) Waiting to run
Details
CodeQL / Analyze (python) (push) Waiting to run
Details
Gitleaks / gitleaks (push) Waiting to run
Details
Release Candidate / Check if release candidate should run (push) Waiting to run
Details
Release Candidate / ci (push) Blocked by required conditions
Details
Release Candidate / Publish release candidate to npm (push) Blocked by required conditions
Details
Release Candidate / Build & Push RC Docker images (push) Blocked by required conditions
Details
Scorecard / Scorecard analysis (push) Waiting to run
Details
Trivy Image Scan / Trivy (gitnexus-cli) (push) Waiting to run
Details
Trivy Image Scan / Trivy (gitnexus-web) (push) Waiting to run
Details

Browse source
This commit is contained in:
azizur100389 2026-05-04 23:03:05 +01:00 • committed by GitHub
parent 3732fa1e21
commit f10135649e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
gitnexus/src/server/api.ts
View file

@ -1348,7 +1348,7 @@ export const createServer = async (port: number, host: string = '127.0.0.1') =>
// ── Analyze API ──────────────────────────────────────────────────────
// POST /api/analyze — start a new analysis job
app.post('/api/analyze', async (req, res) => {
app.post('/api/analyze', createRouteLimiter({ limit: 10 }), async (req, res) => {
try {
const { url: repoUrl, path: repoLocalPath, force, embeddings, dropEmbeddings } = req.body;
@ -1615,7 +1615,7 @@ export const createServer = async (port: number, host: string = '127.0.0.1') =>
const embedJobManager = new JobManager();
// POST /api/embed — trigger server-side embedding generation
app.post('/api/embed', async (req, res) => {
app.post('/api/embed', createRouteLimiter({ limit: 20 }), async (req, res) => {
try {
const entry = await resolveRepo(requestedRepo(req));
if (!entry) {

8
gitnexus/test/unit/rate-limit.test.ts
View file

@ -230,6 +230,14 @@ describe('production routes — rate-limit middleware wiring', () => {
expect(apiSource).toMatch(/app\.delete\('\/api\/repo',\s*createRouteLimiter\(/);
});
it('POST /api/analyze is wired with createRouteLimiter', () => {
expect(apiSource).toMatch(/app\.post\('\/api\/analyze',\s*createRouteLimiter\(/);
});
it('POST /api/embed is wired with createRouteLimiter', () => {
expect(apiSource).toMatch(/app\.post\('\/api\/embed',\s*createRouteLimiter\(/);
});
it('SPA fallback is wired with createRouteLimiter', () => {
expect(apiSource).toMatch(/app\.get\(SPA_FALLBACK_REGEX,\s*createRouteLimiter\(/);
});