{"push_id":1205988849,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"4ba612491b4f337b3f42801b4e6796988222b974","before":"95344b68d2504a3ceb476e02834926f32277d50c","commits":[{"sha":"4ba612491b4f337b3f42801b4e6796988222b974","author":{"name":"Moncef Belyamani","email":"3dd6412793e8485cf252c374a9f95e420484d5d3@users.noreply.github.com"},"message":"Detect and throttle unwanted requests (#260)\n\n**Why**:\r\n- To prevent malicious clients and poorly configured scrapers\r\n- To prevent brute-force attacks in a way that does not lock legitimate\r\n  users out of their account\r\n\r\n**How**:\r\n- Use the rack-attack gem to configure various throttles\r\n- Configure a throttle to stop an IP that makes x amount of requests\r\n  over a period of y seconds\r\n- Configure a throttle to stop x sign in attempts over a period of y\r\n  seconds, with an exponential backoff\r\n- In all cases, x and y are configurable via ENV vars\r\n- Write to the Rails log each time a throttle is triggered","distinct":true,"url":"https://api.github.com/repos/18F/identity-idp/commits/4ba612491b4f337b3f42801b4e6796988222b974"}]}
{"actor":{"display_login":"monfresh"}}