From 50f55b43087818cec41e110d2f0402ca1bba3b62 Mon Sep 17 00:00:00 2001
From: snipe <snipe@snipe.net>
Date: Thu, 24 Feb 2022 13:10:10 -0800
Subject: [PATCH] Fixes broken API throttling

Signed-off-by: snipe <snipe@snipe.net>
---
 .env.example        |  2 +-
 app/Http/Kernel.php |  1 -
 config/app.php      | 11 +++++++++++
 routes/api.php      |  2 +-
 4 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/.env.example b/.env.example
index a631d4a1a2..cf2e488ece 100644
--- a/.env.example
+++ b/.env.example
@@ -153,4 +153,4 @@ IMPORT_TIME_LIMIT=600
 IMPORT_MEMORY_LIMIT=500M
 REPORT_TIME_LIMIT=12000
 REQUIRE_SAML=false
-
+API_THROTTLE_PER_MINUTE=120
\ No newline at end of file
diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
index 69afddc74f..f94d390d76 100644
--- a/app/Http/Kernel.php
+++ b/app/Http/Kernel.php
@@ -45,7 +45,6 @@ class Kernel extends HttpKernel
         ],
 
         'api' => [
-            'throttle:120,1',
             'auth:api',
         ],
     ];
diff --git a/config/app.php b/config/app.php
index f08334a6e4..f0e61c548c 100755
--- a/config/app.php
+++ b/config/app.php
@@ -425,4 +425,15 @@ return [
 
     ],
 
+    /*
+    |--------------------------------------------------------------------------
+    | API Throttling
+    |--------------------------------------------------------------------------
+    |
+    | This value determines the number of API requests permitted per minute
+    |
+    */
+
+    'api_throttle_per_minute' => env('API_THROTTLE_PER_MINUTE', 120),
+
 ];
diff --git a/routes/api.php b/routes/api.php
index 398af78bce..e6f841531b 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -14,7 +14,7 @@ use Illuminate\Http\Request;
 */
 
 
-Route::group(['prefix' => 'v1','namespace' => 'Api', 'middleware' => 'auth:api'], function () {
+Route::group(['prefix' => 'v1','namespace' => 'Api', 'middleware' => ['api', 'throttle:'.config('app.api_throttle_per_minute').',1']], function () {
 
 
     Route::get('/', function() {