-
Notifications
You must be signed in to change notification settings - Fork 886
Rate limit external auth requests #11843
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Labels
bug risk
Prone to bugs
Comments
Related to #10853 |
@Emyrk are you still interested in this? |
@matifali Nah, let's close this |
Re-opening based on comments in #14982 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Related to #10853
External auth requests to coderd emit http requests to the external auth idps. A workspace does have the ability to cause coderd to make many
ValidateToken
requests. We should debounce or rate limit this to prevent a rogue workspace from eating away at the idp rate limits.Basically rate limit per user usage of external auth to prevent deployment wide 429s.
The text was updated successfully, but these errors were encountered: