kin: BATON-SEC-002-backend_dev

This commit is contained in:
Gros Frumos 2026-03-21 07:36:33 +02:00
parent 9a450d2a84
commit 4ab2f04de6
2 changed files with 28 additions and 3 deletions

View file

@ -15,7 +15,7 @@ from fastapi.middleware.cors import CORSMiddleware
from fastapi.responses import JSONResponse
from backend import config, db, telegram
from backend.middleware import rate_limit_register, verify_admin_token, verify_webhook_secret
from backend.middleware import rate_limit_register, rate_limit_signal, verify_admin_token, verify_webhook_secret
from backend.models import (
AdminBlockRequest,
AdminCreateUserRequest,
@ -123,7 +123,7 @@ async def register(body: RegisterRequest, _: None = Depends(rate_limit_register)
@app.post("/api/signal", response_model=SignalResponse)
async def signal(body: SignalRequest) -> SignalResponse:
async def signal(body: SignalRequest, _: None = Depends(rate_limit_signal)) -> SignalResponse:
if await db.is_user_blocked(body.user_id):
raise HTTPException(status_code=403, detail="User is blocked")