Rate limiting: limit query=askai to 5 requests every 30s (per user)

edwardspec · Dec 25, 2024 · 83e4cca · 83e4cca
1 parent ebf7d32
commit 83e4cca
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/extension.json b/extension.json
@@ -17,6 +17,14 @@
 			"askai": true
 		}
 	},
+	"RateLimits": {
+		"askai": {
+			"user": [
+				5,
+				30
+			]
+		}
+	},
 	"AutoloadClasses": {
 		"MediaWiki\\AskAI\\ApiQueryAskAI": "includes/api/ApiQueryAskAI.php",
 		"MediaWiki\\AskAI\\Hooks": "includes/Hooks.php",

diff --git a/includes/api/ApiQueryAskAI.php b/includes/api/ApiQueryAskAI.php
@@ -31,12 +31,17 @@
 use ApiQueryBase;
 use MediaWiki\AskAI\Service\ServiceFactory;
 use Status;
+use ThrottledError;
 use Wikimedia\ParamValidator\ParamValidator;
 
 class ApiQueryAskAI extends ApiQueryBase {
 	public function execute() {
 		$this->checkUserRightsAny( 'askai' );
 
+		if ( $this->getUser()->pingLimiter( 'askai' ) ) {
+			throw new ThrottledError;
+		}
+
 		$ai = ServiceFactory::getAI();
 		if ( !$ai ) {
 			$this->dieStatus( Status::newFatal( 'askai-unknown-service' ) );