Merge pull request #20 from rallysf/correct-http-codes

Use correct HTTP status codes for blackist and throttle
This commit is contained in:
Aaron Suggs 2013-07-02 13:33:03 -07:00
commit eaaad929b1
4 changed files with 8 additions and 8 deletions

View file

@ -39,10 +39,10 @@ module Rack::Attack
# Set defaults
@notifier ||= ActiveSupport::Notifications if defined?(ActiveSupport::Notifications)
@blacklisted_response ||= lambda {|env| [503, {}, ["Blocked\n"]] }
@blacklisted_response ||= lambda {|env| [401, {}, ["Unauthorized\n"]] }
@throttled_response ||= lambda {|env|
retry_after = env['rack.attack.match_data'][:period] rescue nil
[503, {'Retry-After' => retry_after.to_s}, ["Retry later\n"]]
[429, {'Retry-After' => retry_after.to_s}, ["Retry later\n"]]
}
self

View file

@ -24,7 +24,7 @@ describe 'Rack::Attack.Fail2Ban' do
describe 'when not at maxretry' do
before { get '/?foo=OMGHAX', {}, 'REMOTE_ADDR' => '1.2.3.4' }
it 'fails' do
last_response.status.must_equal 503
last_response.status.must_equal 401
end
it 'increases fail count' do
@ -46,7 +46,7 @@ describe 'Rack::Attack.Fail2Ban' do
end
it 'fails' do
last_response.status.must_equal 503
last_response.status.must_equal 401
end
it 'increases fail count' do
@ -83,7 +83,7 @@ describe 'Rack::Attack.Fail2Ban' do
end
it 'fails' do
last_response.status.must_equal 503
last_response.status.must_equal 401
end
it 'does not increase fail count' do
@ -103,7 +103,7 @@ describe 'Rack::Attack.Fail2Ban' do
end
it 'fails' do
last_response.status.must_equal 503
last_response.status.must_equal 401
end
it 'does not increase fail count' do

View file

@ -15,7 +15,7 @@ describe 'Rack::Attack' do
before { get '/', {}, 'REMOTE_ADDR' => @bad_ip }
it "should return a blacklist response" do
get '/', {}, 'REMOTE_ADDR' => @bad_ip
last_response.status.must_equal 503
last_response.status.must_equal 401
end
it "should tag the env" do
last_request.env['rack.attack.matched'].must_equal "ip #{@bad_ip}"

View file

@ -26,7 +26,7 @@ describe 'Rack::Attack.throttle' do
2.times { get '/', {}, 'REMOTE_ADDR' => '1.2.3.4' }
end
it 'should block the last request' do
last_response.status.must_equal 503
last_response.status.must_equal 429
end
it 'should tag the env' do
last_request.env['rack.attack.matched'].must_equal 'ip/sec'