graph2: Added complexity to prevent queries that can take down the server.

2019-04-25 20:47:20 +02:00
parent 332a1eb32b
commit 00150118d2
3 changed files with 184 additions and 6 deletions
@@ -8,15 +8,13 @@ import (
 	"runtime/debug"
 	"strings"

-	"git.aiterp.net/rpdata/api/models"
-	"git.aiterp.net/rpdata/api/models/changes"
-
-	"git.aiterp.net/rpdata/api/models/logs"
-
 	"git.aiterp.net/rpdata/api/graph2"
 	"git.aiterp.net/rpdata/api/internal/auth"
 	"git.aiterp.net/rpdata/api/internal/loader"
 	"git.aiterp.net/rpdata/api/internal/store"
+	"git.aiterp.net/rpdata/api/models"
+	"git.aiterp.net/rpdata/api/models/changes"
+	"git.aiterp.net/rpdata/api/models/logs"
 	"github.com/99designs/gqlgen/handler"
 )

@@ -82,6 +80,7 @@ func queryHandler() http.HandlerFunc {

 			return fmt.Errorf("The server failed to serve your request due to an internal error, it has been logged")
 		}),
+		handler.ComplexityLimit(300),
 	)

 	return func(w http.ResponseWriter, r *http.Request) {