Merge pull request #2852 from gobitfly/NOBIDS/do-not-ratelimit-apidocs

(NOBIDS) do not ratelimit api-docs and internal api per default

Author: recy21

cmd/misc/main.go

@@ -415,6 +415,15 @@ func disableUserPerEmail() error {
 	if opts.Email == "" {
 		return errors.New("no email specified")
 	}
+
+	if utils.Config.Frontend.SessionSecret == "" {
+		return fmt.Errorf("session secret is empty, please provide a secure random string")
+	}
+
+	logrus.Infof("initializing session store: %v", utils.Config.RedisSessionStoreEndpoint)
+
+	utils.InitSessionStore(utils.Config.Frontend.SessionSecret)
+
 	user := struct {
 		ID    uint64 `db:"id"`
 		Email string `db:"email"`

ratelimit/ratelimit.go

@@ -183,7 +183,7 @@ func (r *responseWriterDelegator) Status() int {
 }
 
 var DefaultRequestFilter = func(req *http.Request) bool {
-	if req.URL == nil || !strings.HasPrefix(req.URL.Path, "/api") {
+	if req.URL == nil || !strings.HasPrefix(req.URL.Path, "/api") || strings.HasPrefix(req.URL.Path, "/api/i/") || strings.HasPrefix(req.URL.Path, "/api/v1/docs/") || strings.HasPrefix(req.URL.Path, "/api/v2/docs/") {
 		return false
 	}
 	return true