Commit fb276565 authored by Evan Read's avatar Evan Read

Merge branch 'mk/remove-jwt-from-rate-limit-docs' into 'master'

Note CI token exception to JWT requests in rate limit docs

See merge request gitlab-org/gitlab-ce!32168
parents 6262a91e 8af8da09
...@@ -81,6 +81,8 @@ This limit is reset by requests that authenticate successfully. For example, 29 ...@@ -81,6 +81,8 @@ This limit is reset by requests that authenticate successfully. For example, 29
failed authentication requests followed by 1 successful request, followed by 29 failed authentication requests followed by 1 successful request, followed by 29
more failed authentication requests would not trigger a ban. more failed authentication requests would not trigger a ban.
JWT requests authenticated by gitlab-ci-token are excluded from this limit.
No response headers are provided. No response headers are provided.
## Settings ## Settings
......
...@@ -314,7 +314,7 @@ Source: ...@@ -314,7 +314,7 @@ Source:
#### Git and container registry failed authentication ban #### Git and container registry failed authentication ban
GitLab.com responds with HTTP status code 403 for 1 hour, if 30 failed GitLab.com responds with HTTP status code `403` for 1 hour, if 30 failed
authentication requests were received in a 3-minute period from a single IP address. authentication requests were received in a 3-minute period from a single IP address.
This applies only to Git requests and container registry (`/jwt/auth`) requests This applies only to Git requests and container registry (`/jwt/auth`) requests
...@@ -324,6 +324,8 @@ This limit is reset by requests that authenticate successfully. For example, 29 ...@@ -324,6 +324,8 @@ This limit is reset by requests that authenticate successfully. For example, 29
failed authentication requests followed by 1 successful request, followed by 29 failed authentication requests followed by 1 successful request, followed by 29
more failed authentication requests would not trigger a ban. more failed authentication requests would not trigger a ban.
JWT requests authenticated by gitlab-ci-token are excluded from this limit.
No response headers are provided. No response headers are provided.
### Admin Area settings ### Admin Area settings
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment