Fix bugs

ldap-overleaf-sl/sharelatex/router.js

@@ -1,6 +1,6 @@
 /**
  * >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
- * Modified from 6408d15
+ * Modified from bf92436
  * <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
  */
 
@@ -27,7 +27,6 @@ const UserInfoController = require('./Features/User/UserInfoController')
 const UserController = require('./Features/User/UserController')
 const UserEmailsController = require('./Features/User/UserEmailsController')
 const UserPagesController = require('./Features/User/UserPagesController')
-const TutorialController = require('./Features/Tutorial/TutorialController')
 const DocumentController = require('./Features/Documents/DocumentController')
 const CompileManager = require('./Features/Compile/CompileManager')
 const CompileController = require('./Features/Compile/CompileController')
@@ -105,6 +104,10 @@ const rateLimiters = {
     points: 10,
     duration: 60,
   }),
+  confirmUniversityDomain: new RateLimiter('confirm-university-domain', {
+    points: 1,
+    duration: 60,
+  }),
   createProject: new RateLimiter('create-project', {
     points: 20,
     duration: 60,
@@ -149,6 +152,10 @@ const rateLimiters = {
     points: 30,
     duration: 60,
   }),
+  indexProjectReferences: new RateLimiter('index-project-references', {
+    points: 30,
+    duration: 60,
+  }),
   miscOutputDownload: new RateLimiter('misc-output-download', {
     points: 1000,
     duration: 60 * 60,
@@ -185,7 +192,7 @@ const rateLimiters = {
     duration: 60,
   }),
   resendConfirmation: new RateLimiter('resend-confirmation', {
-    points: 1,
+    points: 10,
     duration: 60,
   }),
   sendChatMessage: new RateLimiter('send-chat-message', {
@@ -256,12 +263,12 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
     AuthenticationController.addEndpointToLoginWhitelist('/register')
   }
 
-// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
-webRouter.get('/oauth/redirect', AuthenticationController.oauth2Redirect)
-webRouter.get('/oauth/callback', AuthenticationController.oauth2Callback)
-AuthenticationController.addEndpointToLoginWhitelist('/oauth/redirect')
-AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
-// <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
+  // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+  webRouter.get('/oauth/redirect', AuthenticationController.oauth2Redirect)
+  webRouter.get('/oauth/callback', AuthenticationController.oauth2Callback)
+  AuthenticationController.addEndpointToLoginWhitelist('/oauth/redirect')
+  AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
+  // <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
 
   EditorRouter.apply(webRouter, privateApiRouter)
   CollaboratorsRouter.apply(webRouter, privateApiRouter)
@@ -433,12 +440,6 @@ AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
     TpdsController.getQueues
   )
 
-  webRouter.post(
-    '/tutorial/:tutorialKey/complete',
-    AuthenticationController.requireLogin(),
-    TutorialController.completeTutorial
-  )
-
   webRouter.get(
     '/user/projects',
     AuthenticationController.requireLogin(),
@@ -734,6 +735,16 @@ AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
     AuthorizationMiddleware.ensureUserCanReadProject,
     HistoryController.proxyToHistoryApi
   )
+  webRouter.post(
+    '/project/:Project_id/doc/:doc_id/version/:version_id/restore',
+    AuthorizationMiddleware.ensureUserCanWriteProjectContent,
+    HistoryController.proxyToHistoryApi
+  )
+  webRouter.post(
+    '/project/:project_id/doc/:doc_id/restore',
+    AuthorizationMiddleware.ensureUserCanWriteProjectContent,
+    HistoryController.restoreDocFromDeletedDoc
+  )
   webRouter.post(
     '/project/:project_id/restore_file',
     AuthorizationMiddleware.ensureUserCanWriteProjectContent,
@@ -1082,6 +1093,12 @@ AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
     ChatController.sendMessage
   )
 
+  webRouter.post(
+    '/project/:Project_id/references/index',
+    AuthorizationMiddleware.ensureUserCanReadProject,
+    RateLimiterMiddleware.rateLimit(rateLimiters.indexProjectReferences),
+    ReferencesController.index
+  )
   webRouter.post(
     '/project/:Project_id/references/indexAll',
     AuthorizationMiddleware.ensureUserCanReadProject,
@@ -1130,6 +1147,7 @@ AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
   )
   publicApiRouter.post(
     '/api/institutions/confirm_university_domain',
+    RateLimiterMiddleware.rateLimit(rateLimiters.confirmUniversityDomain),
     AuthenticationController.requirePrivateApiAuth(),
     InstitutionsController.confirmDomain
   )
@@ -1357,5 +1375,4 @@ AuthenticationController.addEndpointToLoginWhitelist('/oauth/callback')
   webRouter.get('*', ErrorController.notFound)
 }
 
-
-module.exports = { initialize, rateLimiters }
+module.exports = { initialize, rateLimiters }