Rate limit registrations per instance

waifu commented

2025-06-01 17:35:49 -07:00

Owner

Currently, users can register new accounts via the signup command without restriction. This opens the door to potential abuse, especially from malicious actors or scripts repeatedly creating accounts on an open instance to bypass cooldowns or spam the bot (rolling cards over and over and transfering them over to other accounts).
To reduce abuse, a rate limit on registrations per instance implementation would suffice.

Proposed behaviour:

Applying a configurable limit to the signups
Return a friendly message when rate-limited:
- (mention) 🛑 Signup rate exceeded for your instance. Please wait before trying again.

Implementation:

During signup command use a helper function before insert_player()
- is_registration_rate_limited(domain: str) -> bool

Currently, users can register new accounts via the signup command without restriction. This opens the door to potential abuse, especially from malicious actors or scripts repeatedly creating accounts on an open instance to bypass cooldowns or spam the bot (rolling cards over and over and transfering them over to other accounts). To reduce abuse, a rate limit on registrations per instance implementation would suffice. Proposed behaviour: - Applying a configurable limit to the signups - Return a friendly message when rate-limited: - (mention) 🛑 Signup rate exceeded for your instance. Please wait before trying again. Implementation: - During signup command use a helper function before insert_player() - is_registration_rate_limited(domain: str) -> bool

👍 1

waifu added the

Feature

Refactoring

labels 2025-06-01 17:35:49 -07:00

waifu added this to the v2.0 project 2025-06-01 17:35:49 -07:00

waifu referenced this issue

2025-06-03 19:11:13 -07:00

Explicit Account Creation/Deletion #35

Rows
Columns

Rate limit registrations per instance #43