Merge pull request #62138 from nextcloud/backport/62136/stable27

[stable27] rate limiting for creating federated shares

Author: AndyScherzinger

apps/cloud_federation_api/lib/Controller/RequestHandlerController.php

@@ -28,6 +28,7 @@
 use OCA\CloudFederationAPI\Config;
 use OCP\AppFramework\Controller;
 use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\AnonRateLimit;
 use OCP\AppFramework\Http\JSONResponse;
 use OCP\Federation\Exceptions\ActionNotSupportedException;
 use OCP\Federation\Exceptions\AuthenticationFailedException;
@@ -73,6 +74,7 @@ public function __construct(
 	 * @NoCSRFRequired
 	 * @PublicPage
 	 * @BruteForceProtection(action=receiveFederatedShare)
+	 * @AnonRateLimit(limit=5,period=1200)
 	 *
 	 * @param string $shareWith
 	 * @param string $name resource name (e.g. document.odt)

apps/federatedfilesharing/lib/Controller/RequestHandlerController.php

@@ -31,6 +31,7 @@
 use OCA\FederatedFileSharing\FederatedShareProvider;
 use OCA\FederatedFileSharing\Notifications;
 use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\AnonRateLimit;
 use OCP\AppFramework\OCS\OCSBadRequestException;
 use OCP\AppFramework\OCS\OCSException;
 use OCP\AppFramework\OCS\OCSForbiddenException;
@@ -121,6 +122,7 @@ public function __construct(string $appName,
 	/**
 	 * @NoCSRFRequired
 	 * @PublicPage
+	 * @AnonRateLimit(limit=5,period=1200)]
 	 *
 	 * create a new share
 	 *