fix: Only throttle on invalid requests for public share links

Signed-off-by: Julius Härtl <jus@bitgrid.net>
nextcloud · Nov 28, 2023 · 9642615 · 9642615
1 parent 9c937a3
commit 9642615
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/private/AppFramework/Middleware/PublicShare/PublicShareMiddleware.php b/lib/private/AppFramework/Middleware/PublicShare/PublicShareMiddleware.php
@@ -77,6 +77,8 @@ public function beforeController($controller, $methodName) {
 		$controller->setToken($token);
 
 		if (!$controller->isValidToken()) {
+			$this->throttle($bruteforceProtectionAction, $token);
+
 			$controller->shareNotFound();
 			throw new NotFoundException();
 		}
@@ -88,7 +90,6 @@ public function beforeController($controller, $methodName) {
 
 		// If authentication succeeds just continue
 		if ($controller->isAuthenticated()) {
-			$this->throttle($bruteforceProtectionAction, $token);
 			return;
 		}