From 1cc6fb16687ddc8eb4229823e2fb8cc38622a82a Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kyle.spearrin@gmail.com>
Date: Thu, 28 Sep 2017 14:40:34 -0400
Subject: [PATCH] more rate limit rules for two factor

---
 src/Api/settings.json | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/src/Api/settings.json b/src/Api/settings.json
index 0a63427373..a6a561e461 100644
--- a/src/Api/settings.json
+++ b/src/Api/settings.json
@@ -112,6 +112,26 @@
         "Period": "60m",
         "Limit": 5
       },
+      {
+        "Endpoint": "post:/two-factor/send-email",
+        "Period": "10m",
+        "Limit": 5
+      },
+      {
+        "Endpoint": "post:/two-factor/send-email-login",
+        "Period": "10m",
+        "Limit": 10
+      },
+      {
+        "Endpoint": "post:/two-factor/authenticator",
+        "Period": "1m",
+        "Limit": 3
+      },
+      {
+        "Endpoint": "post:/two-factor/email",
+        "Period": "1m",
+        "Limit": 3
+      },
       {
         "Endpoint": "get:/alive",
         "Period": "1m",