From 3c249616eff96a74b4479121976e5e7e019cd073 Mon Sep 17 00:00:00 2001
From: Daniel Supernault <danielsupernault@gmail.com>
Date: Fri, 31 Jan 2025 00:56:10 -0700
Subject: [PATCH] Add rate limits, fix typo and styling

---
 .../Controllers/AppRegisterController.php     |  2 +-
 app/Providers/AppServiceProvider.php          |  6 ++++
 resources/views/auth/iar.blade.php            | 29 +++++--------------
 routes/web.php                                |  2 +-
 4 files changed, 16 insertions(+), 23 deletions(-)

diff --git a/app/Http/Controllers/AppRegisterController.php b/app/Http/Controllers/AppRegisterController.php
index 3ebf4d8f9..b956ff4a6 100644
--- a/app/Http/Controllers/AppRegisterController.php
+++ b/app/Http/Controllers/AppRegisterController.php
@@ -75,6 +75,6 @@ class AppRegisterController extends Controller
             'status' => 'success'
         ]);
 
-        return redirect("pixelfed://verifyEmail?{$errorParams}");
+        return redirect("pixelfed://verifyEmail?{$queryParams}");
     }
 }
diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php
index a8abc99c7..e80d74de0 100644
--- a/app/Providers/AppServiceProvider.php
+++ b/app/Providers/AppServiceProvider.php
@@ -30,6 +30,8 @@ use Horizon;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Pagination\Paginator;
 use Illuminate\Support\Facades\Gate;
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Support\Facades\RateLimiter;
 use Illuminate\Support\Facades\Schema;
 use Illuminate\Support\Facades\Validator;
 use Illuminate\Support\ServiceProvider;
@@ -85,6 +87,10 @@ class AppServiceProvider extends ServiceProvider
             ];
         });
 
+        RateLimiter::for('app-signup', function (Request $request) {
+            return Limit::perDay(10)->by($request->ip());
+        });
+
         // Model::preventLazyLoading(true);
     }
 
diff --git a/resources/views/auth/iar.blade.php b/resources/views/auth/iar.blade.php
index e845dc1e4..cc062ffab 100644
--- a/resources/views/auth/iar.blade.php
+++ b/resources/views/auth/iar.blade.php
@@ -57,27 +57,14 @@
 @push('styles')
     <style>
         :root {
-            --bg-color: #f8f9fa;
-            --card-bg: #ffffff;
-            --text-color: #212529;
-            --text-muted: #6c757d;
-            --input-bg: #ffffff;
-            --input-border: #ced4da;
-            --input-focus: #80bdff;
-            --card-shadow: 0 0.125rem 0.25rem rgba(0, 0, 0, 0.075);
-        }
-
-        @media (prefers-color-scheme: dark) {
-            :root {
-                --bg-color: #111827;
-                --card-bg: #1f2937;
-                --text-color: #f3f4f6;
-                --text-muted: #9ca3af;
-                --input-bg: #374151;
-                --input-border: #4b5563;
-                --input-focus: #3b82f6;
-                --card-shadow: 0 0.125rem 0.25rem rgba(0, 0, 0, 0.3);
-            }
+            --bg-color: #111827;
+            --card-bg: #1f2937;
+            --text-color: #f3f4f6;
+            --text-muted: #9ca3af;
+            --input-bg: #374151;
+            --input-border: #4b5563;
+            --input-focus: #3b82f6;
+            --card-shadow: 0 0.125rem 0.25rem rgba(0, 0, 0, 0.3);
         }
 
         body {
diff --git a/routes/web.php b/routes/web.php
index 8425c6e52..b4eaee810 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -140,7 +140,7 @@ Route::domain(config('pixelfed.domain.app'))->middleware(['validemail', 'twofact
     Route::get('discover/location/country/{country}', 'PlaceController@directoryCities');
 
     Route::get('/i/app-email-verify', 'AppRegisterController@index');
-    Route::post('/i/app-email-verify', 'AppRegisterController@store');
+    Route::post('/i/app-email-verify', 'AppRegisterController@store')->middleware('throttle:app-signup');
 
     Route::group(['prefix' => 'i'], function () {
         Route::redirect('/', '/');