{"action":"created","issue":{"url":"https://api.github.com/repos/gnieh/bluelatex/issues/212","labels_url":"https://api.github.com/repos/gnieh/bluelatex/issues/212/labels{/name}","comments_url":"https://api.github.com/repos/gnieh/bluelatex/issues/212/comments","events_url":"https://api.github.com/repos/gnieh/bluelatex/issues/212/events","html_url":"https://github.com/gnieh/bluelatex/issues/212","id":65710865,"number":212,"title":"Deny-of-service with /session","user":{"login":"monperrus","id":803666,"avatar_url":"https://avatars.githubusercontent.com/u/803666?v=3","gravatar_id":"","url":"https://api.github.com/users/monperrus","html_url":"https://github.com/monperrus","followers_url":"https://api.github.com/users/monperrus/followers","following_url":"https://api.github.com/users/monperrus/following{/other_user}","gists_url":"https://api.github.com/users/monperrus/gists{/gist_id}","starred_url":"https://api.github.com/users/monperrus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/monperrus/subscriptions","organizations_url":"https://api.github.com/users/monperrus/orgs","repos_url":"https://api.github.com/users/monperrus/repos","events_url":"https://api.github.com/users/monperrus/events{/privacy}","received_events_url":"https://api.github.com/users/monperrus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/gnieh/bluelatex/labels/wontfix","name":"wontfix","color":"ffffff"}],"state":"open","locked":false,"assignee":{"login":"satabin","id":2537737,"avatar_url":"https://avatars.githubusercontent.com/u/2537737?v=3","gravatar_id":"","url":"https://api.github.com/users/satabin","html_url":"https://github.com/satabin","followers_url":"https://api.github.com/users/satabin/followers","following_url":"https://api.github.com/users/satabin/following{/other_user}","gists_url":"https://api.github.com/users/satabin/gists{/gist_id}","starred_url":"https://api.github.com/users/satabin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/satabin/subscriptions","organizations_url":"https://api.github.com/users/satabin/orgs","repos_url":"https://api.github.com/users/satabin/repos","events_url":"https://api.github.com/users/satabin/events{/privacy}","received_events_url":"https://api.github.com/users/satabin/received_events","type":"User","site_admin":false},"milestone":null,"comments":1,"created_at":"2015-04-01T15:23:12Z","updated_at":"2015-04-01T16:46:03Z","closed_at":null,"body":"I've just performed an unintentional DOS on bluelatex.\r\n\r\nI was testing my backup scripts. I created a lot of tokens without closing them with a DELETE request.\r\n\r\nAt some points, the server started to stop responding with \"503 Service Unavailable, too many sessions\"\r\n  "},"comment":{"url":"https://api.github.com/repos/gnieh/bluelatex/issues/comments/88550385","html_url":"https://github.com/gnieh/bluelatex/issues/212#issuecomment-88550385","issue_url":"https://api.github.com/repos/gnieh/bluelatex/issues/212","id":88550385,"user":{"login":"satabin","id":2537737,"avatar_url":"https://avatars.githubusercontent.com/u/2537737?v=3","gravatar_id":"","url":"https://api.github.com/users/satabin","html_url":"https://github.com/satabin","followers_url":"https://api.github.com/users/satabin/followers","following_url":"https://api.github.com/users/satabin/following{/other_user}","gists_url":"https://api.github.com/users/satabin/gists{/gist_id}","starred_url":"https://api.github.com/users/satabin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/satabin/subscriptions","organizations_url":"https://api.github.com/users/satabin/orgs","repos_url":"https://api.github.com/users/satabin/repos","events_url":"https://api.github.com/users/satabin/events{/privacy}","received_events_url":"https://api.github.com/users/satabin/received_events","type":"User","site_admin":false},"created_at":"2015-04-01T16:46:03Z","updated_at":"2015-04-01T16:46:03Z","body":"That is a limitation in tiscaf.\r\nThe plan is to get rid of tiscaf as soon as possible, so I would say, this won't be fixed.\r\nSession timeout is set by default to 10 minutes (IIRC), but you should work this around by closing sessions you opened.\r\nAlso in the next version with spray as HTTP server, the authentication will go a drastically different way, so it probably won't apply to this version."}}