更新安全限流阈值

PUT

/api/v1/admin/settings/security-limits

Owner 专属，需要 manage_authentication_policy 权限；浏览器会话还需要 CSRF。

请求参数

Body 参数application/json必填

示例

{
    "unauthenticated_source_qps": 30,
    "authorization_code_ttl_seconds": 300,
    "pending_request_ttl_seconds": 600,
    "max_pending_requests_per_client": 20,
    "max_pending_requests_global": 1000,
    "auth_failure_window_seconds": 900,
    "account_failure_limit": 10,
    "ip_failure_limit": 30,
    "totp_ticket_failure_limit": 5,
    "external_login_state_ttl_seconds": 600,
    "external_login_state_rate_window_seconds": 60,
    "external_login_state_rate_limit": 30,
    "external_login_state_max_pending": 10000
}

请求示例代码

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request PUT '/api/v1/admin/settings/security-limits' \
--header 'Content-Type: application/json' \
--data '{
    "unauthenticated_source_qps": 30,
    "authorization_code_ttl_seconds": 300,
    "pending_request_ttl_seconds": 600,
    "max_pending_requests_per_client": 20,
    "max_pending_requests_global": 1000,
    "auth_failure_window_seconds": 900,
    "account_failure_limit": 10,
    "ip_failure_limit": 30,
    "totp_ticket_failure_limit": 5,
    "external_login_state_ttl_seconds": 600,
    "external_login_state_rate_window_seconds": 60,
    "external_login_state_rate_limit": 30,
    "external_login_state_max_pending": 10000
}'

返回响应

🟢200成功

application/json

已更新的安全限流阈值

Bodyapplication/json

示例

{
    "unauthenticated_source_qps": 30,
    "authorization_code_ttl_seconds": 300,
    "pending_request_ttl_seconds": 600,
    "max_pending_requests_per_client": 20,
    "max_pending_requests_global": 1000,
    "auth_failure_window_seconds": 900,
    "account_failure_limit": 10,
    "ip_failure_limit": 30,
    "totp_ticket_failure_limit": 5,
    "external_login_state_ttl_seconds": 600,
    "external_login_state_rate_window_seconds": 60,
    "external_login_state_rate_limit": 30,
    "external_login_state_max_pending": 10000
}

🟠400请求有误

🟠401没有权限

🟠403禁止访问

🟠413

🟠415

🟠422参数错误

🔴503服务器故障

修改于 2026-10-01 05:59:34

查询注册邀请码使用明细

查看账号的认证因子状态