README.md

Magento Rest/GraphQl API Ratelimit Extend Patch

source:

• https://devdocs.magento.com/guides/v2.4/comp-mgr/patching/composer.html
• https://support.magento.com/hc/en-us/articles/4406893342093
• https://devdocs.magento.com/guides/v2.4/get-started/api-security.html#rate-limiting

To apply the patch using Composer:

1. Open your command line application and navigate to your project directory
2. Add the cweagans/composer-patches plugin to the composer.json file.

  composer require cweagans/composer-patches

3. Edit the `composer.json file and add the following section to specify:
   • Module: magento/magento2-base
   • Title: MC-43048 set ratelimit
   • Patch to patch: https://gist.githubusercontent.com/lewisvoncken/a10d2856966084243ff0ab336d503247/raw/MC-43048__set_rate_limits__2.4.3.patch or https://gist.githubusercontent.com/lewisvoncken/a10d2856966084243ff0ab336d503247/raw/MC-43048__set_rate_limits__2.3.7-p1.patch

For example (2.3.7-p1):

  "extra": {
      "composer-exit-on-patch-failure": true,
      "patches": {
          "magento/magento2-base": {
              "MC-43048 set ratelimit": "https://gist.githubusercontent.com/lewisvoncken/a10d2856966084243ff0ab336d503247/raw/MC-43048__set_rate_limits__2.3.7-p1.patch"
          }
      }
  }

For example (2.4.3):

  "extra": {
      "composer-exit-on-patch-failure": true,
      "patches": {
          "magento/magento2-base": {
              "MC-43048 set ratelimit": "https://gist.githubusercontent.com/lewisvoncken/a10d2856966084243ff0ab336d503247/raw/MC-43048__set_rate_limits__2.4.3.patch"
          }
      }
  }

4. Apply the patch. Use the -v option only if you want to see debugging information.

# Dev
composer install -v
# Production:
composer install --no-dev

5. optional Update the composer.lock file. The lock file tracks which patches have been applied to each Composer package in an object.

composer update --lock

IMPORTANT

DI COMPILE

The patch is applied to a di.xml file so when applying it manually in production mode it requires a deployment/re-compile

php bin/magento setup:di:compile

version controll

Perhaps the app/etc/di.xml / composer.json / composer.lock is added through version control than also commit & push.

MC-43048__set_rate_limits__2.3.7-p1.patch

diff --git a/app/etc/di.xml b/app/etc/di.xml
index ace043beb62..7751604ea1d 100644
--- a/app/etc/di.xml
+++ b/app/etc/di.xml
@@ -1896,12 +1896,12 @@
     </type>
     <type name="Magento\Framework\Webapi\Validator\EntityArrayValidator">
         <arguments>
-            <argument name="complexArrayItemLimit" xsi:type="number">20</argument>
+            <argument name="complexArrayItemLimit" xsi:type="number">999999</argument>
         </arguments>
     </type>
     <type name="Magento\Framework\Webapi\Validator\SearchCriteriaValidator">
         <arguments>
-            <argument name="maximumPageSize" xsi:type="number">300</argument>
+            <argument name="maximumPageSize" xsi:type="number">999999</argument>
         </arguments>
     </type>
     <preference for="Magento\Framework\GraphQl\Query\Resolver\Argument\ValidatorInterface" type="Magento\Framework\GraphQl\Query\Resolver\Argument\Validator\CompositeValidator"/>
@@ -1914,7 +1914,7 @@
     </type>
     <type name="Magento\Framework\GraphQl\Query\Resolver\Argument\Validator\SearchCriteriaValidator">
         <arguments>
-            <argument name="maxPageSize" xsi:type="number">300</argument>
+            <argument name="maxPageSize" xsi:type="number">999999</argument>
         </arguments>
     </type>
     <type name="Magento\Framework\Webapi\ServiceInputProcessor">

MC-43048__set_rate_limits__2.4.3.patch

diff --git a/app/etc/di.xml b/app/etc/di.xml
index 078fe71913f..6ab3bdfd35c 100644
--- a/app/etc/di.xml
+++ b/app/etc/di.xml
@@ -1946,12 +1946,12 @@
     </type>
     <type name="Magento\Framework\Webapi\Validator\EntityArrayValidator">
         <arguments>
-            <argument name="complexArrayItemLimit" xsi:type="number">20</argument>
+            <argument name="complexArrayItemLimit" xsi:type="number">999999</argument>
         </arguments>
     </type>
     <type name="Magento\Framework\Webapi\Validator\SearchCriteriaValidator">
         <arguments>
-            <argument name="maximumPageSize" xsi:type="number">300</argument>
+            <argument name="maximumPageSize" xsi:type="number">999999</argument>
         </arguments>
     </type>
     <preference for="Magento\Framework\GraphQl\Query\Resolver\Argument\ValidatorInterface" type="Magento\Framework\GraphQl\Query\Resolver\Argument\Validator\CompositeValidator"/>
@@ -1964,7 +1964,7 @@
     </type>
     <type name="Magento\Framework\GraphQl\Query\Resolver\Argument\Validator\SearchCriteriaValidator">
         <arguments>
-            <argument name="maxPageSize" xsi:type="number">300</argument>
+            <argument name="maxPageSize" xsi:type="number">999999</argument>
         </arguments>
     </type>
     <type name="Magento\Framework\Webapi\ServiceInputProcessor">