3 people 1d6959c4ac chore: system wide ratelimit per path (#25080) ...

* chore: Add system wide rate limiting

* Handle and convert HttpError to 429

* Make algo 32-bit to prevent <ES2020 error + fix sms manager unit test

* Change core to common to go from 10 requests per minute to 200

* Remove redundant function

* Fix integration tests

* Make sure we allow all legal POST routes

* Allow tRPC post calls

* Add matcher tests on middleware

* Add matcher tests on middleware

* Fix matcher to not use regex

* Fix missing POST allow rule for /api/auth/callback/credentials

* Missed the api/book/event endpoints

* Add missing pages/api routes

* Remove POST middleware for now, very risky

* Remove tests for POST protection

---------

Co-authored-by: Volnei Munhoz <volnei.munhoz@gmail.com>

2025-11-12 22:01:59 +00:00

..

__mocks__

feat: Round Robin groups (#22296)

2025-08-08 12:56:13 +01:00

__tests__

refactor: Remove circular deps between @calcom/lib and @calcom/features [1] (#24399)

2025-10-13 12:01:02 -03:00

apps

refactor: circular deps between app store and lib [3] (#23742)

2025-09-14 11:24:16 -03:00

auth

refactor: remove @calcom/features dependency from @calcom/prisma (#23820)

2025-09-18 16:40:39 +00:00

bookings

feat: add booking details sheet for /bookings (#24795)

2025-11-11 08:40:55 -03:00

browser

fix: Scrolling to timeslot issue on Safari with inline-embeds (#22547)

2025-07-23 04:26:08 -03:00

builders/CalendarEvent

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

components

chore: move ServerTrans to packages/lib (#20353)

2025-03-25 10:23:42 +00:00

crmManager

refactor: Remove circular deps between @calcom/lib and @calcom/features [1] (#24399)

2025-10-13 12:01:02 -03:00

cva

fix: typos in several package/ directories (#19495)

2025-02-24 14:44:08 +00:00

dayjs

fix: Cal Video sidebar not showing meeting time in timezone (#22821)

2025-07-31 16:34:02 -04:00

domainManager

fix crash in vercel domain creation flow (#20281)

2025-03-26 13:05:55 +05:30

hooks

refactor: remove tRPC references from packages/lib (#24553)

2025-10-27 18:13:25 +00:00

idempotencyKey

fix: Generate new idempotency key when round robin reassigning (#22065)

2025-06-26 17:43:31 +00:00

intervalLimits

refactor: Remove circular deps between @calcom/lib and @calcom/features [1] (#24399)

2025-10-13 12:01:02 -03:00

payment

refactor: circular deps between app store and lib [3] (#23742)

2025-09-14 11:24:16 -03:00

raqb

refactor: circular deps between app store and lib [6] (#23971)

2025-10-09 14:02:12 +00:00

schedules/transformers

refactor: remove tRPC references from packages/lib (#24553)

2025-10-27 18:13:25 +00:00

server

chore: system wide ratelimit per path (#25080)

2025-11-12 22:01:59 +00:00

service

refactor: Remove circular deps between @calcom/lib and @calcom/features [2] (#24438)

2025-10-17 06:48:08 -03:00

sync

chore: Cleanup Close.com (#16929)

2024-11-13 15:14:31 -05:00

test

feat: add createdAt and updatedAt fields to EventType model (#23949)

2025-09-24 06:59:46 +01:00

tracing

feat: distributed tracking (#24717)

2025-10-30 14:12:22 +00:00

unstable_cache

perf: server-fetch data for all pages in /settings/my-account (#20712)

2025-07-24 22:36:40 +01:00

array.test.ts

feat: Support event level conflict checking (#18052)

2024-12-19 19:34:24 +00:00

array.ts

feat: Support event level conflict checking (#18052)

2024-12-19 19:34:24 +00:00

availability.ts

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

buildCalEventFromBooking.ts

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

CalendarAppError.ts

chore: rename DWD to DelegationCredential (#19744)

2025-03-05 10:42:20 -03:00

CalendarService.ts

feat: upgrade Prisma to 6.16.0 with no-rust engine (#23816)

2025-10-21 20:02:03 +01:00

CalEventParser.test.ts

feat: Upgrade to Next 15 (#18834)

2025-03-20 21:30:51 -03:00

CalEventParser.ts

fix: strip internal $RCH$ prefix from cancellation reason in ICS files (#25016)

2025-11-09 21:15:17 +00:00

checkIfItFallbackImage.ts

fix avatar remove button (#12249)

2023-11-15 15:23:33 +05:30

checkRateLimitAndThrowError.test.ts

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

checkRateLimitAndThrowError.ts

chore: system wide ratelimit per path (#25080)

2025-11-12 22:01:59 +00:00

CloseCom.ts

fix: typos in several package/ directories (#19495)

2025-02-24 14:44:08 +00:00

CloseComeUtils.ts

refactor: Introduce crmManager (#14272)

2024-05-31 13:54:52 +00:00

connectedCalendar.ts

feat: Support event level conflict checking (#18052)

2024-12-19 19:34:24 +00:00

constants.ts

fix: Alternate reschedule behaviour for past bookings - Don't allow new booking (#23736)

2025-09-17 12:47:45 +01:00

contructEmailFromPhoneNumber.ts

feat: booking with phone number (#14461)

2024-09-11 17:56:04 -07:00

convertToNewDurationType.ts

Fixed wrong calculation of duration type on event type page. (#5557)

2022-11-17 13:38:03 +05:30

cookie.ts

fix: Valid timeslot marked 'slot no longer available' (#19590)

2025-02-27 11:13:36 -07:00

crypto.test.ts

feat: Self hosted onboarding (#22102)

2025-07-09 09:26:01 +01:00

crypto.ts

refactor: Typescript fixes and updates for bumping ts version to 5.8.2 (#19690)

2025-03-05 09:17:08 -03:00

csvUtils.ts

refactor: Remove circular deps between @calcom/lib and @calcom/features [1] (#24399)

2025-10-13 12:01:02 -03:00

currencyConversions.ts

refactor: circular deps between app store and lib [5] (#23936)

2025-09-19 10:16:56 -03:00

dbReadResponseSchema.ts

refactor: Remove circular deps between @calcom/lib and @calcom/features [2] (#24438)

2025-10-17 06:48:08 -03:00

default-cookies.ts

refactor: cookie domain logic in defaultCookies (#22168)

2025-06-30 20:21:16 +00:00

defaultAvatarImage.ts

fix: #14769 (#14777)

2024-04-27 18:14:37 +02:00

delegationCredential.ts

refactor: circular deps between app store and lib [6] (#23971)

2025-10-09 14:02:12 +00:00

deriveAppDictKeyFromType.ts

chore: removed last web3 references (#12540)

2023-11-29 11:57:50 +00:00

emailSchema.ts

fix: Hotfix in change from @spammer.com to spammer.com (#24479)

2025-10-15 15:38:14 +01:00

entityPermissionUtils.shared.ts

refactor: prevents mixed server/clients imports (#21499)

2025-05-25 09:07:49 +00:00

env.ts

Feature: Verify login on signup with magic link. (#2122)

2022-04-21 14:32:25 -06:00

errorCodes.ts

feat: add user-specific email verification setting (#24298)

2025-10-15 11:36:03 +00:00

errors.ts

Extract some refactor work from util.ts to improve error handling (#17912)

2024-12-02 19:06:45 +00:00

eslint.config.mjs

refactor: Remove circular deps between @calcom/lib and @calcom/features [1] (#24399)

2025-10-13 12:01:02 -03:00

extract-base-email.ts

chore: Add guest email blacklist (#15255)

2024-05-30 17:13:34 +00:00

fetch-wrapper.ts

feat: Allow reschedule when max booker bookings have been reached (#21778)

2025-06-13 23:54:33 +00:00

fetchUsername.ts

fix: Correctly prefill username in case of non-org email invite in an org (#12854)

2023-12-19 02:44:48 +00:00

fetchWithTimeout.ts

fix: refactor i18n loadTranslations and set timeout to 3s (#22878)

2025-08-04 10:30:18 +01:00

findDurationType.ts

Enforces explicit type imports (#7158)

2023-02-16 15:39:57 -07:00

formatCalendarEvent.ts

fix: different calendar hosts (#24000)

2025-10-01 12:15:34 +03:00

formatPhoneNumber.ts

refactor: small improvements for cal ai (#23444)

2025-08-29 17:42:15 +05:30

formbricks.ts

feat: integrate formbricks for team disband action (#13362)

2024-02-07 04:14:26 -03:00

fromEntriesWithDuplicateKeys.ts

feat: advanced tab platform wrapper (#16941)

2024-10-10 17:09:03 +03:00

generateHashedLink.ts

feat: Multiple Private links per Event Type (#15896)

2024-10-03 00:58:54 +05:30

getAdditionalEmailHeaders.ts

fix: add sendgrid-specific header only for SendGrid smtp server (#11932)

2023-11-16 13:51:30 -03:00

getAvatarUrl.ts

chore: Remove all avatar/logo references (#14532)

2024-04-18 21:54:16 -07:00

getBooking.tsx

fix: Zod error caused by number-type responses (#23804)

2025-09-17 15:01:21 +00:00

getBrandColours.test.ts

refactor: Moving from jest to vitest (#9035)

2023-05-24 23:35:44 +00:00

getBrandColours.tsx

fix: Use constants.ts for brand colours > db DEFAULT (#13167)

2024-01-11 20:22:35 +00:00

getCalcomUrl.ts

fix: Add cal.eu to IS_CALCOM (#23111)

2025-08-18 16:04:48 +05:30

getClientErrorFromUnknown.ts

refactor: remove tRPC references from packages/lib (#24553)

2025-10-27 18:13:25 +00:00

getIP.ts

use cloudflare real IP (#10449)

2023-07-28 15:11:44 +00:00

getMetadataHelpers.ts

feat: admin org list now shows all, dns check added (#10875)

2023-08-23 21:01:12 +00:00

getOrgIdFromMemberOrTeamId.ts

fix: cal ai webhook (#24368)

2025-11-05 13:31:55 +04:00

getReplyToEmail.test.ts

feat: custom reply To Email (#20771)

2025-04-23 06:44:44 -07:00

getReplyToEmail.ts

fix: replyTo includes the correct email (#21843)

2025-06-17 10:45:44 +00:00

getReplyToHeader.ts

fix: replyTo includes the correct email (#21843)

2025-06-17 10:45:44 +00:00

getSafe.ts

feat: Upgrade to Next 15 (#18834)

2025-03-20 21:30:51 -03:00

getSafeRedirectUrl.test.ts

Prevent xss in preview aand load resources from known URL (#18978)

2025-02-05 12:17:56 +05:30

getSafeRedirectUrl.ts

Prevent xss in preview aand load resources from known URL (#18978)

2025-02-05 12:17:56 +05:30

getTeamIdFromEventType.ts

feat: optimize Prisma queries by replacing findFirst with findUnique where applicable (#21826)

2025-06-17 09:52:02 +03:00

getValidRhfFieldName.test.ts

fix: typos in several package/ directories (#19495)

2025-02-24 14:44:08 +00:00

getValidRhfFieldName.ts

feat: bookingFields identifier supports - and _ characters (#16353)

2024-08-26 12:15:02 +02:00

gtm.ts

feat: gtm push signup event (#14031)

2024-03-08 15:13:29 +00:00

hasEditPermissionForUser.ts

refactor: remove tRPC references from packages/lib (#24553)

2025-10-27 18:13:25 +00:00

hashedLinksUtils.ts

feat: Enhance private link expiration with usage and date limits (#22304)

2025-07-24 19:54:44 +01:00

hasKeyInMetadata.ts

feature/settings-username-update (#2306)

2022-07-06 13:31:07 -06:00

http-error.ts

feat: Allow reschedule when max booker bookings have been reached (#21778)

2025-06-13 23:54:33 +00:00

i18n.ts

Fallback to next app default language (en) when user didn't specify locale. (#16425)

2024-08-30 21:37:10 +05:30

intervalTree.ts

perf: optimize filterRedundantDateRanges from O(n²) to O(n log n) (#22093)

2025-07-03 10:59:33 +01:00

invertLogoOnDark.ts

fix: logo lack of contrast (#12401)

2023-11-17 14:10:58 +00:00

isEqual.ts

feat: Attribute filter/Segment for Round Robin hosts (#17361)

2024-11-20 10:22:53 +05:30

isEventTypeColor.ts

feat: Assign colors to events (#15298)

2024-08-14 15:10:40 +02:00

isKeyInObject.ts

Adds basic global feature flags (#7459)

2023-03-24 17:59:04 -07:00

isMac.ts

Adds a fully extensible command(ctrl)+k interface for Cal (#3346)

2022-07-14 06:45:07 +00:00

isOutOfBounds.timezone.test.ts

fix: Future Limit Calculations (#15825)

2024-08-02 18:00:50 +05:30

isOutOfBounds.tsx

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

isPrismaObj.ts

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

isProblematicTimezone.ts

Fix: Filter Timezones by cities (#7540)

2023-03-06 17:52:20 +00:00

isRecurringEvent.ts

feat(lib): add more tests to lib package (#7210)

2023-03-10 22:10:56 +00:00

isSmsCalEmail.ts

feat: booking with phone number (#14461)

2024-09-11 17:56:04 -07:00

jest.config.json

refactor: v2 event-types (#15457)

2024-06-21 10:49:12 +00:00

jsonUtils.ts

App Store (#1869)

2022-03-23 15:00:30 -07:00

logger.server.ts

fix: Add critical logger for booking created log to prevent stdout buffering issues (#24570)

2025-10-28 12:59:44 -03:00

logger.ts

chore: Add logging to handleNewBooking (#22868)

2025-08-02 17:15:30 +01:00

markdownIt.ts

Fixes formatted description in email + sanitize html everywhere (#7928)

2023-03-28 09:40:13 +00:00

markdownToSafeHTML.ts

fix: unordered list issue (#23454)

2025-08-30 15:37:10 +00:00

markdownToSafeHTMLClient.ts

fix: unordered list issue (#23454)

2025-08-30 15:37:10 +00:00

navigateInTopWindow.ts

fix: Broken navigation after booking creation in some cases (#15664)

2024-07-08 13:56:58 +00:00

next-seo.config.ts

chore: Adds deprecated-imports-next-router (#14486)

2024-04-16 11:46:45 +01:00

notEmpty.ts

App Store (#1869)

2022-03-23 15:00:30 -07:00

objectKeys.ts

Enables strict mode in nextjs apps (#2354)

2022-04-04 20:26:14 +00:00

OgImages.tsx

perf: og image caching v2 (#23189)

2025-10-29 10:36:17 -03:00

package.json

chore: upgrade eslint 9 (#24002)

2025-09-24 22:20:49 +09:00

parse-dates.ts

fix: recurring events with calendar connections (#12250)

2023-11-07 12:09:56 -03:00

parse-zone.ts

New Booker Component (preparations for booker atom) (#6792)

2023-04-24 16:32:30 +02:00

perf.ts

perf: lazy load tRPC routes (#8167)

2023-04-25 19:39:47 -03:00

piiFreeData.ts

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

random.test.ts

refactor: Moving from jest to vitest (#9035)

2023-05-24 23:35:44 +00:00

random.ts

feat(lib): add more tests to lib package (#7210)

2023-03-10 22:10:56 +00:00

rateLimit.ts

feat: add 10 minute cooldown in instant meetings (#24119)

2025-09-29 16:03:03 +04:00

recentImpersonations.ts

feat: implement recent impersonations list with localStorage storage (#23610)

2025-09-06 19:56:08 +05:30

recurringStrings.ts

fix: Recurring events set to "yearly" don't recur (#24361)

2025-11-03 16:20:15 +00:00

redactError.ts

Avoid using prisma types on client (#23566)

2025-09-04 00:58:13 +00:00

redactSensitiveData.test.ts

feat: add missing sensitive fields to redactSensitiveData (#24121)

2025-10-01 20:26:58 -03:00

redactSensitiveData.ts

feat: add missing sensitive fields to redactSensitiveData (#24121)

2025-10-01 20:26:58 -03:00

redirect.ts

refactor: Billing service (#15366)

2024-10-04 13:44:50 -07:00

retellAIFetcher.ts

feat: retell AI webhook url (#14430)

2024-04-05 22:44:57 +05:30

safeStringify.ts

fix: Show error log (#14960)

2024-05-10 08:47:57 +01:00

sanitizeCalendarObject.ts

Caldav/refactor: Mutiple Fixes and General code improvement (#8031)

2023-04-12 14:30:39 -03:00

sdk-event.ts

feat: Add framework to send all events fired for embed to Analytics Apps (#15173)

2024-05-31 16:07:09 +00:00

Sendgrid.ts

chore: update tslog from 3.2.1 to 4.9.2 (#11717)

2023-10-17 19:00:48 +00:00

sentryWrapper.ts

refactor: Uses withReporting to force named functions for tracing (#21219)

2025-05-12 13:22:52 -04:00

serverConfig.ts

feat: add resend email transport (#12645)

2023-12-04 15:31:55 -08:00

slugify.test.ts

fix: typos in several package/ directories (#19495)

2025-02-24 14:44:08 +00:00

slugify.ts

refactor: Typescript fixes and updates for bumping ts version to 5.8.2 (#19690)

2025-03-05 09:17:08 -03:00

smsLockState.ts

chore: system wide ratelimit per path (#25080)

2025-11-12 22:01:59 +00:00

stripe-error.ts

refactor: Error code - remove circular dep between app store <-> lib (#23669)

2025-09-08 07:31:28 -03:00

stripMarkdown.ts

fix: strip markdown from meta description tag in users page (#8769)

2023-05-15 07:44:23 +00:00

telemetry.ts

feat: Upgrade to Next 15 (#18834)

2025-03-20 21:30:51 -03:00

testEmails.ts

test: testing workflow triggers (#12823)

2023-12-21 18:57:06 +05:30

testSMS.ts

test: add unit tests for sms sending (#14737)

2024-05-02 10:42:38 -04:00

text.test.ts

refactor: Moving from jest to vitest (#9035)

2023-05-24 23:35:44 +00:00

text.ts

feat(lib): add more tests to lib package (#7210)

2023-03-10 22:10:56 +00:00

timeFormat.ts

refactor: event type builder (#19459)

2025-03-20 07:49:14 -07:00

timezone.ts

fix: timezone-dropdown (#23469)

2025-08-31 08:20:19 +00:00

timezoneConstants.ts

perf: Remove dayjs import from main constants.ts file (#19644)

2025-03-11 10:37:51 +00:00

timeZones.ts

feat: allow timezones selection in Booker atom via prop (#20044)

2025-03-20 14:05:45 +00:00

totp.ts

fix: add 2fa and email verification grace period (#10771)

2023-08-17 16:13:04 +02:00

tsconfig.json

perf: Remove tRPC types from @calcom/lib (#24551)

2025-10-19 13:14:25 +00:00

tsconfig.test.json

feat(lib): add more tests to lib package (#7210)

2023-03-10 22:10:56 +00:00

turndownService.ts

chore: plain text plugin for Editor (#17134)

2024-11-11 20:23:12 +05:30

validateBookerLayouts.ts

feat: event settings booker layout toggle (#9082)

2023-06-06 15:31:43 +00:00

videoTokens.ts

feat: recording url with 6 months expiry time (#18707)

2025-05-23 13:01:33 +01:00

WebAppURL.ts

chore: Introduce a new class WebAppURL that extends URL (#14982)

2024-07-18 07:27:34 +00:00

webstorage.ts

feat: move bookings tabs to sidebar navigation (#24605)

2025-10-30 15:35:26 +01:00

weekday.test.ts

refactor: Moving from jest to vitest (#9035)

2023-05-24 23:35:44 +00:00

weekday.ts

feat(lib): add more tests to lib package (#7210)

2023-03-10 22:10:56 +00:00

weekstart.test.ts

fix: #15749 Display availability page as per weekstart setting (#15753)

2024-07-16 11:31:02 +02:00

weekstart.ts

fix: #15749 Display availability page as per weekstart setting (#15753)

2024-07-16 11:31:02 +02:00