Page MenuHomePhabricator

Ratelimit for thumbnailing is applied to users with noratelimit
Closed, DeclinedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

What happens?:
429 too many requests

What should have happened instead?:
Thumbnails would be expected to be loaded as you have noratelimit.

Other information (browser name/version, screenshots, etc.):
In Chromium I see that for requests to upload.wikimedia.org all the cookies that would identify me are only visible in developer tools when I click "show filtered out request cookies", so the thumbnails are loaded as if I'm an anon.

Event Timeline

WONTFIX, Thumbor intentionally does not have access to MediaWiki session information for privacy and isolation reasons. Implementing this would require proxying all requests through MediaWiki (like we do for private wikis), which is undesirable from a performance standpoint. Thumbor ratelimits are also largely unrelated to MediaWiki ratelimits and are set based on the limitations of the shared thumbnailing infrastructure.

This comment was removed by AlexisJazz.