Page MenuHomePhabricator

Ensure rate limiting is in place for GraphQL requests
Closed, ResolvedPublic5 Estimated Story Points

Description

Use rate limiting rules as set in the Wikibase REST API and the Action API. For now, these are applied across the board and there are no exceptions for authenticated requests, if there is a need for it later, we can add it.

Event Timeline

WMDE-leszek set the point value for this task to 5.Dec 16 2025, 9:47 AM
WMDE-leszek moved this task from Polished to Ready for planning on the Wikibase Reuse Team board.

It seems that there aren't any limits for read-only requests in mediawiki. Rate limiting only applies to edit requests, and the corresponding ticket for the REST API (T366594) also only talks about limits for edit requests and temp user creations.

https://www.mediawiki.org/wiki/API:Etiquette#Request_limit says

There is no hard speed limit on read requests, but be considerate and try not to take a site down. [...] Requests which make edits, modify state or otherwise are not read-only requests, are subject to rate limiting.

TL;DR nothing to do here since our GraphQL API is read-only!?

Thanks for looking into this.

Moving the ticket to done since no action is needed here.