state: limit refused writes per user

A write every node would refuse is rolled back by forking the document
at the heads before it, under the write lock, at a cost that grows with
the document's history. A user could ask for such writes in a loop.

Count each user's refused writes over the last minute. Past
--refused-writes-per-minute (default 10), its writes are answered 429
without being tried, until the oldest refusal leaves the minute.

1 files changed, 1 insertions, 0 deletions

diff --git a/src/simtest/mod.rs b/src/simtest/mod.rs
index 253ec54..8d6437a 100644
--- a/src/simtest/mod.rs
+++ b/src/simtest/mod.rs
@@ -222,6 +222,7 @@ impl Sim {
             session_lifetime: Duration::from_secs(86400),
             challenge_lifetime: Duration::from_secs(300),
             key_logins_per_user: 100,
+            refused_writes_per_minute: 10,
             genesis_root: None,
             strict_keys: Vec::new(),
             cors_origins: Vec::new(),