Revert accidental removal.

letsencrypt · Oct 25, 2023 · 3ce9716 · 3ce9716
1 parent 76a020a
commit 3ce9716
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/ratelimits/limiter.go b/ratelimits/limiter.go
@@ -136,6 +136,10 @@ func (l *Limiter) Check(ctx context.Context, bucket BucketWithCost) (*Decision,
 		return nil, err
 	}
 
+	if bucket.cost > limit.Burst {
+		return nil, ErrInvalidCostOverLimit
+	}
+
 	// Remove cancellation from the request context so that transactions are not
 	// interrupted by a client disconnect.
 	ctx = context.WithoutCancel(ctx)
@@ -171,6 +175,10 @@ func (l *Limiter) Spend(ctx context.Context, bucket BucketWithCost) (*Decision,
 		return nil, err
 	}
 
+	if bucket.cost > limit.Burst {
+		return nil, ErrInvalidCostOverLimit
+	}
+
 	start := l.clk.Now()
 	status := Denied
 	defer func() {