Function require_sensitive_request

IntelOSINT.py:2171–2180

(scope, limit=20, window=60)

def require_sensitive_request(scope, limit=20, window=60):
    if rate_limited(scope, limit=limit, window=window):
        return jsonify({"status": "error", "message": "Troppe richieste. Riprova tra poco."}), 429
    csrf = request.headers.get("X-CSRF-Token", "")
    expected = flask_session.get("csrf_token", "")
    if not flask_session.get("admin_authenticated"):
        return jsonify({"status": "error", "message": "Sessione amministratore non valida."}), 401
    if not expected or not hmac.compare_digest(csrf, expected):
        return jsonify({"status": "error", "message": "CSRF token non valido."}), 403
    return None


def require_authenticated_download(scope, limit=40, window=60):