Project export download rate limit inconsistent
Summary
The project import/export documentation currently states that export downloads are limited to "1 download per group per minute". However, this only seems to be the case if the web_url
is used and not the api_url
.
Steps to reproduce
- Start the export of two different projects (e.g. two personal projects)
- Wait until both exports are ready to be downloaded
- Try to download both exports using the
web_url
(used by the UI) - The second download should fail with a rate limit message
- Now try to download both exports using the
api_url
(https://gitlab.com/api/v4/projects/{id}/export/download
) - Both downloads will succeed
What is the current bug behavior?
The rate limit for downloading project exports seems to be inconsistent between api_url
and web_url
. The latter only allows one download per minute - as intended - while the former allows downloads seemingly unrestricted (tested with up to 13 different export downloads in the span of one minute). The api_url
seems to be only rate limited, if one tries to re-download the same project export within one minute.
Happens for personal and group projects alike.
What is the expected correct behavior?
The api_url
should be rate limited just like the web_url
and only allow "1 download per group per minute".
Relevant logs and/or screenshots
Output of checks
This bug happens on GitLab.com