ACSD-68206: The issue occurs when the GraphQL Application server uses the Rate Limiting feature…

Categories

Cache, GraphQL

Components

magento/framework

Origin

adobe-commerce-support

Since QPT

1.1.73

Issue

The issue occurs when the GraphQL Application server uses the Rate Limiting feature with the PHP Redis extension installed, resulting in a broken rate limit functionality.

Steps to reproduce

1. Install the PHP Redis extension. 1. Configure Redis for the application. 1. Set up the rate limiter to allow one order per customer every minute. 1. Start the GraphQL application server. 1. As a customer, submit an order using the PlaceOrder GraphQL mutation. 1. Within one minute, submit a second order using the PlaceOrder GraphQL mutation for the same customer.

Adobe's page lists 2.4.7 - 2.4.8-p3 as compatible; the versions below are resolved from the current QPT constraints and are the ones the tool will offer.

Adobe scheduled the permanent fix for 2.4.9.

Install

Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply ACSD-68206. On Cloud, add ACSD-68206 under stage.build.QUALITY_PATCHES in .magento.env.yaml.

For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its ACSD-68206/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.

Patch files and compatible versions

Sources

• Adobe documentation for ACSD-68206
• JSON API: /api/v1/patches/ACSD-68206