Merge branch 'Ajay/920-batching-dos-attack' into staging

Author: ajay-sentry

graphql_api/views.py

@@ -3,7 +3,7 @@
 import os
 import socket
 import time
-from asyncio import iscoroutine
+from asyncio import iscoroutine, wait_for
 from typing import Any, Collection, Optional
 
 import regex
@@ -239,7 +239,12 @@ async def post(self, request, *args, **kwargs):
             )
 
         with RequestFinalizer(request):
-            response = await super().post(request, *args, **kwargs)
+            try:
+                response = await wait_for(
+                    super().post(request, *args, **kwargs), timeout=3
+                )
+            except TimeoutError:
+                return JsonResponse({"error": "Request timed out"}, status=408)
 
             content = response.content.decode("utf-8")
             data = json.loads(content)