fix: add timeouts to external api requests

Cargo.toml

@@ -8,7 +8,7 @@ authors = [
 build = "build.rs"
 
 [dependencies]
-wc = { git = "https://github.com/WalletConnect/utils-rs.git", tag = "v0.7.1", features = ["geoip", "geoblock", "analytics"] }
+wc = { git = "https://github.com/WalletConnect/utils-rs.git", tag = "v0.7.1", features = ["geoip", "geoblock", "analytics", "future"] }
 
 tokio = { version = "1", features = ["full"] }
 

src/lib.rs

@@ -1,3 +1,13 @@
+use {
+    anyhow::Context as _,
+    arrayvec::ArrayString,
+    derive_more::{AsRef, From},
+    serde::{Deserialize, Serialize},
+    std::time::Duration,
+    tap::{Tap, TapFallible, TapOptional},
+    tracing::{error, instrument, warn},
+    wc::future::FutureExt as _,
+};
 pub use {
     anyhow::Error,
     async_trait::async_trait,
@@ -6,13 +16,6 @@ pub use {
     project_registry::ProjectRegistry,
     scam_guard::ScamGuard,
 };
-use {
-    arrayvec::ArrayString,
-    derive_more::{AsRef, From},
-    serde::{Deserialize, Serialize},
-    tap::{Tap, TapFallible, TapOptional},
-    tracing::{error, instrument, warn},
-};
 
 pub mod attestation_store;
 pub mod cache;
@@ -100,7 +103,9 @@ impl<'a, I: Infra> Handle<GetVerifyStatus<'a>> for Service<I> {
         let project_data = self
             .project_registry()
             .project_data(cmd.project_id)
+            .with_timeout(Duration::from_secs(10))
             .await
+            .context("ProjectRegistry::project_data timed out")?
             .tap_err(|e| error!("ProjectRegistry::project_data: {e:?}"))?
             .ok_or(GetVerifyStatusError::UnknownProject)
             .tap_err(|_| warn!("Unknown project id"))?;
@@ -179,7 +184,9 @@ impl<'a, I: Infra> Handle<GetAttestation<'a>> for Service<I> {
         let is_scam = self
             .scam_guard()
             .is_scam(&origin)
+            .with_timeout(Duration::from_secs(10))
             .await
+            .context("ScamGuard::is_scam timed out")?
             .map_err(|e| error!("ScamGuard::is_scam: {e:?}"))
             .unwrap_or(IsScam::Unknown);