kasperj/turftracker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

rate limiting

Browse Source
This commit is contained in:
Jake Kasper
2025-08-23 14:16:47 -04:00
parent e911810157
commit 3ad4782021
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/src/app.js
View File

@@ -39,10 +39,10 @@ app.use(helmet({
} }
})); }));
// Rate limiting // Rate limiting - relaxed for development
const limiter = rateLimit({ const limiter = rateLimit({
windowMs: 15 * 60 * 1000, // 15 minutes windowMs: 15 * 60 * 1000, // 15 minutes
max: 100, // Limit each IP to 100 requests per windowMs max: 1000, // Increased to 1000 requests per 15 minutes for development
message: 'Too many requests from this IP, please try again later.', message: 'Too many requests from this IP, please try again later.',
standardHeaders: true, standardHeaders: true,
legacyHeaders: false, legacyHeaders: false,
@@ -52,7 +52,7 @@ app.use(limiter);
// Stricter rate limiting for auth routes // Stricter rate limiting for auth routes
const authLimiter = rateLimit({ const authLimiter = rateLimit({
windowMs: 15 * 60 * 1000, // 15 minutes windowMs: 15 * 60 * 1000, // 15 minutes
max: 50, // Limit each IP to 50 auth requests per windowMs (increased for development) max: 200, // Increased to 200 auth requests per 15 minutes for development
message: 'Too many authentication attempts, please try again later.', message: 'Too many authentication attempts, please try again later.',
standardHeaders: true, standardHeaders: true,
legacyHeaders: false, legacyHeaders: false,