update limiter
This commit is contained in:
@@ -51,7 +51,7 @@ app.use(limiter);
|
|||||||
// Stricter rate limiting for auth routes
|
// Stricter rate limiting for auth routes
|
||||||
const authLimiter = rateLimit({
|
const authLimiter = rateLimit({
|
||||||
windowMs: 15 * 60 * 1000, // 15 minutes
|
windowMs: 15 * 60 * 1000, // 15 minutes
|
||||||
max: 5, // Limit each IP to 5 auth requests per windowMs
|
max: 50, // Limit each IP to 50 auth requests per windowMs (increased for development)
|
||||||
message: 'Too many authentication attempts, please try again later.',
|
message: 'Too many authentication attempts, please try again later.',
|
||||||
standardHeaders: true,
|
standardHeaders: true,
|
||||||
legacyHeaders: false,
|
legacyHeaders: false,
|
||||||
|
|||||||
Reference in New Issue
Block a user