From 1d37f04808c505df0d68ee34f95ffaaac1d232ba Mon Sep 17 00:00:00 2001
From: Jackson Harper <jacksonh@gmail.com>
Date: Tue, 16 May 2023 17:14:38 +0800
Subject: [PATCH] Properly call getClaimsByToken

---
 packages/api/src/server.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/api/src/server.ts b/packages/api/src/server.ts
index 7d3be8bfb..b1aeb91f6 100755
--- a/packages/api/src/server.ts
+++ b/packages/api/src/server.ts
@@ -101,13 +101,13 @@ export const createApp = (): {
   if (!env.dev.isLocal) {
     const apiLimiter = rateLimit({
       windowMs: 60 * 1000, // 1 minute
-      max: (req) => {
+      max: async (req) => {
         // 50 RPM for an authenticated request, 5 for a non-authenticated request
-        const token = getClaimsByToken(
+        const token = await getClaimsByToken(
           // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
           req.header('authorization') ?? req.cookies['auth']
         )
-        return !!token ? 50 : 10
+        return token ? 50 : 10
       },
       standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
       legacyHeaders: false, // Disable the `X-RateLimit-*` headers