prehistoric-systems/omnivore
1
0
Fork 0
mirror of https://github.com/omnivore-app/omnivore.git synced 2026-03-11 08:54:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Reduce the rate limit for unauthenticated users

Browse source
This commit is contained in:
Jackson Harper 2023-05-11 13:23:43 +08:00
parent 7dccb27b81
commit 88aa7aad4c
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
packages/api/src/server.ts
View file

@ -50,6 +50,7 @@ import { userRouter } from './routers/user_router'
import { sentryConfig } from './sentry'
import { corsConfig } from './utils/corsConfig'
import { buildLogger, buildLoggerTransport } from './utils/logger'
import { getClaimsByToken } from './utils/auth'
const PORT = process.env.PORT || 4000
@ -100,7 +101,13 @@ export const createApp = (): {
if (!env.dev.isLocal) {
const apiLimiter = rateLimit({
windowMs: 60 * 1000, // 1 minute
max: 50, // Limit each IP to 10 requests per `window` (here, per minute)
max: (req) => {
// 50 RPM for an authenticated request, 5 for a non-authenticated request
const token = getClaimsByToken(
req.header('authorization') ?? req.cookies['auth']
)
return !!token ? 50 : 5
},
standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
legacyHeaders: false, // Disable the `X-RateLimit-*` headers
keyGenerator: (req) => {