Added rate limiting logic in middleware.
This commit is contained in:
@@ -0,0 +1,11 @@
|
||||
const rateLimit = require("express-rate-limit");
|
||||
|
||||
const loginLimiter = rateLimit({
|
||||
windowMs: 15 * 60 * 1000, // 15 minutes
|
||||
max: 5, // limit each IP to 5 login requests per windowMs
|
||||
message: "Too many login attempts. Try again in 15 minutes.",
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
});
|
||||
|
||||
module.exports = { loginLimiter };
|
||||
Reference in New Issue
Block a user