12 lines
338 B
JavaScript
12 lines
338 B
JavaScript
const rateLimit = require("express-rate-limit");
|
|
|
|
const loginLimiter = rateLimit({
|
|
windowMs: 15 * 60 * 1000, // 15 minutes
|
|
max: 5, // limit each IP to 5 login requests per windowMs
|
|
message: "Too many login attempts. Try again in 15 minutes.",
|
|
standardHeaders: true,
|
|
legacyHeaders: false,
|
|
});
|
|
|
|
module.exports = { loginLimiter };
|