New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add rate limiting #41

Open

rogup opened this issue Apr 26, 2023 · 0 comments

Collaborator

rogup commented Apr 26, 2023

Add rate limiting to our routes to improve security. https://www.npmjs.com/package/hapi-rate-limitor seems to be a good library for it

We should apply especially strict limiting to routes that allower username guessing (e.g. registerUser, changeEmail)
We may need to disable limiting or allow for lots of requests on some routes, such as changing the map's zoom/position, which are very lightweight and may happen frequently.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment