Add evss claims async to rack attack throttling (#3454)

* Add evss claims async to rack attack throttling

* Update rack_attack.rb

* Change throttle to match polling rate

config/initializers/rack_attack.rb

@@ -24,6 +24,10 @@ class Rack::Attack
     req.ip if req.path == '/v0/vic/vic_submissions' && req.post?
   end
 
+  throttle('evss_claims_async', limit: 12, period: 60) do |req|
+    req.ip if req.path == '/v0/evss_claims_async'
+  end
+
   # Source: https://github.com/kickstarter/rack-attack#x-ratelimit-headers-for-well-behaved-clients
   Rack::Attack.throttled_response = lambda do |env|
     rate_limit = env['rack.attack.match_data']

spec/middleware/rack/attack_spec.rb

@@ -70,5 +70,14 @@ def app
         expect(last_response.status).to eq(429)
       end
     end
+
+    context 'evss claims' do
+      let(:limit) { 12 }
+      let(:endpoint) { '/v0/evss_claims_async' }
+
+      it 'limits requests' do
+        expect(last_response.status).to eq(429)
+      end
+    end
   end
 end