How to rate limit a post request to avoid multiple entry or a bot attack

Subin_Kurian · October 5, 2023, 6:46am

System Information

Strapi Version: 14.4.3
Operating System: Linux
Database: MSSQL
Node Version: 16.4
NPM Version:
Yarn Version:

I have a strapi project which is having a contact us form done in vue-Js frontend. However there is a problem that When I am trying to post contact us, its allowing unlimited time of post requests. I am trying to implement a rate limit (found koa2-ratelimit) but not sure how to add it with strapi v4 and seems like the information provided are in very experienced level. can anyone help to solve this problem to limit this particular post request maximum limit to 1 per minute

API -: api/contact-uses

Note-: very new to strapi and very new to coding. sorry for bothering the community. Expecting a basic step by step information

Boegie19 · October 6, 2023, 9:58am

see

github.com

strapi/strapi/blob/main/packages/core/admin/server/middlewares/rateLimit.js

'use strict';

const path = require('path');
const utils = require('@strapi/utils');
const { isString, has, toLower } = require('lodash/fp');

const { RateLimitError } = utils.errors;

module.exports =
  (config, { strapi }) =>
  async (ctx, next) => {
    let rateLimitConfig = strapi.config.get('admin.rateLimit');

    if (!rateLimitConfig) {
      rateLimitConfig = {
        enabled: true,
      };
    }

    if (!has('enabled', rateLimitConfig)) {

This file has been truncated. show original

and

github.com

strapi/strapi/blob/main/packages/core/admin/server/routes/authentication.js

'use strict';

module.exports = [
  {
    method: 'POST',
    path: '/login',
    handler: 'authentication.login',
    config: {
      auth: false,
      middlewares: ['admin::rateLimit'],
    },
  },
  {
    method: 'POST',
    path: '/renew-token',
    handler: 'authentication.renewToken',
    config: { auth: false },
  },
  {
    method: 'POST',

This file has been truncated. show original