How to rate limit a post request to avoid multiple entry or a bot attack

Boegie19 · October 6, 2023, 9:58am

see

strapi/strapi/blob/main/packages/core/admin/server/middlewares/rateLimit.js

'use strict';

const path = require('path');
const utils = require('@strapi/utils');
const { isString, has, toLower } = require('lodash/fp');

const { RateLimitError } = utils.errors;

module.exports =
  (config, { strapi }) =>
  async (ctx, next) => {
    let rateLimitConfig = strapi.config.get('admin.rateLimit');

    if (!rateLimitConfig) {
      rateLimitConfig = {
        enabled: true,
      };
    }

    if (!has('enabled', rateLimitConfig)) {

This file has been truncated. show original

and

github.com

strapi/strapi/blob/main/packages/core/admin/server/routes/authentication.js

'use strict';

module.exports = [
  {
    method: 'POST',
    path: '/login',
    handler: 'authentication.login',
    config: {
      auth: false,
      middlewares: ['admin::rateLimit'],
    },
  },
  {
    method: 'POST',
    path: '/renew-token',
    handler: 'authentication.renewToken',
    config: { auth: false },
  },
  {
    method: 'POST',

This file has been truncated. show original