[SECURITY] security(backend): Implement IP Rate Limiter on Match Creation to Prevent Lobby Flooding

[chiscookeke11]

[SECURITY] security(backend): Implement IP Rate Limiter on Match Creation to Prevent Lobby Flooding

Metadata

Field	Value
Domain	Security
Difficulty	Easy (1–2 Days)
Effort Estimate	effort: 3h
Priority	P2-Medium
Labels	good first issue, security
Target Branch	master
Depends On	None

🎯 Context & Goal

Financial gaming platforms handling decentralized cryptocurrency escrows demand top-tier security standards. In the security and performance domain, limits match creation to 5 matches per ip per hour to prevent denial of service through empty lobbies. Implementing this security safeguard prevents unauthorized balance transfers, exploit vectors, and client-side tampering. This issue provides full remediation steps, target file paths, and test requirements targeting the master branch.

📂 Target Files

• backend/routes/gameRoutes.js

📋 Implementation Tasks

• Task: Implement security safeguard for security(backend): Implement IP Rate Limiter on Match Creation to Prevent Lobby Flooding in backend/routes/gameRoutes.js.
• Task: Write exploit simulation test asserting vulnerability is blocked.
• Task: Verify zero regressions across existing functionality.

🛠️ Technical Guidance

Apply defense-in-depth principles and never trust client-supplied input without server verification.

🔗 References & Related

• Reference file: backend/routes/gameRoutes.js

⏳ Delivery Window

This issue should be completed within 2 day(s) of assignment.

Contribution Workflow

1. Branch off master: git checkout -b feature/descriptive-name master
2. Implement all tasks in the checklist above.
3. Run all CI checks locally (see DEVELOPMENT.md).
4. Open a Pull Request targeting master.
5. Link this issue in your PR description: Closes #145.

✅ Acceptance Criteria

• All implementation tasks listed above are fully completed.
• Code compiles and passes all local CI checks.
• PR targets master branch.
• PR description references this issue.

[zhumail88]

Hi! I'd like to work on this issue. Could you please assign it to me?