Skip to content

feat: add rate limiting for authentication endpoints#92

Open
jikrana1 wants to merge 2 commits into
Sitaram8472:mainfrom
jikrana1:feature/auth-rate-limiting
Open

feat: add rate limiting for authentication endpoints#92
jikrana1 wants to merge 2 commits into
Sitaram8472:mainfrom
jikrana1:feature/auth-rate-limiting

Conversation

@jikrana1

@jikrana1 jikrana1 commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Description

This PR adds rate limiting to authentication endpoints using express-rate-limit.

Changes Made

  • Added login rate limiter (5 requests per 15 minutes)
  • Added forgot password rate limiter (3 requests per hour)
  • Created reusable rate limiter middleware
  • Applied rate limiting to sensitive authentication routes

Benefits

  • Prevents brute-force login attempts
  • Reduces password reset abuse
  • Improves API security
  • Helps protect server resources

Closes #85

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature] : Implement Rate Limiting for Authentication Endpoints to Prevent Abuse

1 participant