gsadmin/sencho
1
0
Fork 0
mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-07-26 11:49:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: raise dev auth rate limit so the full E2E suite is not blocked (#1353)

Browse Source 
The Playwright E2E suite logs in per test (fresh context each) and has grown past the 100-attempt/15-min dev cap on the auth limiter, so the last test in a run gets 'Too many attempts' and fails. Raise the non-production cap to 1000 to restore headroom for the suite and local tooling. Production stays at 5 attempts/15min, so brute-force protection is unchanged.
This commit is contained in:
Anso
2026-06-10 12:54:23 -04:00
committed by GitHub
parent c0b83d8326
commit 60d138ac33
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/middleware/rateLimiters.ts
+3 -2
View File
@@ -162,10 +162,11 @@ export const webhookTriggerLimiter = rateLimit({
});
// Tier 3: Auth endpoint limiter. 15-minute window to blunt brute-force attacks.
// Prod: 5 attempts/15min/IP. Dev: 100 attempts so E2E tests and local tooling are not blocked.
// Prod: 5 attempts/15min/IP. Dev: 1000 attempts so the full E2E suite, which logs
// in per test and has outgrown a 100-attempt window, plus local tooling, are not blocked.
export const authRateLimiter = rateLimit({
windowMs: 15 * 60 * 1000,
max: process.env.NODE_ENV === 'production' ? 5 : 100,
max: process.env.NODE_ENV === 'production' ? 5 : 1000,
standardHeaders: true,
legacyHeaders: false,
message: { error: 'Too many attempts. Please try again in 15 minutes.' },