Page MenuHomePhabricator

[token-server] Tighten rate limits
ClosedPublic

Authored by bytesofman on Sep 10 2024, 21:14.

Details

Reviewers
emack
Group Reviewers
Restricted Project
Commits
rABC0fa945d62703: [token-server] Tighten rate limits
Summary

Still seeing some dedicated eCash scripters out there. Will probably need to get fail2ban going soon, but we will also need to do this.

Add rate limit object to config. Make it a param of startExpressServer, so that we can have different rate limits for the prod app and the unit tests. Include high rate limits for the tests so we do not rate limit ourselves.

Test Plan

npm test

Diff Detail

Repository
rABC Bitcoin ABC
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

better unit test rate limit settings

apps/token-server/config.ts
55 ↗(On Diff #49567)

window from 60 min to 120 min

56 ↗(On Diff #49567)

limit from 10 to 3

This revision is now accepted and ready to land.Sep 11 2024, 05:23
This revision was automatically updated to reflect the committed changes.