Page MenuHomePhabricator

[token-server] Tighten rate limits
ClosedPublic

Authored by bytesofman on Sep 10 2024, 21:14.

Details

Reviewers
emack
Group Reviewers
Restricted Project
Commits
rABC0fa945d62703: [token-server] Tighten rate limits
Summary

Still seeing some dedicated eCash scripters out there. Will probably need to get fail2ban going soon, but we will also need to do this.

Add rate limit object to config. Make it a param of startExpressServer, so that we can have different rate limits for the prod app and the unit tests. Include high rate limits for the tests so we do not rate limit ourselves.

Test Plan

npm test

Diff Detail

Repository
rABC Bitcoin ABC
Branch
token-server-tighter-ratelimits
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 30235
Build 59997: Build Difftoken-server-tests
Build 59996: arc lint + arc unit

Event Timeline

better unit test rate limit settings

apps/token-server/config.ts
55

window from 60 min to 120 min

56

limit from 10 to 3

This revision is now accepted and ready to land.Sep 11 2024, 05:23
This revision was automatically updated to reflect the committed changes.