GrottoCenter / grottocenter-api / 25334075061

87%

develop: 87%

Build Type

push

github

Committed by ClemRz

Commit Message

refactor(rateLimit): introduce tiered rate limiting by role

Replace the binary skip/limit approach with graduated rate limits:
- Visitors: 200 req/10min (was 100 req/30s)
- Users: 400 req/10min
- Leaders: 1,000 req/10min
- Moderators: 10,000 req/10min
- Administrators: unlimited (skip)

Consolidate userDeleteRateLimit and moderatorDeleteRateLimit into a
single deleteRateLimit middleware with role-based max:
- Users: 1 DELETE/hour
- Leaders/Moderators: 20 DELETEs/hour
- Administrators: unlimited

All limits are overridable via environment variables for production
tuning.

Closes #1157

Coverage Stats

2980 of 3570 branches covered (83.47%)

Branch coverage included in aggregate %.

29 of 32 new or added lines in 1 file covered. (90.63%)

2 existing lines in 1 file now uncovered.

6176 of 6994 relevant lines covered (88.3%)

51.41 hits per line