GrottoCenter / grottocenter-api / 25453168344

87%

develop: 87%

Build Type

Pull #1563

github

Committed by ClemRz

Commit Message

refactor(rateLimit): introduce tiered rate limiting by role

Replace the binary skip/limit approach with graduated rate limits:
- Visitors: 200 req/10min (was 100 req/30s)
- Users: 400 req/10min
- Leaders: 1,000 req/10min
- Moderators: 10,000 req/10min
- Administrators: unlimited (skip)

Consolidate userDeleteRateLimit and moderatorDeleteRateLimit into a
single deleteRateLimit middleware with role-based max:
- Users: 1 DELETE/hour
- Leaders/Moderators: 20 DELETEs/hour
- Administrators: unlimited

All limits are overridable via environment variables for production
tuning.

Closes #1157

Pull Request Pull Request #1563: refactor(rateLimit): introduce tiered rate limiting by role

Coverage Stats

3020 of 3615 branches covered (83.54%)

Branch coverage included in aggregate %.

33 of 36 new or added lines in 1 file covered. (91.67%)

2 existing lines in 1 file now uncovered.

6250 of 7078 relevant lines covered (88.3%)

53.55 hits per line