The current global rate limiter (200 req / 15 min) is too coarse. Implement:
(1) Per-IP rate limit on public read endpoints (GET /assets, GET /agents): 100 req / min.
(2) Per-Stellar-address rate limit on write endpoints (POST /assets, POST /agents): 10 req / min.
(3) Return 429 Too Many Requests with a Retry-After header.
(4) Use express-rate-limit with a Redis store for distributed deployments.
(5) Add tests asserting 429 is returned after limit is hit.
The current global rate limiter (200 req / 15 min) is too coarse. Implement:
(1) Per-IP rate limit on public read endpoints (GET /assets, GET /agents): 100 req / min.
(2) Per-Stellar-address rate limit on write endpoints (POST /assets, POST /agents): 10 req / min.
(3) Return
429 Too Many Requestswith aRetry-Afterheader.(4) Use
express-rate-limitwith a Redis store for distributed deployments.(5) Add tests asserting 429 is returned after limit is hit.