feat: Missing rate limiting

jonalan7 · Jul 27, 2022 · fceaf57 · fceaf57
1 parent 7b775e7
commit fceaf57
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 0 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -65,6 +65,7 @@
     "crypto-js": "^4.1.1",
     "ejs": "^3.1.8",
     "express": "^4.18.1",
+    "express-rate-limit": "^6.5.1",
     "futoin-hkdf": "^1.5.1",
     "knex": "^2.1.0",
     "latest-version": "^5.1.0",

diff --git a/src/ws/app.ts b/src/ws/app.ts
@@ -1,6 +1,7 @@
 import express, { Express, Request, Response } from 'express';
 import { options } from './model/interface';
 import cors from 'cors';
+import { rateLimit } from 'express-rate-limit';
 
 export function appExpress(options: options): Express {
   const app = express();
@@ -15,6 +16,14 @@ export function appExpress(options: options): Express {
     })
   );
 
+  const limiter = rateLimit({
+    windowMs: 1*60*1000, // 1 minute
+    max: 5
+  });
+
+  // apply rate limiter to all requests
+  app.use(limiter);
+
   const corsOptions: cors.CorsOptions = {
     origin: '*',
   };