Phase 6: Rate limiting on auth endpoints

2026-02-23 15:45:31 +01:00
parent 538c24c58f
commit 0eab05f15b
3 changed files with 12 additions and 0 deletions
--- a/src/routes/auth/meta.ts
+++ b/src/routes/auth/meta.ts
@@ -9,6 +9,9 @@ import type { MetaCallbackBody, AuthTokensResponse } from '../../types/api.js';

 const metaAuthRoutes: FastifyPluginAsync = async (fastify) => {
  fastify.post<{ Body: MetaCallbackBody }>('/auth/meta/callback', {
+    config: {
+      rateLimit: { max: 10, timeWindow: '1 minute' },
+    },
    schema: {
      body: {
        type: 'object',