feat(api): add rate limiting plugin

Related to #65
JoosepAlviste · Jun 27, 2023 · 5b36e25 · 5b36e25
1 parent ae2ae7c
commit 5b36e25
Show file tree

Hide file tree

Showing 3 changed files with 28 additions and 0 deletions.
diff --git a/api/package-lock.json b/api/package-lock.json
diff --git a/api/package.json b/api/package.json
@@ -29,6 +29,7 @@
     "@escape.tech/graphql-armor": "^2.2.0",
     "@fastify/cookie": "^8.3.0",
     "@fastify/cors": "^8.2.1",
+    "@fastify/rate-limit": "^8.0.1",
     "@pothos/core": "^3.29.0",
     "@pothos/plugin-dataloader": "^3.17.1",
     "@pothos/plugin-errors": "^3.11.0",

diff --git a/api/src/lib/fastify.ts b/api/src/lib/fastify.ts
@@ -1,5 +1,6 @@
 import cookie, { type FastifyCookieOptions } from '@fastify/cookie'
 import cors from '@fastify/cors'
+import rateLimit from '@fastify/rate-limit'
 import fastify, { type FastifyServerOptions } from 'fastify'
 
 import { config } from '@/config'
@@ -31,3 +32,8 @@ await app.register(cors, {
   credentials: true,
   origin: [config.webapp.url],
 })
+
+await app.register(rateLimit, {
+  max: 100,
+  timeWindow: '1 minute',
+})