Merge pull request #28 from alexmgriffiths/fix/27

Adds issue #27 recommendations
alexmgriffiths · Apr 30, 2023 · 88d0cff · 88d0cff
2 parents 3110b4f + 21c4854
commit 88d0cff
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 0 deletions.
diff --git a/backend/package-lock.json b/backend/package-lock.json
diff --git a/backend/package.json b/backend/package.json
@@ -18,6 +18,7 @@
     "cors": "^2.8.5",
     "dotenv": "^16.0.3",
     "express": "^4.18.2",
+    "express-rate-limit": "^6.7.0",
     "helmet": "^6.1.5",
     "mysql2": "^3.2.4",
     "ts-node": "^10.9.1",

diff --git a/backend/src/app.ts b/backend/src/app.ts
@@ -4,11 +4,15 @@ import express, { json } from 'express';
 import cors from 'cors';
 import helmet from 'helmet';
 import apiController from './controllers/apiController';
+import { rateLimit } from "express-rate-limit";
 
 config();
 setupSocket();
 
 const app = express();
+
+const limiter = rateLimit({windowMs: 1 * 60 * 1000, max: 25});
+app.use(limiter);
 app.use(json());
 app.use(cors({origin: "*"}));
 app.use(helmet());