feat(api): add application-level rate limiting middleware with IP-based tracking

2026-04-25 14:34:24 +08:00
parent d1e2a8f281
commit 3ef9649322
2 changed files with 80 additions and 0 deletions
@@ -1,5 +1,6 @@
 import { Elysia } from "elysia"
 import { auth } from "@/lib/auth"
+import { rateLimit } from "@/lib/auth/rate-limit"
 import { healthRoutes } from "@/lib/api/health"

 const betterAuth = new Elysia({ name: "better-auth" })
@@ -31,6 +32,7 @@ export const app = new Elysia({ prefix: "/api" })
      error: code === "NOT_FOUND" ? "Not found" : "Internal server error",
    }
  })
+  .use(rateLimit(60, 100))
  .use(betterAuth)
  .use(healthRoutes)
  .get("/", () => ({