diff options
| author | Mohamed Bassem <me@mbassem.com> | 2025-07-10 21:22:54 +0000 |
|---|---|---|
| committer | Mohamed Bassem <me@mbassem.com> | 2025-07-10 22:03:30 +0000 |
| commit | 613137ff99442885c5fe679b2cc1172adfc5a283 (patch) | |
| tree | 97f2b940448357870090364c6f73b780d6f473d9 /packages/trpc/routers/users.ts | |
| parent | 333d1610fad10e70759545f223959503288a02c6 (diff) | |
| download | karakeep-613137ff99442885c5fe679b2cc1172adfc5a283.tar.zst | |
feat: Add API ratelimits
Diffstat (limited to 'packages/trpc/routers/users.ts')
| -rw-r--r-- | packages/trpc/routers/users.ts | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/packages/trpc/routers/users.ts b/packages/trpc/routers/users.ts index 58093b42..ebe7d96f 100644 --- a/packages/trpc/routers/users.ts +++ b/packages/trpc/routers/users.ts @@ -31,6 +31,7 @@ import { adminProcedure, authedProcedure, Context, + createRateLimitMiddleware, publicProcedure, router, } from "../index"; @@ -124,6 +125,13 @@ export async function createUser( export const usersAppRouter = router({ create: publicProcedure + .use( + createRateLimitMiddleware({ + name: "users.create", + windowMs: 60 * 1000, + maxRequests: 3, + }), + ) .input(zSignUpSchema) .output( z.object({ @@ -541,6 +549,13 @@ export const usersAppRouter = router({ .where(eq(userSettings.userId, ctx.user.id)); }), verifyEmail: publicProcedure + .use( + createRateLimitMiddleware({ + name: "users.verifyEmail", + windowMs: 5 * 60 * 1000, + maxRequests: 10, + }), + ) // 10 requests per 5 minutes .input( z.object({ email: z.string().email(), @@ -572,6 +587,13 @@ export const usersAppRouter = router({ return { success: true }; }), resendVerificationEmail: publicProcedure + .use( + createRateLimitMiddleware({ + name: "users.resendVerificationEmail", + windowMs: 5 * 60 * 1000, + maxRequests: 3, + }), + ) // 3 requests per 5 minutes .input( z.object({ email: z.string().email(), |