Skip to content

Commit

Permalink
feat: allow 3 send forgot password email requests per 1 minute
Browse files Browse the repository at this point in the history
tomaspalma committed Jan 31, 2025

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
1 parent 1ecafb9 commit 11fefb8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion website/start/limiter.ts
Original file line number Diff line number Diff line change
@@ -26,5 +26,5 @@ export const emailVerificationThrottle = limiter.define('auth.verify', (ctx) =>
export const sendForgotPasswordThrottle = limiter.define('auth.forgot-password', () => {
if(app.nodeEnvironment !== 'production') return null

return limiter.allowRequests(1).every('1 minute')
return limiter.allowRequests(3).every('1 minute')
})

0 comments on commit 11fefb8

Please sign in to comment.