From 19a4aaee01d427f2492006201ae061e8338cb98e Mon Sep 17 00:00:00 2001 From: nutcas3 Date: Sat, 25 Apr 2026 06:12:59 +0300 Subject: [PATCH] feat: Add user-based rate limiting to protected API routes with 100 requests per minute limit - Add RateLimitByUser middleware to protected route group with 100 req/min limit - Add RateLimitByUser middleware to apiProtected route group with 100 req/min limit --- apps/api-server/cmd/server_routes.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/apps/api-server/cmd/server_routes.go b/apps/api-server/cmd/server_routes.go index 0a681b5..8f502e8 100644 --- a/apps/api-server/cmd/server_routes.go +++ b/apps/api-server/cmd/server_routes.go @@ -35,6 +35,7 @@ func registerV1Routes(router *gin.Engine, d *serverDeps) { } protected := v1.Group("/") + protected.Use(middleware.RateLimitByUser(100)) // 100 requests per minute per user protected.Use(middleware.AuthMiddleware(d.authSvc)) { authProtected := protected.Group("/auth") @@ -55,6 +56,7 @@ func registerV1Routes(router *gin.Engine, d *serverDeps) { } apiProtected := v1.Group("/") + apiProtected.Use(middleware.RateLimitByUser(100)) // 100 requests per minute per user apiProtected.Use(middleware.AuthMiddleware(d.authSvc)) { registerSubscriberRoutes(apiProtected, d)