fix: #6

- Use general limiter to do rate limit in every router
Chinlinlee · Nov 16, 2022 · f66d627 · f66d627
1 parent 44589d2
commit f66d627
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 0 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -31,6 +31,7 @@
         "dotenv": "^6.0.0",
         "ejs": "^3.1.2",
         "express": "^4.16.3",
+        "express-rate-limit": "^6.7.0",
         "express-session": "^1.16.2",
         "fhir": "^4.11.1",
         "flat": "^5.0.2",

diff --git a/server.js b/server.js
@@ -1,4 +1,5 @@
 const express = require('express');
+const RateLimit = require('express-rate-limit');
 const bodyParser = require('body-parser');
 const http = require('http');
 const compress = require('compression');
@@ -19,6 +20,15 @@ const app = express();
 
 require('rootpath')();
 require('dotenv').config();
+// limit user only can request 1000 in 1 minute over every routers
+let limiter = RateLimit({
+    windowMs: 1 * 60 * 1000,
+    max: 1000,
+    standardHeaders: true,
+    legacyHeaders: false
+});
+app.use(limiter);
+
 app.use(compress());
 app.use(flash());
 app.use(express.static('public'));