Test/prevent server block on rate limit (#418)

This commit is contained in:
ZaydSkaff
2025-06-19 13:54:22 +03:00
committed by GitHub
parent 603e74af09
commit c5dd5e28fd

View File

@ -2,7 +2,6 @@ import { RequestContextMiddleware } from '@app/common/middleware/request-context
import { SeederService } from '@app/common/seed/services/seeder.service'; import { SeederService } from '@app/common/seed/services/seeder.service';
import { Logger, ValidationPipe } from '@nestjs/common'; import { Logger, ValidationPipe } from '@nestjs/common';
import { NestFactory } from '@nestjs/core'; import { NestFactory } from '@nestjs/core';
import { NestExpressApplication } from '@nestjs/platform-express';
import { json, urlencoded } from 'body-parser'; import { json, urlencoded } from 'body-parser';
import rateLimit from 'express-rate-limit'; import rateLimit from 'express-rate-limit';
import helmet from 'helmet'; import helmet from 'helmet';
@ -12,7 +11,7 @@ import { AppModule } from './app.module';
import { HttpExceptionFilter } from './common/filters/http-exception/http-exception.filter'; import { HttpExceptionFilter } from './common/filters/http-exception/http-exception.filter';
async function bootstrap() { async function bootstrap() {
const app = await NestFactory.create<NestExpressApplication>(AppModule); const app = await NestFactory.create(AppModule);
app.enableCors(); app.enableCors();
@ -22,14 +21,11 @@ async function bootstrap() {
app.useGlobalFilters(new HttpExceptionFilter()); app.useGlobalFilters(new HttpExceptionFilter());
app.use(new RequestContextMiddleware().use); app.use(new RequestContextMiddleware().use);
app.set('trust proxy', true);
app.use( app.use(
rateLimit({ rateLimit({
windowMs: 2 * 60 * 1000, windowMs: 5 * 60 * 1000,
max: 50, max: 500,
standardHeaders: true,
legacyHeaders: false,
}), }),
); );