From 40a4023c65eb2e77e9a4984a85a9f7f4bbf65dd8 Mon Sep 17 00:00:00 2001 From: Chris Farhood Date: Thu, 14 May 2026 07:43:40 +0000 Subject: [PATCH] feat(GRO-1202): add sign-in/sign-up rate limit overrides Port rate limit customRules from groombook/app PR #392 to groombook/api. Adds per-route limits for /sign-in/social, /sign-in/email, and /sign-up/email to both AUTH_DISABLED and production better-auth() instances. Co-Authored-By: Paperclip --- apps/api/src/lib/auth.ts | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/apps/api/src/lib/auth.ts b/apps/api/src/lib/auth.ts index 9fa594b..23344e0 100644 --- a/apps/api/src/lib/auth.ts +++ b/apps/api/src/lib/auth.ts @@ -97,6 +97,9 @@ export async function initAuth(): Promise { window: 10, storage: "memory", customRules: { + "/sign-in/social": { max: 10, window: 60 }, + "/sign-in/email": { max: 10, window: 60 }, + "/sign-up/email": { max: 5, window: 60 }, "/get-session": false, }, }, @@ -247,6 +250,9 @@ export async function initAuth(): Promise { window: 10, storage: "memory", customRules: { + "/sign-in/social": { max: 10, window: 60 }, + "/sign-in/email": { max: 10, window: 60 }, + "/sign-up/email": { max: 5, window: 60 }, "/get-session": false, }, },