fix(GRO-772): raise auth rate-limit and exempt get-session #327

Merged
lint-roller-qa[bot] merged 1 commits from fix/gro-773-auth-rate-limit into dev 2026-04-17 18:04:41 +00:00
+10 -4
View File
@@ -93,9 +93,12 @@ export async function initAuth(): Promise<void> {
baseURL: BETTER_AUTH_URL, baseURL: BETTER_AUTH_URL,
rateLimit: { rateLimit: {
enabled: true, enabled: true,
max: 10, max: 100,
window: 60, window: 10,
storage: "memory", storage: "memory",
customRules: {
"/get-session": false,
},
}, },
plugins: [ plugins: [
genericOAuth({ genericOAuth({
@@ -240,9 +243,12 @@ export async function initAuth(): Promise<void> {
baseURL: BETTER_AUTH_URL, baseURL: BETTER_AUTH_URL,
rateLimit: { rateLimit: {
enabled: true, enabled: true,
max: 10, max: 100,
window: 60, window: 10,
storage: "memory", storage: "memory",
customRules: {
"/get-session": false,
},
}, },
account: { account: {
storeStateStrategy: "cookie" as const, storeStateStrategy: "cookie" as const,