ginnoir
b89690a9f2
- pnpm 10 workspace + TypeScript strict + ESLint flat + Prettier - CLAUDE.md as canonical brief - docs/tasks/ — 22 task briefs broken out by phase for sub-sessions - docs/decisions/ — ADR scaffold Implements task 01 (repo-init).
633 B
633 B
61 — Rate limiting on share links
Goal
Prevent token brute-forcing on /s/<token>.
Depends on
- 31
Scope
- IP + token-prefix bucket. Reject after N failed lookups per minute per IP. In-memory LRU is fine for one Node process; document switch to Redis if multi-process arrives.
- Failed
resolveShareTokencalls increment the bucket; successful resolves do not. - Generic
lib/rate-limit.tsso other endpoints can use the same primitive.
Out of scope
- Captcha.
Acceptance criteria
- 50 bad tokens from one IP in a minute returns 429 thereafter.
- Legitimate access from another IP unaffected.