Skip to content

feat: add per-IP and per-API-key rate limiting#74

Open
nice-bills wants to merge 1 commit intoFluxora-Org:mainfrom
nice-bills:feature/rate-limiting
Open

feat: add per-IP and per-API-key rate limiting#74
nice-bills wants to merge 1 commit intoFluxora-Org:mainfrom
nice-bills:feature/rate-limiting

Conversation

@nice-bills
Copy link
Copy Markdown

@nice-bills nice-bills commented Mar 26, 2026

Closes #23


Rate limiting: per-IP + per-API-key

  • IP: 100 req/min (anonymous)
  • API key: 500 req/min
  • Admin key: 2000 req/min (via ADMIN_API_KEY)
  • GET /api/rate-limits status endpoint
  • X-RateLimit-* headers on every response
  • 429 with structured error body + Retry-After
  • Exempt: /, /health, /api/rate-limits
  • In-memory; Redis is a follow-up
  • 32 tests, ~97% coverage on new modules

@drips-wave
Copy link
Copy Markdown

drips-wave bot commented Mar 26, 2026

@nice-bills Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@Jagadeeshftw
Copy link
Copy Markdown
Contributor

@nice-bills Please resolve the conflicts & revert the changes in the package-lock.json file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Rate limiting (per IP + per API key)

2 participants