adam/gate
1
0
Fork 0
Code Issues 55 Pull requests 2 Projects Releases 49 Packages Wiki Activity Actions 3

Rate limiting #136

New issue
Closed
opened 2025-10-03 04:44:53 -05:00 by konstkarapan · 4 comments
konstkarapan commented 2025-10-03 04:44:53 -05:00 (Migrated from github.com)
Copy link

Describe your idea for an enhancement:

Is it possible to add a setting for rate limiting the login page? I'm not into coding so I don't know whether this is easy to implement, but I thought it would be a nice addition

Describe alternatives you've considered:

Additional context:

### Describe your idea for an enhancement: Is it possible to add a setting for rate limiting the login page? I'm not into coding so I don't know whether this is easy to implement, but I thought it would be a nice addition ### Describe alternatives you've considered: ### Additional context:
👍 1
notquitenothing commented 2025-10-28 22:31:56 -05:00 (Migrated from github.com)
Copy link

While this would be possible to implement, I believe this should be done in your reverse proxy if possible.

While this would be possible to implement, I believe this should be done in your reverse proxy if possible.
notquitenothing commented 2025-12-22 12:26:12 -06:00 (Migrated from github.com)
Copy link

I do think that rate limiting specific endpoints is a good idea that I need to implement. Specifically those that produce database entries or tax hardware (password resets, signups, session-creation, etc.)

I do think that rate limiting specific endpoints is a good idea that I need to implement. Specifically those that produce database entries or tax hardware (password resets, signups, session-creation, etc.)
👍 1
notquitenothing commented 2025-12-31 11:50:34 -06:00 (Migrated from github.com)
Copy link

This is released in v1.8.0 as the API_RATELIMIT environment variable, which applies a rate limit to all mutating (POST-PATCH-PUT-DELETE) requests. This should include all authenticated-session-creating actions as well creation of things like password resets, verification emails, etc.

This is released in [v1.8.0](https://github.com/voidauth/voidauth/releases/tag/v1.8.0) as the API_RATELIMIT environment variable, which applies a rate limit to all mutating (POST-PATCH-PUT-DELETE) requests. This should include all authenticated-session-creating actions as well creation of things like password resets, verification emails, etc.
🚀 1
notquitenothing commented 2026-01-02 19:28:11 -06:00 (Migrated from github.com)
Copy link

Assumed resolved in v1.8.0 . Please re-open if it is not

Assumed resolved in v1.8.0 . Please re-open if it is not
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
frontend-rebuild
rename/gate
feature/custom-claims
l10n_main
feature/back-channel-logout
v1.14.1
v1.14.0
v1.13.0
v1.12.5
v1.12.4
v1.12.3
v1.12.2
v1.12.1
v1.12.0
v1.11.2
v1.11.1
v1.11.0
v1.10.2
v1.10.1
v1.10.0
v1.9.4
v1.9.3
v1.9.2
v1.9.1
v1.9.0
v1.8.1
v1.8.0
v1.7.2
v1.7.1
v1.7.0
v1.6.0
v1.5.3
v1.5.2
v1.5.1
v1.5.0
v1.4.4
v1.4.3
v1.4.2
v1.4.1
v1.4.0
v1.3.2
v1.3.1
v1.3.0
v1.2.1
v1.2.0
v1.1.0
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
v1.0.2
v1.0.1
v1.0.0
Labels
Clear labels   
bug
Something isn't working

  
chore
Has to be done, usually no functionality change

  
documentation
Improvements or additions to documentation

  
enhancement
New feature or request

  
help
Helped needed to resolve

  
in-progress

   
question
Further information is requested

  
ready-for-release
Finished, but waiting for release

  
released

   
translation
New locales or updated translations

No labels
bug
chore
documentation
enhancement
help
in-progress
question
ready-for-release
released
translation
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
adam/gate#136
No description provided.