express-limiter
express-limiter copied to clipboard
ded
Rate limiting middleware for Express
`skipHeaders` defaults to false. This means the entire world is getting these headers, which exposes internal implementation details and is thus a security flaw: ``` X-RateLimit-Limit: 20 X-RateLimit-Remaining: 19 X-RateLimit-Reset:...
Nice package!! However using this in production (even with a highly available Redis cluster), means that the developer needs to handle if Redis becomes unavailable. This is highly unlikely, but...
this example not works: // with a function for dynamic-ness limiter({ lookup: function(req, res, opts, next) { if (validApiKey(req.query.api_key)) { opts.lookup = 'query.api_key' opts.total = 100 } else { opts.lookup...
The documentation states that the path and method are optional; however, when applying the express-limiter middleware globally, both of these options MUST be set. Otherwise, the middleware will not be...
I have a project where this module would be pretty much perfect, but I'm using Memcache instead of Redis (via https://github.com/3rd-Eden/memcached). As far as I can tell, it should be...
Hi, I have express-limiter in place and it works as a charm . The question is that for SEO reasons, I'd like to whitelist: 1 - crawlers that will index...
user A -> rate limit A, user B -> rate limit B. How do i achieve this with `express-limiter`?
I have an issue with the middleware feature when "expire" option is not specified. X-RateLimit-Remaning is only decremented by 1. When I take a look to redis monitor with the...
Is there a way to send a custom response status and message without having to go inside the code? Thanks for your advice.
Thanks to the express-limiter, I was able to implement an in memory solution.. If you want to implement in memory initially, the following hybrid codes could be chosen. Any time...
