manohar/tia
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix rate limit variable scope

Browse source
This commit is contained in:
Manohar Gupta 2026-05-17 01:14:32 +05:30
parent e47001365e
commit c11484b910
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/app/api/admin/auth/route.ts
View file

@ -20,10 +20,11 @@ export async function POST(request: Request) {
return NextResponse.json({ error: "Username and password required" }, { status: 400 }); return NextResponse.json({ error: "Username and password required" }, { status: 400 });
} }
const isSignup = action === "signup";
// Rate limiting - enable via RATE_LIMIT_ENABLED env var // Rate limiting - enable via RATE_LIMIT_ENABLED env var
if (process.env.RATE_LIMIT_ENABLED !== "false") { if (process.env.RATE_LIMIT_ENABLED !== "false") {
const ip = getClientIp(request); const ip = getClientIp(request);
const isSignup = action === "signup";
const rateLimitResult = await rateLimit( const rateLimitResult = await rateLimit(
getRateLimitKey(isSignup ? "admin-signup" : "admin-signin", ip), getRateLimitKey(isSignup ? "admin-signup" : "admin-signin", ip),
{ max: isSignup ? 3 : 5, windowSec: isSignup ? 3600 : 900 } { max: isSignup ? 3 : 5, windowSec: isSignup ? 3600 : 900 }