feat: add rate limiting for request line endpoints #138
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This was referenced Jan 22, 2026
- Add express-rate-limit middleware for registration (5/hour by IP) and song requests (10/15min per device) - Configurable via environment variables for testing - Automatically disabled in test environment unless TEST_RATE_LIMITING=true - Add integration tests for rate limiting behavior - Add anonymous_auth test utility for authenticated testing
jakebromberg
force-pushed
the
feature/rate-limiting-only
branch
from
4e22618 to
3fef192
Compare
jakebromberg
changed the base branch from
feature/anonymous-device-auth
to
refactor/shared-discogs-client
- Add AI-powered parsing for song requests (artist/album/song extraction) - Add multi-strategy library search pipeline - Add artwork fetching from Discogs - Add improved Slack message builder with rich blocks - Add /parse endpoint for debugging AI parser Search strategies: - Artist + Album matching - Song as artist fallback - Swapped interpretation (artist/song confusion) - Track on compilation search Depends on: - Discogs service (from PR #125 after rebase)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Add rate limiting to request line endpoints to prevent abuse.
Environment Variables
Changes
apps/backend/middleware/rateLimiting.ts- Rate limiting middlewareapps/backend/routes/requestLine.route.ts- Apply rate limits to routestests/integration/rateLimiting.spec.js- Integration teststests/utils/anonymous_auth.js- Test utility for authenticated requestsTest plan
Depends on