yusufipek/OpenFrame
1
0
Fork 0
mirror of https://github.com/yusufipk/OpenFrame.git synced 2026-09-11 17:46:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(onboarding): implement rate limiting for onboarding completion

Browse Source
This commit is contained in:
Yusuf İpek
2026-04-10 21:48:25 +03:00
parent e72f5e8948
commit df10f45e9e
2 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/api/onboarding/complete/route.ts
+10
View File
@@ -1,6 +1,7 @@
import { auth } from '@/lib/auth'; import { auth } from '@/lib/auth';
import { db } from '@/lib/db'; import { db } from '@/lib/db';
import { apiErrors, successResponse } from '@/lib/api-response'; import { apiErrors, successResponse } from '@/lib/api-response';
import { checkRateLimit, rateLimitHeaders, RATE_LIMIT_CONFIGS } from '@/lib/rate-limit';
export async function POST() { export async function POST() {
const session = await auth(); const session = await auth();
@@ -8,6 +9,15 @@ export async function POST() {
return apiErrors.unauthorized(); return apiErrors.unauthorized();
} }
const cfg = RATE_LIMIT_CONFIGS['onboarding-complete'];
const rl = await checkRateLimit(session.user.id, 'onboarding-complete', cfg);
if (!rl.allowed) {
return new Response(
JSON.stringify({ error: 'Too many requests. Please try again later.' }),
{ status: 429, headers: { 'Content-Type': 'application/json', ...rateLimitHeaders(rl, cfg.maxRequests) } }
);
}
await db.user.update({ await db.user.update({
where: { id: session.user.id }, where: { id: session.user.id },
data: { onboardingCompletedAt: new Date() }, data: { onboardingCompletedAt: new Date() },
lib/rate-limit.ts
+3
View File
@@ -70,6 +70,9 @@ export const RATE_LIMIT_CONFIGS: Record<string, RateLimitConfig> = {
'video-download': { windowMs: 60 * 1000, maxRequests: 8 }, // 8 per minute 'video-download': { windowMs: 60 * 1000, maxRequests: 8 }, // 8 per minute
'video-download-prepare': { windowMs: 60 * 1000, maxRequests: 5 }, // 5 per minute 'video-download-prepare': { windowMs: 60 * 1000, maxRequests: 5 }, // 5 per minute
// Onboarding — one-time action, very strict
'onboarding-complete': { windowMs: 60 * 60 * 1000, maxRequests: 5 }, // 5 per hour
// Member management // Member management
'invite-member': { windowMs: 60 * 60 * 1000, maxRequests: 30 }, // 30 per hour 'invite-member': { windowMs: 60 * 60 * 1000, maxRequests: 30 }, // 30 per hour
'manage-member': { windowMs: 60 * 1000, maxRequests: 20 }, // 20 per minute 'manage-member': { windowMs: 60 * 1000, maxRequests: 20 }, // 20 per minute