search

darrenmce / oauth2-server

simple oauth2 server
1 stars 0 forks source link

Rate Limiter #7

Open bennett000 opened 6 years ago

bennett000 commented 6 years ago

looks like the spirit of this package is to be a full on server (as opposed to a consumable express module) in that case a rate limiter is probably a good idea for production.

There are a few rate limiter packages out there but rate limiting comes with another issue in that you need some sort of fingerprinting and if you get the fingerprinting wrong that's a ripe opportunity for a DOS...

darrenmce commented 4 years ago

https://github.com/animir/node-rate-limiter-flexible looks promising, will implement a spike

bennett000 commented 4 years ago

I love that this is still active.