Rate limit the number of requests to the APIs

labbsr0x / whisper

A cloud-native Identity and OAuth Provider implemented with Golang and ORY Hydra

MIT License

12 stars 4 forks source link

Rate limit the number of requests to the APIs #31

Closed eabili0 closed 4 years ago

eabili0 commented 4 years ago

We need to be able to rate limit the requests to all Whisper's APIs.

We should not bring this logic to Whisper. An external rate limit service should be used instead.

eabili0 commented 4 years ago

We shouldn't lock whisper onto any technology to deal with this issue. This is an issue for production and varies according to the user's needs and infrastructure reality.

We should just add a doc note recommending that using whisper in production should have a rate limiting service above Whisper to ensure the safety of our API's.