Merge branch 'dev' into prod

backend/server.js

@@ -4,13 +4,26 @@ import apiRouter from "./routes/api.js";
 
 const app = express();
 const port = 7001;
+import rateLimit from "express-rate-limit";
 
 app.use(cors());
 app.use(express.urlencoded({ extended: true }));
 app.set("view engine", "ejs");
 app.use(express.json());
 
-app.use("/api", apiRouter);
+const limits = {
+  time: 1, // = 1 minute
+  requests: 10,
+  message: "Too many requests from this IP, please try again in 15 minutes",
+};
+
+const limiter = rateLimit({
+  windowMs: limits.time * 60 * 1000,
+  max: limits.requests,
+  message: limits.message,
+});
+
+app.use(limiter);
 
 app.get("/", (req, res) => {
   res.render("index.ejs", { title: port });