From 581fb404e212b5993fbec153a87e9b7bfd68d578 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Tue, 4 Feb 2025 17:30:14 +0000
Subject: log login failures

---
 index.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'index.ts')

diff --git a/index.ts b/index.ts
index 03595e16..bbcbfbbf 100644
--- a/index.ts
+++ b/index.ts
@@ -113,7 +113,16 @@ app.post("/superuser", users.superuser);
 app.get("/verify/:code", users.verify);
 app.post("/request", auth, users.request);
 app.post("/forgot", users.forgot);
-app.post("/login", users.login);
+app.post("/login", {
+    config: {
+      rateLimit: {
+        max: 5,
+        timeWindow: "5 seconds",
+        keyGenerator: (req) => req.headers["cf-connecting-ip"] as string, // IP-based rate limiting
+      },
+    },
+  },
+  users.login);
 app.post("/printer", users.printer);
 app.get("/challenge", users.challenge);
 app.post("/nostrLogin", users.nostrLogin);
-- 
cgit v1.2.3