Rate Limiter

Prevents abuse & DDoS attacks by limiting requests per IP.

securityexpress

v2.0.0middleware

Overview

Implements express-rate-limit middleware for controlling request frequency.

Installation

CLI

npx backternity add rate-limiter

What This Does

Adds rate-limiting middleware to protect routes.

Files & Folders Created

File / Path	Description
/middleware/rateLimiter.js	Preconfigured limiter middleware.

Files to be modified

File / Path	Description
server.js	Applies limiter globally.

Configuration

# Environment Variables
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX_REQUESTS=100

Frontend Integration

The rate limiter protects your API endpoints from abuse. When rate limits are exceeded, specific HTTP responses are returned.

GET/api/test-endpoint

Test any protected endpoint to see rate limiting in action.

GET/api/test-endpoint

Response when rate limit is exceeded.

GET/api/rate-limit/status

Check current rate limit status for your IP.

Example

// app/components/RateLimitTester.jsx
'use client';
import { useState } from 'react';

export default function RateLimitTester() {
  const [result, setResult] = useState('');
  const [requestCount, setRequestCount] = useState(0);

  const testRateLimit = async () => {
    try {
      const res = await fetch('/api/test-endpoint');
      const data = await res.json();
      
      if (res.ok) {
        setRequestCount(prev => prev + 1);
        setResult(`✅ Request ${requestCount + 1} successful. ${data.rateLimit?.remaining || 'N/A'} requests remaining.`);
      } else {
        setResult(`❌ Rate limited! ${data.message}`);
      }
    } catch (error) {
      setResult(`⚠️ Error: ${error.message}`);
    }
  };

  return (
    <div className="p-4 border border-white/10 rounded-lg bg-black/30 text-white">
      <h3 className="text-lg font-semibold mb-3">Rate Limit Tester</h3>
      <button
        onClick={testRateLimit}
        className="bg-emerald-600 hover:bg-emerald-700 px-4 py-2 rounded font-medium"
      >
        Send Request ({requestCount} sent)
      </button>
      <p className="text-sm text-gray-300 mt-2">{result}</p>
    </div>
  );
}

Usage

const rateLimiter = require('./middleware/rateLimiter');
app.use(rateLimiter);