backend: use 'ms' library for login limiter window duration
This commit is contained in:
parent
9c815eba48
commit
eebc636e4d
@ -1,3 +1,4 @@
|
||||
import ms from 'ms';
|
||||
import { Router } from 'express';
|
||||
import bodyParser from 'body-parser';
|
||||
import * as authCtrl from '../controllers/auth.controller.js';
|
||||
@ -10,7 +11,7 @@ export const authRouter = Router();
|
||||
|
||||
// Limit login attempts for avoiding brute force attacks
|
||||
const loginLimiter = rateLimit({
|
||||
windowMs: 15 * 60 * 1000, // 15 min
|
||||
windowMs: ms('15m'),
|
||||
limit: 5,
|
||||
message: 'Too many login attempts, please try again later'
|
||||
});
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user