added stack trace to some logging
This commit is contained in:
@@ -1,4 +1,5 @@
|
||||
const rateLimit = require("express-rate-limit");
|
||||
const logger = require("../utils/logger");
|
||||
|
||||
// General rate limiter for Maps API endpoints
|
||||
const createMapsRateLimiter = (windowMs, max, message) => {
|
||||
@@ -111,6 +112,21 @@ const uploadPresignLimiter = createUserBasedRateLimiter(
|
||||
"Too many upload requests. Please slow down."
|
||||
);
|
||||
|
||||
// Helper to create a rate limit handler that logs the event
|
||||
const createRateLimitHandler = (limiterName) => (req, res, next, options) => {
|
||||
const reqLogger = logger.withRequestId(req.id);
|
||||
reqLogger.warn('Rate limit exceeded', {
|
||||
limiter: limiterName,
|
||||
ip: req.ip,
|
||||
userId: req.user?.id || 'anonymous',
|
||||
method: req.method,
|
||||
url: req.url,
|
||||
userAgent: req.get('User-Agent'),
|
||||
message: options.message?.error || 'Rate limit exceeded'
|
||||
});
|
||||
res.status(options.statusCode).json(options.message);
|
||||
};
|
||||
|
||||
// Authentication rate limiters
|
||||
const authRateLimiters = {
|
||||
// Login rate limiter - stricter to prevent brute force
|
||||
@@ -124,6 +140,7 @@ const authRateLimiters = {
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
skipSuccessfulRequests: true, // Don't count successful logins
|
||||
handler: createRateLimitHandler('login'),
|
||||
}),
|
||||
|
||||
// Registration rate limiter
|
||||
@@ -136,6 +153,7 @@ const authRateLimiters = {
|
||||
},
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
handler: createRateLimitHandler('register'),
|
||||
}),
|
||||
|
||||
// Password reset rate limiter
|
||||
@@ -148,6 +166,7 @@ const authRateLimiters = {
|
||||
},
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
handler: createRateLimitHandler('passwordReset'),
|
||||
}),
|
||||
|
||||
// Alpha code validation rate limiter
|
||||
@@ -160,6 +179,7 @@ const authRateLimiters = {
|
||||
},
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
handler: createRateLimitHandler('alphaCodeValidation'),
|
||||
}),
|
||||
|
||||
// Email verification rate limiter - protect against brute force on 6-digit codes
|
||||
@@ -172,6 +192,7 @@ const authRateLimiters = {
|
||||
},
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
handler: createRateLimitHandler('emailVerification'),
|
||||
}),
|
||||
|
||||
// General API rate limiter
|
||||
@@ -184,6 +205,7 @@ const authRateLimiters = {
|
||||
},
|
||||
standardHeaders: true,
|
||||
legacyHeaders: false,
|
||||
handler: createRateLimitHandler('general'),
|
||||
}),
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user