alpha

backend/middleware/rateLimiter.js

@@ -143,6 +143,18 @@ const authRateLimiters = {
     legacyHeaders: false,
   }),
 
+  // Alpha code validation rate limiter
+  alphaCodeValidation: rateLimit({
+    windowMs: 15 * 60 * 1000, // 15 minutes
+    max: 5, // 5 code validation attempts per 15 minutes
+    message: {
+      error: "Too many attempts. Please try again later.",
+      retryAfter: 900,
+    },
+    standardHeaders: true,
+    legacyHeaders: false,
+  }),
+
   // General API rate limiter
   general: rateLimit({
     windowMs: 60 * 1000, // 1 minute
@@ -166,6 +178,7 @@ module.exports = {
   loginLimiter: authRateLimiters.login,
   registerLimiter: authRateLimiters.register,
   passwordResetLimiter: authRateLimiters.passwordReset,
+  alphaCodeValidationLimiter: authRateLimiters.alphaCodeValidation,
   generalLimiter: authRateLimiters.general,
 
   // Burst protection