summaryrefslogtreecommitdiff
path: root/apps/web/src/auth/rate-limit.ts
diff options
context:
space:
mode:
authorMaze Winther <mazewinther@gmail.com>2026-04-20 11:31:17 +0200
committerMaze Winther <mazewinther@gmail.com>2026-04-20 11:31:17 +0200
commit3e89d2998588f8e35c524e523ba2ee853f0f6475 (patch)
tree57221f96c1259b3b07e3ddf8c1adefc502b9d8eb /apps/web/src/auth/rate-limit.ts
parent729d10592f4e802f91c555c309ff3ba4b119f843 (diff)
downloadopencut-3e89d2998588f8e35c524e523ba2ee853f0f6475.tar.gz
refactor: restructure files to their domains, new preview overlay system, and dep graph
Diffstat (limited to 'apps/web/src/auth/rate-limit.ts')
-rw-r--r--apps/web/src/auth/rate-limit.ts21
1 files changed, 21 insertions, 0 deletions
diff --git a/apps/web/src/auth/rate-limit.ts b/apps/web/src/auth/rate-limit.ts
new file mode 100644
index 00000000..c10c3819
--- /dev/null
+++ b/apps/web/src/auth/rate-limit.ts
@@ -0,0 +1,21 @@
+import { Ratelimit } from "@upstash/ratelimit";
+import { Redis } from "@upstash/redis";
+import { webEnv } from "@/env/web";
+
+const redis = new Redis({
+ url: webEnv.UPSTASH_REDIS_REST_URL,
+ token: webEnv.UPSTASH_REDIS_REST_TOKEN,
+});
+
+export const baseRateLimit = new Ratelimit({
+ redis,
+ limiter: Ratelimit.slidingWindow(100, "1 m"), // 100 requests per minute
+ analytics: true,
+ prefix: "rate-limit",
+});
+
+export async function checkRateLimit({ request }: { request: Request }) {
+ const ip = request.headers.get("x-forwarded-for") ?? "anonymous";
+ const { success } = await baseRateLimit.limit(ip);
+ return { success, limited: !success };
+}