fix(throttler): make throttler more restrictive

ReseauEntourage · Oct 24, 2023 · 773e53d · 773e53d
1 parent c14d77b
commit 773e53d
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/src/app.module.ts b/src/app.module.ts
@@ -84,7 +84,7 @@ export function getSequelizeOptions(): SequelizeModuleOptions {
     SequelizeModule.forRoot(getSequelizeOptions()),
     ThrottlerModule.forRoot({
       ttl: 60,
-      limit: 100,
+      limit: 60,
     }),
     BullModule.forRoot({
       redis: ENV === 'dev-test' || ENV === 'test' ? {} : getRedisOptions(),

diff --git a/src/auth/auth.controller.ts b/src/auth/auth.controller.ts
@@ -143,7 +143,7 @@ export class AuthController {
     return updatedUser;
   }
 
-  @Throttle(100, 60)
+  @Throttle(60, 60)
   @Get('current')
   async getCurrent(@UserPayload('id', new ParseUUIDPipe()) id: string) {
     const updatedUser = await this.authService.updateUser(id, {

diff --git a/src/contacts/contacts.controller.ts b/src/contacts/contacts.controller.ts
@@ -5,6 +5,7 @@ import {
   Get,
   Post,
 } from '@nestjs/common';
+import { Throttle } from '@nestjs/throttler';
 import { Public } from 'src/auth/guards';
 import {
   ContactCompanyFormDto,
@@ -25,6 +26,7 @@ import { InscriptionCandidateFormDto } from './dto/inscription-candidate-form.dt
 import { InscriptionCandidateFormPipe } from './dto/inscription-candidate-form.pipe';
 
 // TODO change to /contacts
+@Throttle(20, 60)
 @Controller('contact')
 export class ContactsController {
   constructor(private readonly contactsService: ContactsService) {}