From c2eb7513834eeb5adfa53fff897f585de87e4821 Mon Sep 17 00:00:00 2001 From: nsfisis Date: Tue, 30 Dec 2025 22:08:47 +0900 Subject: feat(security): add rate limiting and CORS middleware MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Add rate limiting to login endpoint (5 requests/minute per IP) - Configure CORS middleware with environment-based origin control - Expose rate limit headers in CORS for client visibility - Update hono to 4.11.3 for rate limiter peer dependency 🤖 Generated with [Claude Code](https://claude.ai/claude-code) Co-Authored-By: Claude Opus 4.5 --- src/server/middleware/index.ts | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/server/middleware/index.ts') diff --git a/src/server/middleware/index.ts b/src/server/middleware/index.ts index e894a42..449e484 100644 --- a/src/server/middleware/index.ts +++ b/src/server/middleware/index.ts @@ -1,2 +1,4 @@ export { type AuthUser, authMiddleware, getAuthUser } from "./auth.js"; +export { createCorsMiddleware } from "./cors.js"; export { AppError, Errors, errorHandler } from "./error-handler.js"; +export { loginRateLimiter } from "./rate-limiter.js"; -- cgit v1.2.3-70-g09d2