Add rate limiter

index.js

@@ -21,6 +21,15 @@ app.use(bodyParser.urlencoded({ extended: true }));
 // -- Parse cookies
 const cookieParser = require('cookie-parser');
 app.use(cookieParser());
+// -- Rate limiting
+const { rateLimit } = require('express-rate-limit')
+const limiter = rateLimit({
+	windowMs: 10 * 60 * 1000, // 15 minutes
+	limit: 100, // Limit each IP to 100 requests per `window` (here, per 15 minutes).
+	standardHeaders: 'draft-8', // draft-6: `RateLimit-*` headers; draft-7 & draft-8: combined `RateLimit` header
+	legacyHeaders: false, // Disable the `X-RateLimit-*` headers.
+	// store: ... , // Redis, Memcached, etc. See below.
+})
 
 // Authentication
 const { signup, login, logout, resetPassword } = require('./auth/authEmail.js');