Files
crowetic f56fe72af6 fix(qortal-oidc-broker): differentiate rate limits for provision API read vs write operations
The previous provisioningLimiter applied the same strict limit (20 req/5min)
to ALL /api/provision/* requests, including read-only GET endpoints that
dashboards call frequently. This caused 'Too many provisioning requests'
errors during normal dashboard usage.

Fix: introduce createProvisionMethodAwareLimiter() which applies:
- Lenient limits (80 req/5min) for GET/read operations
- Strict limits (20 req/5min) for POST/PUT/PATCH/DELETE write operations

This protects write endpoints against abuse while allowing dashboards to
make legitimate read requests without hitting rate limits.
2026-07-13 18:00:55 -07:00
..