feat: 添加密码登陆接口限流

2025-12-19 20:00:52 +08:00
parent 45d0c87adb
commit 4803145f86
1 changed files with 4 additions and 0 deletions
--- a/apps/backend/src/auth/auth.controller.ts
+++ b/apps/backend/src/auth/auth.controller.ts
@@ -44,6 +44,10 @@ export class AuthController {
  }

  @Post('login/password')
+  @UseGuards(ThrottlerGuard)
+  @Throttle({ 'min': { limit: 10, ttl: 60 * 1000 } })
+  @Throttle({ 'hour': { limit: 20, ttl: 60 * 60 * 1000 } })
+  @Throttle({ 'day': { limit: 50, ttl: 24 * 60 * 60 * 1000 } })
  async loginByPassword(
    @Body() loginDto: LoginByPasswordDto,
    @Res({ passthrough: true }) res: Response,