Question

How can I create a rate limiter middleware for an Express.js API?

I want to create a rate limiter middleware for my Express.js API to control the number of requests a user can make within a specific time frame. I'm looking for guidance on the logic, setup, and any libraries or techniques that can help prevent abuse and improve API security. What’s the best approach to building a rate limiter for an Express.js application?

Answer 1

const express = require('express');
const rateLimit = require('express-rate-limit');

const app = express();

// Create a rate limiter middleware
const limiter = rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minutes
  max: 100, // limit each IP to 100 requests per windowMs
  message: 'Too many requests, please try again later.',
  standardHeaders: true, // Return the rate-limit headers
  legacyHeaders: false, // Disable the X-RateLimit-* headers
});

// Apply to all requests
app.use(limiter);

// ... rest of your API routes