feat(security): pengerasan keamanan API internify-be (CORS, Rate Limiting, Helmet, Multer, Cookie)

2026-08-04 22:07:26 +07:00
parent 326de3f929
commit 3acd41e1f7
9 changed files with 148 additions and 11 deletions
@@ -0,0 +1,32 @@
+const rateLimit = require('express-rate-limit');
+
+const authLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 menit
+  max: 15,
+  standardHeaders: true,
+  legacyHeaders: false,
+  message: {
+    status: false,
+    data: null,
+    message: 'Kebanyakan login, mohon coba lagi setelah 15 menit',
+    code: 429,
+  },
+});
+
+const globalLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 menit
+  max: 200,
+  standardHeaders: true,
+  legacyHeaders: false,
+  message: {
+    status: false,
+    data: null,
+    message: 'Terlalu banyak request, mohon coba lagi setelah 15 menit',
+    code: 429,
+  },
+});
+
+module.exports = {
+  authLimiter,
+  globalLimiter,
+};