feat(api): implement rate limiting for abuse prevention

Add @fastify/rate-limit with granular policies for different routes
Support TRUST_PROXY environment variable for reverse proxies
This commit is contained in:
2026-05-03 15:04:07 +08:00
parent 8f55db9061
commit 0c76d6bfc8
7 changed files with 453 additions and 69 deletions

View File

@@ -675,7 +675,8 @@ export const systemWordingMessages = {
loginRequired: 'Please log in first',
verifyEmailFirst: 'Please complete email verification first',
permissionDenied: 'Permission denied',
notFound: 'Not found'
notFound: 'Not found',
rateLimited: 'Too many requests. Please try again later.'
},
auth: {
emailRequired: 'Email is required',
@@ -1456,7 +1457,8 @@ export const systemWordingMessages = {
loginRequired: '请先登录',
verifyEmailFirst: '请先完成邮箱验证',
permissionDenied: '权限不足',
notFound: '未找到记录'
notFound: '未找到记录',
rateLimited: '请求过于频繁,请稍后再试。'
},
auth: {
emailRequired: '请输入邮箱',