✨ slow down requests

Author: w3cj

index.js

@@ -6,6 +6,7 @@ const helmet = require('helmet');
 const yup = require('yup');
 const monk = require('monk');
 const rateLimit = require('express-rate-limit');
+const slowDown = require('express-slow-down');
 const { nanoid } = require('nanoid');
 
 require('dotenv').config();
@@ -43,8 +44,12 @@ const schema = yup.object().shape({
   url: yup.string().trim().url().required(),
 });
 
-app.post('/url', rateLimit({
-  windowMs: 30 * 1000, // 30 seconds
+app.post('/url', slowDown({
+  windowMs: 30 * 1000,
+  delayAfter: 1,
+  delayMs: 500,
+}), rateLimit({
+  windowMs: 30 * 1000,
   max: 1,
 }), async (req, res, next) => {
   let { slug, url } = req.body;

package-lock.json

@@ -15,6 +15,7 @@
     "dotenv": "^8.2.0",
     "express": "^4.17.1",
     "express-rate-limit": "^5.1.3",
+    "express-slow-down": "^1.3.1",
     "helmet": "^3.22.0",
     "monk": "^7.3.0",
     "morgan": "^1.10.0",