Remove login rate limiter (internal service only)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-18 17:43:10 -04:00
parent b341c64b02
commit a9ba74f1af
4 changed files with 0 additions and 29 deletions
@@ -3,7 +3,6 @@ import express from 'express';
 import cors from 'cors';
 import dotenv from 'dotenv';
 import pinoHttp from 'pino-http';
-import rateLimit from 'express-rate-limit';

 import authRoutes from './routes/auth';
 import ticketRoutes from './routes/tickets';
@@ -38,16 +37,7 @@ app.get('/healthz', (_req, res) => {
  res.json({ status: 'ok' });
 });

-const loginLimiter = rateLimit({
-  windowMs: 15 * 60 * 1000,
-  max: 10,
-  standardHeaders: true,
-  legacyHeaders: false,
-  message: { error: 'Too many login attempts. Try again in 15 minutes.' },
-});
-
 // Public
-app.use('/api/auth/login', loginLimiter);
 app.use('/api/auth', authRoutes);

 // Protected