Public leaderboard API has no rate limit and can't be cached #73

Open
opened 2026-10-08 16:33:31 -04:00 by goddard · 0 comments
Collaborator

The public leaderboard API has no rate limit, and the auth guard forces no-store on it (guard.ts:106), so it can't be cached.

Fix

  • Add a rate limit to the public leaderboard API
  • Exempt public routes from the forced no-store in guard.ts and set a short cache lifetime
The public leaderboard API has no rate limit, and the auth guard forces `no-store` on it (`guard.ts:106`), so it can't be cached. **Fix** - [ ] Add a rate limit to the public leaderboard API - [ ] Exempt public routes from the forced `no-store` in `guard.ts` and set a short cache lifetime
goddard added the
priority
low
type/hardening
labels 2026-10-08 16:39:16 -04:00
josh was assigned by goddard 2026-10-08 17:31:49 -04:00
Sign in to join this conversation.