2
Limiting Abuse Control (rate-limiting) to Client-Side Integrations
Source: appwrite/appwrite#813 · opened by @eldadfux
I'm thinking of limiting the abuse checks to client-side integrations only for all Appwrite different endpoints. I think it's becoming a bit limiting and counterproductive when using Appwrite with an API key.
We use rate-limiting today for mainly two scenarios. The first one is the protection of user authentication, and the second one is protecting write-heavy operations. Both cases are much more dangerous when we're talking about end-users access rather than just an internal server integration using an API key or upcoming JWT authentication methods.
I would love to get more community and team feedback about this before making any changes in the code.
We use rate-limiting today for mainly two scenarios. The first one is the protection of user authentication, and the second one is protecting write-heavy operations. Both cases are much more dangerous when we're talking about end-users access rather than just an internal server integration using an API key or upcoming JWT authentication methods.
I would love to get more community and team feedback about this before making any changes in the code.
No pledges yet. Be the first to back this.
Comments
Similar requests
Custom abuse limits
13 votes · 0 comments
Homomorphic Encryption of MariaDB contents in Appwrite Cloud
1 vote · 0 comments
🚀 Feature: Block or make it harder to scrape data
1 vote · 0 comments
Ability to receive magic URL as part of API response.
4 votes · 0 comments
Custom rate limit for database collection access per user
5 votes · 0 comments
No comments yet.