Merge pull request #182 from Permissionless-Software-Foundation/ct-unstable

fix(rate-limits): Further slowing down anon freeloaders

src/middleware/route-ratelimit.js

@@ -35,7 +35,7 @@ const config = require('../../config')
 
 // The amount of delay in milliseconds to add to anonymous requests, in order
 // to slow down freeloaders that are hitting the system too hard.
-const ANON_DELAY = 1000
+const ANON_DELAY = 3000
 
 let _this // Global pointer to instance of class, when 'this' context is lost.
 

test/v5/rate-limit-unit.js

@@ -204,6 +204,9 @@ describe('#rate-routelimit', () => {
 
   describe('#trackRateLimits', () => {
     it('should apply anonymous rate limits if no JWT token is provided', async () => {
+      // Mock sleep function
+      sandbox.stub(uut, 'sleep').resolves()
+
       req.ip = '127.0.0.1'
 
       const result = await uut.trackRateLimits(req, res)
@@ -278,6 +281,9 @@ describe('#rate-routelimit', () => {
     })
 
     it('should apply rate limits to anonymous users', async () => {
+      // Mock sleep function
+      sandbox.stub(uut, 'sleep').resolves()
+
       req.ip = '123.456.7.8'
 
       // console.log('next.callCount: ', next.callCount)
@@ -302,6 +308,9 @@ describe('#rate-routelimit', () => {
     })
 
     it('should return 429 error when anonymous users exceed rate limit', async () => {
+      // Mock sleep function
+      sandbox.stub(uut, 'sleep').resolves()
+
       req.ip = '123.456.7.8'
 
       // force req.locals.jwtToken to be empty.