[{"data":1,"prerenderedAt":826},["ShallowReactive",2],{"navigation:en":3,"\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Frate-limiting:en":311},[4],{"title":5,"path":6,"stem":7,"children":8,"icon":10},"Nuxfire Docs","\u002Fdocs","docs\u002F0.index",[9,11,152],{"title":5,"path":6,"stem":7,"icon":10},"i-lucide-layout-grid",{"title":12,"path":13,"stem":14,"children":15,"icon":151},"SaaS Starter Kit","\u002Fdocs\u002Fsaas-starter-kit","docs\u002F1.saas-starter-kit\u002F0.index",[16,19,63,129],{"title":17,"path":13,"stem":14,"icon":18},"What is the SaaS Starter Kit?","i-lucide-info",{"title":20,"icon":21,"hide":22,"path":23,"stem":24,"children":25,"page":62},"Getting Started","i-lucide-play",true,"\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started","docs\u002F1.saas-starter-kit\u002F1.getting-started",[26,30,34,38,42,46,50,54,58],{"title":27,"path":28,"stem":29},"Quick Start","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fquick-start","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F0.quick-start",{"title":31,"path":32,"stem":33},"Installation","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Finstallation","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F1.installation",{"title":35,"path":36,"stem":37},"Cloudflare Access","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fcloudflare-access","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F2.cloudflare-access",{"title":39,"path":40,"stem":41},"Configuration","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fconfiguration","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F3.configuration",{"title":43,"path":44,"stem":45},"Secrets","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fsecrets","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F4.secrets",{"title":47,"path":48,"stem":49},"Environment Variables","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fenvironment-variables","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F5.environment-variables",{"title":51,"path":52,"stem":53},"Deploy","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fdeploy","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F6.deploy",{"title":55,"path":56,"stem":57},"Local Development","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Flocal-development","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F7.local-development",{"title":59,"path":60,"stem":61},"Project Structure","\u002Fdocs\u002Fsaas-starter-kit\u002Fgetting-started\u002Fproject-structure","docs\u002F1.saas-starter-kit\u002F1.getting-started\u002F8.project-structure",false,{"title":64,"icon":65,"hide":22,"path":66,"stem":67,"children":68,"page":62},"Features","i-lucide-box","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures","docs\u002F1.saas-starter-kit\u002F2.features",[69,73,77,81,85,89,93,97,101,105,109,113,117,121,125],{"title":70,"path":71,"stem":72},"Authentication","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fauth","docs\u002F1.saas-starter-kit\u002F2.features\u002F1.auth",{"title":74,"path":75,"stem":76},"Rate Limiting","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Frate-limiting","docs\u002F1.saas-starter-kit\u002F2.features\u002F10.rate-limiting",{"title":78,"path":79,"stem":80},"WebSockets","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fwebsockets","docs\u002F1.saas-starter-kit\u002F2.features\u002F11.websockets",{"title":82,"path":83,"stem":84},"Blog","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fblog","docs\u002F1.saas-starter-kit\u002F2.features\u002F14.blog",{"title":86,"path":87,"stem":88},"Documentation","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fdocumentation","docs\u002F1.saas-starter-kit\u002F2.features\u002F15.documentation",{"title":90,"path":91,"stem":92},"Analytics","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fanalytics","docs\u002F1.saas-starter-kit\u002F2.features\u002F16.analytics",{"title":94,"path":95,"stem":96},"Platform Admin Console","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fplatform-admin","docs\u002F1.saas-starter-kit\u002F2.features\u002F17.platform-admin",{"title":98,"path":99,"stem":100},"Database","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fdatabase","docs\u002F1.saas-starter-kit\u002F2.features\u002F2.database",{"title":102,"path":103,"stem":104},"Payments & Billing","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fpayments","docs\u002F1.saas-starter-kit\u002F2.features\u002F3.payments",{"title":106,"path":107,"stem":108},"Emails","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Femails","docs\u002F1.saas-starter-kit\u002F2.features\u002F4.emails",{"title":110,"path":111,"stem":112},"Notifications","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fnotifications","docs\u002F1.saas-starter-kit\u002F2.features\u002F5.notifications",{"title":114,"path":115,"stem":116},"Role-Based Access Control","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Frbac","docs\u002F1.saas-starter-kit\u002F2.features\u002F6.rbac",{"title":118,"path":119,"stem":120},"Async Jobs","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fasync-jobs","docs\u002F1.saas-starter-kit\u002F2.features\u002F7.async-jobs",{"title":122,"path":123,"stem":124},"Storage","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Fstorage","docs\u002F1.saas-starter-kit\u002F2.features\u002F8.storage",{"title":126,"path":127,"stem":128},"Internationalization","\u002Fdocs\u002Fsaas-starter-kit\u002Ffeatures\u002Finternationalization","docs\u002F1.saas-starter-kit\u002F2.features\u002F9.internationalization",{"title":130,"icon":131,"path":132,"stem":133,"children":134,"page":62},"Concepts","i-lucide-graduation-cap","\u002Fdocs\u002Fsaas-starter-kit\u002Fconcepts","docs\u002F1.saas-starter-kit\u002F3.concepts",[135,139,143,147],{"title":136,"path":137,"stem":138},"Technology Stack","\u002Fdocs\u002Fsaas-starter-kit\u002Fconcepts\u002Ftech-stack","docs\u002F1.saas-starter-kit\u002F3.concepts\u002F0.tech-stack",{"title":140,"path":141,"stem":142},"SST.dev","\u002Fdocs\u002Fsaas-starter-kit\u002Fconcepts\u002Fsst","docs\u002F1.saas-starter-kit\u002F3.concepts\u002F1.sst",{"title":144,"path":145,"stem":146},"NuxtHub","\u002Fdocs\u002Fsaas-starter-kit\u002Fconcepts\u002Fnuxt-hub","docs\u002F1.saas-starter-kit\u002F3.concepts\u002F2.nuxt-hub",{"title":148,"path":149,"stem":150},"Design System & Branding","\u002Fdocs\u002Fsaas-starter-kit\u002Fconcepts\u002Fdesign-system","docs\u002F1.saas-starter-kit\u002F3.concepts\u002F3.design-system","i-lucide-zap",{"title":153,"path":154,"stem":155,"children":156,"icon":159},"Fireskills","\u002Fdocs\u002Ffireskills","docs\u002F2.fireskills\u002F0.index",[157,160,219,249,275,293],{"title":158,"path":154,"stem":155,"icon":159},"What is Fireskills?","i-lucide-flame",{"title":20,"icon":21,"hide":22,"path":161,"stem":162,"children":163,"page":62},"\u002Fdocs\u002Ffireskills\u002Fgetting-started","docs\u002F2.fireskills\u002F1.getting-started",[164,167,171,175,179,183,187,191,195,199,203,207,211,215],{"title":27,"path":165,"stem":166},"\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fquick-start","docs\u002F2.fireskills\u002F1.getting-started\u002F00.quick-start",{"title":168,"path":169,"stem":170},"Workflow & Governance","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fworkflow","docs\u002F2.fireskills\u002F1.getting-started\u002F01.workflow",{"title":172,"path":173,"stem":174},"Project Context","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fproject-context","docs\u002F2.fireskills\u002F1.getting-started\u002F02.project-context",{"title":176,"path":177,"stem":178},"Step 0: Setup","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-setup","docs\u002F2.fireskills\u002F1.getting-started\u002F03.step-setup",{"title":180,"path":181,"stem":182},"Step 1: Inbox","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-inbox","docs\u002F2.fireskills\u002F1.getting-started\u002F04.step-inbox",{"title":184,"path":185,"stem":186},"Step 2: Backlog","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-backlog","docs\u002F2.fireskills\u002F1.getting-started\u002F05.step-backlog",{"title":188,"path":189,"stem":190},"Step 3: Specify","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-specify","docs\u002F2.fireskills\u002F1.getting-started\u002F06.step-specify",{"title":192,"path":193,"stem":194},"Step 4: Validate","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-validate","docs\u002F2.fireskills\u002F1.getting-started\u002F07.step-validate",{"title":196,"path":197,"stem":198},"Step 5: Tasks","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-tasks","docs\u002F2.fireskills\u002F1.getting-started\u002F08.step-tasks",{"title":200,"path":201,"stem":202},"Step 6: TDD\u002FBDD","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-tdd-bdd","docs\u002F2.fireskills\u002F1.getting-started\u002F09.step-tdd-bdd",{"title":204,"path":205,"stem":206},"Step 7: Implement","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-implement","docs\u002F2.fireskills\u002F1.getting-started\u002F10.step-implement",{"title":208,"path":209,"stem":210},"Step 8: Documentator","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fstep-documentator","docs\u002F2.fireskills\u002F1.getting-started\u002F11.step-documentator",{"title":212,"path":213,"stem":214},"Late Changes","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Flate-changes","docs\u002F2.fireskills\u002F1.getting-started\u002F12.late-changes",{"title":216,"path":217,"stem":218},"Other Entry Points","\u002Fdocs\u002Ffireskills\u002Fgetting-started\u002Fother-entry-points","docs\u002F2.fireskills\u002F1.getting-started\u002F13.other-entry-points",{"title":220,"icon":221,"hide":22,"path":222,"stem":223,"children":224,"page":62},"Methodology","i-lucide-git-branch","\u002Fdocs\u002Ffireskills\u002Fmethodology","docs\u002F2.fireskills\u002F2.methodology",[225,229,233,237,241,245],{"title":226,"path":227,"stem":228},"The Three Acts","\u002Fdocs\u002Ffireskills\u002Fmethodology\u002Fthree-acts","docs\u002F2.fireskills\u002F2.methodology\u002F0.three-acts",{"title":230,"path":231,"stem":232},"The Three Gates","\u002Fdocs\u002Ffireskills\u002Fmethodology\u002Fthree-gates","docs\u002F2.fireskills\u002F2.methodology\u002F1.three-gates",{"title":234,"path":235,"stem":236},"The Canonical Spec","\u002Fdocs\u002Ffireskills\u002Fmethodology\u002Fcanonical-spec","docs\u002F2.fireskills\u002F2.methodology\u002F2.canonical-spec",{"title":238,"path":239,"stem":240},"Lifecycle States","\u002Fdocs\u002Ffireskills\u002Fmethodology\u002Flifecycle-states","docs\u002F2.fireskills\u002F2.methodology\u002F3.lifecycle-states",{"title":242,"path":243,"stem":244},"Effort Scale","\u002Fdocs\u002Ffireskills\u002Fmethodology\u002Feffort-scale","docs\u002F2.fireskills\u002F2.methodology\u002F4.effort-scale",{"title":246,"path":247,"stem":248},"Milestones & Governance","\u002Fdocs\u002Ffireskills\u002Fmethodology\u002Fgovernance-and-milestones","docs\u002F2.fireskills\u002F2.methodology\u002F5.governance-and-milestones",{"title":250,"icon":251,"hide":22,"path":252,"stem":253,"children":254,"page":62},"Skills","i-lucide-layers","\u002Fdocs\u002Ffireskills\u002Fskills","docs\u002F2.fireskills\u002F3.skills",[255,259,263,267,271],{"title":256,"path":257,"stem":258},"Catalog","\u002Fdocs\u002Ffireskills\u002Fskills\u002Fcatalog","docs\u002F2.fireskills\u002F3.skills\u002F0.catalog",{"title":260,"path":261,"stem":262},"Act I: Define","\u002Fdocs\u002Ffireskills\u002Fskills\u002Fact-1-define","docs\u002F2.fireskills\u002F3.skills\u002F1.act-1-define",{"title":264,"path":265,"stem":266},"Act II: Design & Prove","\u002Fdocs\u002Ffireskills\u002Fskills\u002Fact-2-design-prove","docs\u002F2.fireskills\u002F3.skills\u002F2.act-2-design-prove",{"title":268,"path":269,"stem":270},"Act III: Deliver","\u002Fdocs\u002Ffireskills\u002Fskills\u002Fact-3-deliver","docs\u002F2.fireskills\u002F3.skills\u002F3.act-3-deliver",{"title":272,"path":273,"stem":274},"Governance & Decisions","\u002Fdocs\u002Ffireskills\u002Fskills\u002Fgovernance-and-decisions","docs\u002F2.fireskills\u002F3.skills\u002F4.governance-and-decisions",{"title":276,"icon":277,"hide":22,"path":278,"stem":279,"children":280,"page":62},"Specialists","i-lucide-sparkles","\u002Fdocs\u002Ffireskills\u002Fspecialists","docs\u002F2.fireskills\u002F4.specialists",[281,285,289],{"title":282,"path":283,"stem":284},"Overview","\u002Fdocs\u002Ffireskills\u002Fspecialists\u002Foverview","docs\u002F2.fireskills\u002F4.specialists\u002F0.overview",{"title":286,"path":287,"stem":288},"Nuxfire Stack","\u002Fdocs\u002Ffireskills\u002Fspecialists\u002Fnuxfire-stack","docs\u002F2.fireskills\u002F4.specialists\u002F1.nuxfire-stack",{"title":290,"path":291,"stem":292},"Engineering Specialists","\u002Fdocs\u002Ffireskills\u002Fspecialists\u002Fengineering-specialists","docs\u002F2.fireskills\u002F4.specialists\u002F2.engineering-specialists",{"title":294,"icon":295,"hide":22,"path":296,"stem":297,"children":298,"page":62},"CLI & Tooling","i-lucide-terminal","\u002Fdocs\u002Ffireskills\u002Fcli","docs\u002F2.fireskills\u002F5.cli",[299,303,307],{"title":300,"path":301,"stem":302},"CLI Overview","\u002Fdocs\u002Ffireskills\u002Fcli\u002Foverview","docs\u002F2.fireskills\u002F5.cli\u002F0.overview",{"title":304,"path":305,"stem":306},"Commands","\u002Fdocs\u002Ffireskills\u002Fcli\u002Fcommands","docs\u002F2.fireskills\u002F5.cli\u002F1.commands",{"title":308,"path":309,"stem":310},"Safety Scripts","\u002Fdocs\u002Ffireskills\u002Fcli\u002Fgovernance-scripts","docs\u002F2.fireskills\u002F5.cli\u002F2.governance-scripts",{"id":312,"title":74,"body":313,"description":821,"extension":822,"meta":823,"navigation":22,"path":75,"seo":824,"stem":76,"__hash__":825},"docs\u002Fdocs\u002F1.saas-starter-kit\u002F2.features\u002F10.rate-limiting.md",{"type":314,"value":315,"toc":818},"minimark",[316,320,352,703,717,722,811,814],[317,318,319],"p",{},"A fixed-window rate limiter backed by Cloudflare KV, implemented twice — once per Worker runtime, same shape and semantics in both:",[321,322,323,335],"ul",{},[324,325,326,330,331,334],"li",{},[327,328,329],"code",{},"apps\u002Fapp\u002Fserver\u002Futils\u002Frate-limit.ts"," — uses ",[327,332,333],{},"hubKV()"," inside the App Worker's Nitro runtime.",[324,336,337,340,341,344,345,348,349,351],{},[327,338,339],{},"apps\u002Ffunctions\u002Fsrc\u002Frate-limit.ts"," — takes a raw ",[327,342,343],{},"KVNamespace"," (",[327,346,347],{},"AuthKV",") directly, since the auth Worker has no Nitro\u002FNuxtHub to call ",[327,350,333],{}," from.",[353,354,359],"pre",{"className":355,"code":356,"filename":329,"language":357,"meta":358,"style":358},"language-typescript shiki shiki-themes material-theme-lighter github-light github-dark monokai","export async function rateLimit(key: string, { limit, windowSeconds }) {\n  \u002F\u002F Cloudflare KV rejects a TTL under 60s, so the window can't be shorter.\n  const window = Math.max(windowSeconds, 60);\n  const kv = hubKV();\n  const windowId = Math.floor(Date.now() \u002F 1000 \u002F window);\n  const kvKey = `ratelimit:${key}:${windowId}`;\n  const count = ((await kv.get\u003Cnumber>(kvKey)) ?? 0) + 1;\n  await kv.set(kvKey, count, { ttl: window });\n  return { allowed: count \u003C= limit, count, limit };\n}\n","typescript","",[327,360,361,418,425,466,484,529,570,627,666,697],{"__ignoreMap":358},[362,363,366,370,374,378,382,386,390,394,398,401,404,407,409,412,415],"span",{"class":364,"line":365},"line",1,[362,367,369],{"class":368},"sRxSC","export",[362,371,373],{"class":372},"sTNss"," async",[362,375,377],{"class":376},"srJo8"," function",[362,379,381],{"class":380},"sD0ED"," rateLimit",[362,383,385],{"class":384},"swvn1","(",[362,387,389],{"class":388},"sQgqH","key",[362,391,393],{"class":392},"sGXK2",":",[362,395,397],{"class":396},"s_MOj"," string",[362,399,400],{"class":384},",",[362,402,403],{"class":384}," {",[362,405,406],{"class":388}," limit",[362,408,400],{"class":384},[362,410,411],{"class":388}," windowSeconds",[362,413,414],{"class":384}," })",[362,416,417],{"class":384}," {\n",[362,419,421],{"class":364,"line":420},2,[362,422,424],{"class":423},"ss7Ak","  \u002F\u002F Cloudflare KV rejects a TTL under 60s, so the window can't be shorter.\n",[362,426,428,431,435,438,442,445,448,451,454,456,460,463],{"class":364,"line":427},3,[362,429,430],{"class":376},"  const",[362,432,434],{"class":433},"s91G_"," window",[362,436,437],{"class":392}," =",[362,439,441],{"class":440},"ss--_"," Math",[362,443,444],{"class":384},".",[362,446,447],{"class":380},"max",[362,449,385],{"class":450},"squCx",[362,452,453],{"class":440},"windowSeconds",[362,455,400],{"class":384},[362,457,459],{"class":458},"sYThS"," 60",[362,461,462],{"class":450},")",[362,464,465],{"class":384},";\n",[362,467,469,471,474,476,479,482],{"class":364,"line":468},4,[362,470,430],{"class":376},[362,472,473],{"class":433}," kv",[362,475,437],{"class":392},[362,477,478],{"class":380}," hubKV",[362,480,481],{"class":450},"()",[362,483,465],{"class":384},[362,485,487,489,492,494,496,498,501,503,506,508,511,514,517,520,523,525,527],{"class":364,"line":486},5,[362,488,430],{"class":376},[362,490,491],{"class":433}," windowId",[362,493,437],{"class":392},[362,495,441],{"class":440},[362,497,444],{"class":384},[362,499,500],{"class":380},"floor",[362,502,385],{"class":450},[362,504,505],{"class":440},"Date",[362,507,444],{"class":384},[362,509,510],{"class":380},"now",[362,512,513],{"class":450},"() ",[362,515,516],{"class":392},"\u002F",[362,518,519],{"class":458}," 1000",[362,521,522],{"class":392}," \u002F",[362,524,434],{"class":440},[362,526,462],{"class":450},[362,528,465],{"class":384},[362,530,532,534,537,539,543,547,551,553,556,558,560,563,565,568],{"class":364,"line":531},6,[362,533,430],{"class":376},[362,535,536],{"class":433}," kvKey",[362,538,437],{"class":392},[362,540,542],{"class":541},"siCPE"," `",[362,544,546],{"class":545},"sLACW","ratelimit:",[362,548,550],{"class":549},"slF1C","${",[362,552,389],{"class":440},[362,554,555],{"class":549},"}",[362,557,393],{"class":545},[362,559,550],{"class":549},[362,561,562],{"class":440},"windowId",[362,564,555],{"class":549},[362,566,567],{"class":541},"`",[362,569,465],{"class":384},[362,571,573,575,578,580,583,586,588,590,593,596,599,602,604,607,610,613,616,619,622,625],{"class":364,"line":572},7,[362,574,430],{"class":376},[362,576,577],{"class":433}," count",[362,579,437],{"class":392},[362,581,582],{"class":450}," ((",[362,584,585],{"class":368},"await",[362,587,473],{"class":440},[362,589,444],{"class":384},[362,591,592],{"class":380},"get",[362,594,595],{"class":384},"\u003C",[362,597,598],{"class":396},"number",[362,600,601],{"class":384},">",[362,603,385],{"class":450},[362,605,606],{"class":440},"kvKey",[362,608,609],{"class":450},")) ",[362,611,612],{"class":392},"??",[362,614,615],{"class":458}," 0",[362,617,618],{"class":450},") ",[362,620,621],{"class":392},"+",[362,623,624],{"class":458}," 1",[362,626,465],{"class":384},[362,628,630,633,635,637,640,642,644,646,648,650,652,655,657,659,662,664],{"class":364,"line":629},8,[362,631,632],{"class":368},"  await",[362,634,473],{"class":440},[362,636,444],{"class":384},[362,638,639],{"class":380},"set",[362,641,385],{"class":450},[362,643,606],{"class":440},[362,645,400],{"class":384},[362,647,577],{"class":440},[362,649,400],{"class":384},[362,651,403],{"class":384},[362,653,654],{"class":450}," ttl",[362,656,393],{"class":384},[362,658,434],{"class":440},[362,660,661],{"class":384}," }",[362,663,462],{"class":450},[362,665,465],{"class":384},[362,667,669,672,674,677,679,681,684,686,688,690,692,694],{"class":364,"line":668},9,[362,670,671],{"class":368},"  return",[362,673,403],{"class":384},[362,675,676],{"class":450}," allowed",[362,678,393],{"class":384},[362,680,577],{"class":440},[362,682,683],{"class":392}," \u003C=",[362,685,406],{"class":440},[362,687,400],{"class":384},[362,689,577],{"class":440},[362,691,400],{"class":384},[362,693,406],{"class":440},[362,695,696],{"class":384}," };\n",[362,698,700],{"class":364,"line":699},10,[362,701,702],{"class":384},"}\n",[317,704,705,708,709,712,713,716],{},[327,706,707],{},"assertNotRateLimited(event, routeKey, options)"," wraps this for HTTP routes on the App Worker: it keys by ",[327,710,711],{},"\u003CrouteKey>:\u003Cip>"," and throws ",[327,714,715],{},"429 Too Many Requests"," directly when the limit is exceeded.",[718,719,721],"h2",{"id":720},"whats-currently-protected","What's currently protected",[723,724,725,741],"table",{},[726,727,728],"thead",{},[729,730,731,735,738],"tr",{},[732,733,734],"th",{},"Where",[732,736,737],{},"Keyed by",[732,739,740],{},"Purpose",[742,743,744,761,774,786,799],"tbody",{},[729,745,746,755,758],{},[747,748,749,344,752,462],"td",{},[327,750,751],{},"apps\u002Ffunctions\u002Fsrc\u002Fauth.ts",[327,753,754],{},"enforceCredentialRateLimit",[747,756,757],{},"path + IP + email",[747,759,760],{},"Password\u002Fcode login on the auth Worker",[729,762,763,768,771],{},[747,764,765],{},[327,766,767],{},"layers\u002Fadmin\u002Fserver\u002Fapi\u002Fadmin\u002Fmfa\u002Fverify.post.ts",[747,769,770],{},"platform admin id",[747,772,773],{},"MFA enrollment attempts",[729,775,776,781,783],{},[747,777,778],{},[327,779,780],{},"layers\u002Fadmin\u002Fserver\u002Fapi\u002Fadmin\u002Fmfa\u002Fchallenge.post.ts",[747,782,770],{},[747,784,785],{},"MFA reauthentication attempts",[729,787,788,793,796],{},[747,789,790],{},[327,791,792],{},"layers\u002Fbilling\u002Fserver\u002Fapi\u002Fwebhooks\u002Fstripe.post.ts",[747,794,795],{},"IP",[747,797,798],{},"Stripe webhook, on top of signature validation",[729,800,801,806,808],{},[747,802,803],{},[327,804,805],{},"layers\u002Fbilling\u002Fserver\u002Fapi\u002Fwebhooks\u002Fpaddle.post.ts",[747,807,795],{},[747,809,810],{},"Paddle webhook, on top of signature validation",[317,812,813],{},"This isn't a general-purpose API throttle — it's applied specifically where credential\u002Fsignature validation alone doesn't stop a high-volume replay: authentication attempts and unauthenticated webhook endpoints. There's no rate limiting on ordinary tRPC procedures today.",[815,816,817],"style",{},"html pre.shiki code .sRxSC, html code.shiki .sRxSC{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#D73A49;--shiki-default-font-style:inherit;--shiki-dark:#F97583;--shiki-dark-font-style:inherit;--shiki-sepia:#F92672;--shiki-sepia-font-style:inherit}html pre.shiki code .sTNss, html code.shiki .sTNss{--shiki-light:#9C3EDA;--shiki-default:#D73A49;--shiki-dark:#F97583;--shiki-sepia:#F92672}html pre.shiki code .srJo8, html code.shiki .srJo8{--shiki-light:#9C3EDA;--shiki-light-font-style:inherit;--shiki-default:#D73A49;--shiki-default-font-style:inherit;--shiki-dark:#F97583;--shiki-dark-font-style:inherit;--shiki-sepia:#66D9EF;--shiki-sepia-font-style:italic}html pre.shiki code .sD0ED, html code.shiki .sD0ED{--shiki-light:#6182B8;--shiki-default:#6F42C1;--shiki-dark:#B392F0;--shiki-sepia:#A6E22E}html pre.shiki code .swvn1, html code.shiki .swvn1{--shiki-light:#39ADB5;--shiki-default:#24292E;--shiki-dark:#E1E4E8;--shiki-sepia:#F8F8F2}html pre.shiki code .sQgqH, html code.shiki .sQgqH{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#E36209;--shiki-default-font-style:inherit;--shiki-dark:#FFAB70;--shiki-dark-font-style:inherit;--shiki-sepia:#FD971F;--shiki-sepia-font-style:italic}html pre.shiki code .sGXK2, html code.shiki .sGXK2{--shiki-light:#39ADB5;--shiki-default:#D73A49;--shiki-dark:#F97583;--shiki-sepia:#F92672}html pre.shiki code .s_MOj, html code.shiki .s_MOj{--shiki-light:#E2931D;--shiki-light-font-style:inherit;--shiki-default:#005CC5;--shiki-default-font-style:inherit;--shiki-dark:#79B8FF;--shiki-dark-font-style:inherit;--shiki-sepia:#66D9EF;--shiki-sepia-font-style:italic}html pre.shiki code .ss7Ak, html code.shiki .ss7Ak{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#6A737D;--shiki-default-font-style:inherit;--shiki-dark:#6A737D;--shiki-dark-font-style:inherit;--shiki-sepia:#88846F;--shiki-sepia-font-style:inherit}html pre.shiki code .s91G_, html code.shiki .s91G_{--shiki-light:#90A4AE;--shiki-default:#005CC5;--shiki-dark:#79B8FF;--shiki-sepia:#F8F8F2}html pre.shiki code .ss--_, html code.shiki .ss--_{--shiki-light:#90A4AE;--shiki-default:#24292E;--shiki-dark:#E1E4E8;--shiki-sepia:#F8F8F2}html pre.shiki code .squCx, html code.shiki .squCx{--shiki-light:#E53935;--shiki-default:#24292E;--shiki-dark:#E1E4E8;--shiki-sepia:#F8F8F2}html pre.shiki code .sYThS, html code.shiki .sYThS{--shiki-light:#F76D47;--shiki-default:#005CC5;--shiki-dark:#79B8FF;--shiki-sepia:#AE81FF}html pre.shiki code .siCPE, html code.shiki .siCPE{--shiki-light:#39ADB5;--shiki-default:#032F62;--shiki-dark:#9ECBFF;--shiki-sepia:#E6DB74}html pre.shiki code .sLACW, html code.shiki .sLACW{--shiki-light:#91B859;--shiki-default:#032F62;--shiki-dark:#9ECBFF;--shiki-sepia:#E6DB74}html pre.shiki code .slF1C, html code.shiki .slF1C{--shiki-light:#39ADB5;--shiki-default:#032F62;--shiki-dark:#9ECBFF;--shiki-sepia:#F92672}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html .sepia .shiki span {color: var(--shiki-sepia);background: var(--shiki-sepia-bg);font-style: var(--shiki-sepia-font-style);font-weight: var(--shiki-sepia-font-weight);text-decoration: var(--shiki-sepia-text-decoration);}html.sepia .shiki span {color: var(--shiki-sepia);background: var(--shiki-sepia-bg);font-style: var(--shiki-sepia-font-style);font-weight: var(--shiki-sepia-font-weight);text-decoration: var(--shiki-sepia-text-decoration);}",{"title":358,"searchDepth":420,"depth":420,"links":819},[820],{"id":720,"depth":420,"text":721},"Fixed-window rate limiting backed by Cloudflare KV, protecting login, MFA, and payment webhook endpoints.","md",{},{"title":74,"description":821},"VE42kUs04541RYMfZMszOrsG7V03bEu8hMnGkkKB48I",1790707485287]