From 0f14ccf07ccb02088bb338cfdfd64dc715b9c19d Mon Sep 17 00:00:00 2001
From: Bereket Engida <bekacru@gmail.com>
Date: Fri, 8 Nov 2024 10:58:29 +0300
Subject: [PATCH] fix: add custom rate-limiting rule for change password and
 email

---
 packages/better-auth/src/api/rate-limiter/index.ts | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/packages/better-auth/src/api/rate-limiter/index.ts b/packages/better-auth/src/api/rate-limiter/index.ts
index 02b42eaacf..834436c765 100644
--- a/packages/better-auth/src/api/rate-limiter/index.ts
+++ b/packages/better-auth/src/api/rate-limiter/index.ts
@@ -176,7 +176,12 @@ function getDefaultSpecialRules() {
 	const specialRules = [
 		{
 			pathMatcher(path: string) {
-				return path.startsWith("/sign-in") || path.startsWith("/sign-up");
+				return (
+					path.startsWith("/sign-in") ||
+					path.startsWith("/sign-up") ||
+					path.startsWith("/change-password") ||
+					path.startsWith("/change-email")
+				);
 			},
 			window: 10,
 			max: 3,