mirror of
https://github.com/better-auth/better-auth.git
synced 2026-10-18 11:32:15 -05:00
docs(rate-limit): correct default window (#11492)
Co-authored-by: Taesu <bytaesu@gmail.com>
This commit is contained in:
@@ -6,7 +6,7 @@ description: Learn how to configure rate limiting in Better Auth, including IP a
|
||||
|
||||
Better Auth includes a built-in rate limiter to help manage traffic and prevent abuse. By default, in production mode, the rate limiter is set to:
|
||||
|
||||
* Window: 60 seconds
|
||||
* Window: 10 seconds
|
||||
* Max Requests: 100 requests
|
||||
|
||||
<Callout type="warning">
|
||||
@@ -45,7 +45,7 @@ In addition to the default settings, Better Auth provides custom rules for speci
|
||||
|
||||
In addition, plugins also define custom rules for specific paths. For example, `twoFactor` plugin has custom rules:
|
||||
|
||||
* `/two-factor/verify`: Is limited to 3 requests within 10 seconds.
|
||||
* `/two-factor/*`: Is limited to 3 requests within 10 seconds.
|
||||
|
||||
These custom rules ensure that sensitive operations are protected with stricter limits.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user