feat: add throttling functionality with @nestjs/throttler for rate limiting

Author: tomast1337

pnpm-lock.yaml

@@ -32,6 +32,7 @@
     "@nestjs/passport": "^10.0.3",
     "@nestjs/platform-express": "^10.4.15",
     "@nestjs/swagger": "^7.4.2",
+    "@nestjs/throttler": "^6.3.0",
     "@types/passport-discord": "^0.1.14",
     "@types/uuid": "^9.0.8",
     "axios": "^1.7.9",

server/package.json

@@ -14,6 +14,7 @@ import { SeedModule } from './seed/seed.module';
 import { SongModule } from './song/song.module';
 import { SongBrowserModule } from './song-browser/song-browser.module';
 import { UserModule } from './user/user.module';
+import { ThrottlerModule } from '@nestjs/throttler';
 
 @Module({
   imports: [
@@ -63,6 +64,29 @@ import { UserModule } from './user/user.module';
       },
       inject: [ConfigService],
     }),
+    // Throttler
+    ThrottlerModule.forRoot([
+      {
+        name: 'global',
+        ttl: 60 * 1000, // 1 minute
+        limit: 200, // 200 requests per minute
+      },
+      {
+        name: 'short',
+        ttl: 1000, // 1 second
+        limit: 5,
+      },
+      {
+        name: 'medium',
+        ttl: 60 * 1000, // 1 minute
+        limit: 100,
+      },
+      {
+        name: 'long',
+        ttl: 60 * 60 * 100, // 1 hour
+        limit: 1000,
+      },
+    ]),
     SongModule,
     UserModule,
     AuthModule.forRootAsync(),