From d64e86d261a6a5fea9d082348e7916d957842d0d Mon Sep 17 00:00:00 2001
From: Bryan Brooks <bryanbrooks@I3-MINI--BITS-2.local>
Date: Tue, 24 Feb 2026 13:08:30 -0600
Subject: [PATCH] fix: increase auth rate limit from 10 to 30 req/min

Profile page operations (delete passkey + reload + register + reload)
easily exhaust 10 req/min when combined with normal page loads.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 gateway/src/middleware/rateLimit.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gateway/src/middleware/rateLimit.ts b/gateway/src/middleware/rateLimit.ts
index ff3fbe5..bc4d276 100644
--- a/gateway/src/middleware/rateLimit.ts
+++ b/gateway/src/middleware/rateLimit.ts
@@ -161,7 +161,7 @@ export function rateLimit(config: Partial<RateLimitConfig> = {}): (req: Request,
  */
 export const authRateLimit = rateLimit({
   windowMs: 60 * 1000,   // 1 minute
-  maxRequests: 10,       // 10 auth attempts per minute
+  maxRequests: 30,       // 30 auth attempts per minute
 });
 
 /**
-- 
knotmirror 0.0.1