fix: admin/owner skip rate limiting, anon 10/min

2026-07-17 21:51:32 +08:00
parent 6dfc6788e5
commit ed6fe9dcf1
1 changed files with 2 additions and 1 deletions
--- a/backend/middleware/security.js
+++ b/backend/middleware/security.js
@@ -75,7 +75,8 @@ const registerLimiter = rateLimit({

 const ticketLimiter = rateLimit({
  windowMs: 60 * 1000,
-  max: 10,
+  max: 500,
+  skip: (req) => !!(req.headers.authorization),
  message: { error: '提交过于频繁，请稍后再试' },
  standardHeaders: true,
  legacyHeaders: false,