I need to understand rate limits. is there a limit for 10 login on the same IP within one hour?
Check out the API reference, if there's a rate limit you will see which keys apply to it: https://appwrite.io/docs/references/cloud/client-web/account
So 50 people can max log in from one IP? My App has usecase from schools, and this is very likely to happen. they share IP. Not sure what this is trying to do. Whoever will try to attack/abuse have long ranges of IPs.
then we need an option to whitelist IPs. ideally this is automatic after 25 successful logins from one IP.
And this is 100% useless during development. Now I'm building the logic for registering users. handling all sorts of error. I need to try more than 50 times during one hour... Now basically i need to stop working..
Depends on the endpoint, each one is different. Are you self hosting or using cloud?
cloud
user.register and user.login - are two endpoints which can affect this. as the app is being used, suddenly a whole class will login, teacher show instructions on the whiteboard, some struggle to create users so 2-3 calls pr user. all same IP. and then they are blocked, teachers plan is broken, they never use the app again.
this is critical to fix for me - spent a few days now rewriting from supabase.... and this is a blocker...
Recommended threads
- Magic Link token automatically consumed
Hi, I'm using the Magic Link auth system with Appwrite Cloud and I'm running into huge issues getting users to log in successfully. About 9 times out of 10, th...
- Auth broken after update from 1.8.0 to 1...
So ive been having issues creating, deleting or updating users on my appwrite instance after i updated from 1.8.0 to version 1.9.0. When trying to create a user...
- Magic Link woes/noob
Magic Link is working; it sends the link to my email. But the link itself always leads to "Page Not Found. The page you're looking for doesn't exist". Clicking ...