felixOriginal post
Rank 2: Process
Hi
For my appwrite setup I proxy everything through my Nuxt backend to be able to have the cookies rewritten to my domain without having to write the endpoints myself.
I looked over the Audit code in the repo and wasnt able to find that Appwrite cares about X-Forwarded-For header when collecting the IP. The header is allowed.
How will it work with rate-limiting through the proxy? I know that some rate-limits are user based, but "public" endpoints will all have the same IP no?
Summary
The developer is concerned about rate limiting when proxying client requests through their Nuxt backend for their Appwrite setup. They are unsure if Appwrite considers the X-Forwarded-For header for IP collection. They are wondering how rate limiting will work through the proxy since public endpoints will have the same IP.