webupdate

backend/config/constants.js

@@ -21,15 +21,15 @@ const HTTP_STATUS = {
 const RATE_LIMITS = {
   API: {
     windowMs: 15 * 60 * 1000, // 15 minutes
-    max: 100,
+    max: 1000, // Increased for production - 1000 requests per 15 minutes per IP
   },
   AUTH: {
     windowMs: 15 * 60 * 1000, // 15 minutes
-    max: 50, // Increased from 5 to 50 for development
+    max: 5, // 5 failed attempts before lockout (successful requests are skipped)
   },
   UPLOAD: {
     windowMs: 60 * 60 * 1000, // 1 hour
-    max: 50,
+    max: 100, // Increased for production
   },
 };