webupdatev1

backend/routes/admin.js

@@ -2,6 +2,7 @@ const express = require("express");
 const { query } = require("../config/database");
 const { requireAuth } = require("../middleware/auth");
 const { cache } = require("../middleware/cache");
+const { apiLimiter } = require("../config/rateLimiter");
 const {
   invalidateProductCache,
   invalidateBlogCache,
@@ -19,6 +20,9 @@ const { getById, deleteById, countRecords } = require("../utils/queryHelpers");
 const { HTTP_STATUS } = require("../config/constants");
 const router = express.Router();
 
+// Apply rate limiting to all admin routes
+router.use(apiLimiter);
+
 // Dashboard stats API
 router.get(
   "/dashboard/stats",