diff --git a/config/packages/dev/rate_limiter.yaml b/config/packages/dev/rate_limiter.yaml new file mode 100644 index 00000000..78528b75 --- /dev/null +++ b/config/packages/dev/rate_limiter.yaml @@ -0,0 +1,13 @@ +# Dev-only overrides: relaxed limits so local testing isn't blocked. +# Production limits live in config/packages/rate_limiter.yaml. +framework: + rate_limiter: + send_code: + policy: 'sliding_window' + limit: 1000 + interval: '60 minutes' + + login: + policy: 'fixed_window' + limit: 1000 + interval: '1 minute'