From 593b4decf47f6970f1e5e6a802e96a2d6ace9062 Mon Sep 17 00:00:00 2001
From: hamed <15238-genius.ha@users.noreply.drupalcode.org>
Date: Mon, 15 Jun 2026 18:47:14 +0330
Subject: [PATCH] chore(dev): relax rate limits for local testing
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add config/packages/dev/rate_limiter.yaml raising send_code and login
limits to 1000 in the dev environment only, so repeated OTP testing
isn't blocked by 'درخواست‌های زیاد'. Production limits in
config/packages/rate_limiter.yaml (5/hour, 10/min) are untouched.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 config/packages/dev/rate_limiter.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 config/packages/dev/rate_limiter.yaml

diff --git a/config/packages/dev/rate_limiter.yaml b/config/packages/dev/rate_limiter.yaml
new file mode 100644
index 00000000..78528b75
--- /dev/null
+++ b/config/packages/dev/rate_limiter.yaml
@@ -0,0 +1,13 @@
+# Dev-only overrides: relaxed limits so local testing isn't blocked.
+# Production limits live in config/packages/rate_limiter.yaml.
+framework:
+    rate_limiter:
+        send_code:
+            policy: 'sliding_window'
+            limit: 1000
+            interval: '60 minutes'
+
+        login:
+            policy: 'fixed_window'
+            limit: 1000
+            interval: '1 minute'