From b011144258cfc44154818be75df8e07a30a7f9ed Mon Sep 17 00:00:00 2001
From: Maidul Islam <maidul98@gmail.com>
Date: Wed, 7 Jun 2023 16:27:16 -0700
Subject: [PATCH] reduce password forgot limit

---
 backend/src/helpers/rateLimiter.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/helpers/rateLimiter.ts b/backend/src/helpers/rateLimiter.ts
index 401acbe3f..9e9d022eb 100644
--- a/backend/src/helpers/rateLimiter.ts
+++ b/backend/src/helpers/rateLimiter.ts
@@ -38,7 +38,7 @@ const authLimit = rateLimit({
   }
 });
 
-// 50 requests per 1 hour
+// 5 requests per 1 hour
 export const passwordLimiter = rateLimit({
   store: new MongoStore({
     uri: process.env.MONGO_URL,
@@ -47,7 +47,7 @@ export const passwordLimiter = rateLimit({
     collectionName: "expressRateRecords-passwordLimiter",
   }),
   windowMs: 1000 * 60 * 60,
-  max: 50,
+  max: 5,
   standardHeaders: true,
   legacyHeaders: false,
   keyGenerator: (req, res) => {