From 7972dc5914f6feb89fde4fc462fd30839038e978 Mon Sep 17 00:00:00 2001
From: Nwokolo Chukwuemeka Paul <nwokolopaul979@gmail.com>
Date: Mon, 2 Mar 2026 21:46:13 +0100
Subject: [PATCH 1/2] API rate limiter

---
 coverage/clover.xml                           |  49 ++++--
 coverage/coverage-final.json                  |   8 +-
 coverage/lcov-report/index.html               |  30 ++--
 coverage/lcov-report/src/app.js.html          | 160 +++++++++++++++++-
 coverage/lcov-report/src/config/db.js.html    |   2 +-
 coverage/lcov-report/src/config/index.html    |   2 +-
 coverage/lcov-report/src/index.html           |  30 ++--
 .../lcov-report/src/middlewares/index.html    |   2 +-
 .../src/middlewares/validate.js.html          |   2 +-
 .../src/validators/auth.validators.js.html    |   2 +-
 .../lcov-report/src/validators/index.html     |   2 +-
 coverage/lcov.info                            |  55 ++++--
 package-lock.json                             |  33 ++++
 package.json                                  |   3 +-
 src/app.js                                    |  48 ++++++
 15 files changed, 346 insertions(+), 82 deletions(-)

diff --git a/coverage/clover.xml b/coverage/clover.xml
index 9dca09c..666aff3 100644
--- a/coverage/clover.xml
+++ b/coverage/clover.xml
@@ -1,29 +1,44 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<coverage generated="1772378688879" clover="3.2.0">
-  <project timestamp="1772378688879" name="All files">
-    <metrics statements="39" coveredstatements="13" conditionals="4" coveredconditionals="2" methods="9" coveredmethods="1" elements="52" coveredelements="16" complexity="0" loc="39" ncloc="39" packages="4" files="4" classes="4"/>
+<coverage generated="1772483495412" clover="3.2.0">
+  <project timestamp="1772483495412" name="All files">
+    <metrics statements="54" coveredstatements="20" conditionals="4" coveredconditionals="2" methods="13" coveredmethods="1" elements="71" coveredelements="23" complexity="0" loc="54" ncloc="54" packages="4" files="4" classes="4"/>
     <package name="src">
-      <metrics statements="13" coveredstatements="13" conditionals="2" coveredconditionals="2" methods="2" coveredmethods="1"/>
-      <file name="app.js" path="C:\Users\a-abdulkareem\Documents\GRANTFOX\api-fox\src\app.js">
-        <metrics statements="13" coveredstatements="13" conditionals="2" coveredconditionals="2" methods="2" coveredmethods="1"/>
+      <metrics statements="28" coveredstatements="20" conditionals="2" coveredconditionals="2" methods="6" coveredmethods="1"/>
+      <file name="app.js" path="C:\Users\USER\Documents\api-fox\src\app.js">
+        <metrics statements="28" coveredstatements="20" conditionals="2" coveredconditionals="2" methods="6" coveredmethods="1"/>
         <line num="1" count="1" type="stmt"/>
         <line num="2" count="1" type="stmt"/>
         <line num="3" count="1" type="stmt"/>
         <line num="4" count="1" type="stmt"/>
-        <line num="6" count="1" type="stmt"/>
-        <line num="8" count="1" type="cond" truecount="2" falsecount="0"/>
+        <line num="5" count="1" type="stmt"/>
+        <line num="7" count="1" type="stmt"/>
         <line num="10" count="1" type="stmt"/>
-        <line num="11" count="1" type="stmt"/>
-        <line num="16" count="1" type="stmt"/>
-        <line num="17" count="1" type="stmt"/>
-        <line num="19" count="1" type="stmt"/>
-        <line num="20" count="1" type="stmt"/>
-        <line num="23" count="1" type="stmt"/>
+        <line num="16" count="0" type="stmt"/>
+        <line num="17" count="0" type="stmt"/>
+        <line num="18" count="0" type="stmt"/>
+        <line num="26" count="1" type="stmt"/>
+        <line num="32" count="0" type="stmt"/>
+        <line num="33" count="0" type="stmt"/>
+        <line num="34" count="0" type="stmt"/>
+        <line num="42" count="1" type="stmt"/>
+        <line num="44" count="1" type="cond" truecount="2" falsecount="0"/>
+        <line num="46" count="1" type="stmt"/>
+        <line num="47" count="1" type="stmt"/>
+        <line num="52" count="1" type="stmt"/>
+        <line num="53" count="1" type="stmt"/>
+        <line num="55" count="1" type="stmt"/>
+        <line num="56" count="1" type="stmt"/>
+        <line num="60" count="1" type="stmt"/>
+        <line num="63" count="1" type="stmt"/>
+        <line num="64" count="0" type="stmt"/>
+        <line num="67" count="1" type="stmt"/>
+        <line num="68" count="0" type="stmt"/>
+        <line num="71" count="1" type="stmt"/>
       </file>
     </package>
     <package name="src.config">
       <metrics statements="14" coveredstatements="0" conditionals="0" coveredconditionals="0" methods="4" coveredmethods="0"/>
-      <file name="db.js" path="C:\Users\a-abdulkareem\Documents\GRANTFOX\api-fox\src\config\db.js">
+      <file name="db.js" path="C:\Users\USER\Documents\api-fox\src\config\db.js">
         <metrics statements="14" coveredstatements="0" conditionals="0" coveredconditionals="0" methods="4" coveredmethods="0"/>
         <line num="1" count="0" type="stmt"/>
         <line num="3" count="0" type="stmt"/>
@@ -43,7 +58,7 @@
     </package>
     <package name="src.middlewares">
       <metrics statements="8" coveredstatements="0" conditionals="2" coveredconditionals="0" methods="3" coveredmethods="0"/>
-      <file name="validate.js" path="C:\Users\a-abdulkareem\Documents\GRANTFOX\api-fox\src\middlewares\validate.js">
+      <file name="validate.js" path="C:\Users\USER\Documents\api-fox\src\middlewares\validate.js">
         <metrics statements="8" coveredstatements="0" conditionals="2" coveredconditionals="0" methods="3" coveredmethods="0"/>
         <line num="1" count="0" type="stmt"/>
         <line num="2" count="0" type="stmt"/>
@@ -57,7 +72,7 @@
     </package>
     <package name="src.validators">
       <metrics statements="4" coveredstatements="0" conditionals="0" coveredconditionals="0" methods="0" coveredmethods="0"/>
-      <file name="auth.validators.js" path="C:\Users\a-abdulkareem\Documents\GRANTFOX\api-fox\src\validators\auth.validators.js">
+      <file name="auth.validators.js" path="C:\Users\USER\Documents\api-fox\src\validators\auth.validators.js">
         <metrics statements="4" coveredstatements="0" conditionals="0" coveredconditionals="0" methods="0" coveredmethods="0"/>
         <line num="1" count="0" type="stmt"/>
         <line num="3" count="0" type="stmt"/>
diff --git a/coverage/coverage-final.json b/coverage/coverage-final.json
index e6e64a5..b3fe23a 100644
--- a/coverage/coverage-final.json
+++ b/coverage/coverage-final.json
@@ -1,5 +1,5 @@
-{"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\app.js": {"path":"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\app.js","statementMap":{"0":{"start":{"line":1,"column":16},"end":{"line":1,"column":34}},"1":{"start":{"line":2,"column":13},"end":{"line":2,"column":28}},"2":{"start":{"line":3,"column":15},"end":{"line":3,"column":32}},"3":{"start":{"line":4,"column":15},"end":{"line":4,"column":32}},"4":{"start":{"line":6,"column":12},"end":{"line":6,"column":21}},"5":{"start":{"line":8,"column":23},"end":{"line":8,"column":97}},"6":{"start":{"line":8,"column":77},"end":{"line":8,"column":90}},"7":{"start":{"line":10,"column":0},"end":{"line":10,"column":24}},"8":{"start":{"line":11,"column":0},"end":{"line":15,"column":4}},"9":{"start":{"line":16,"column":0},"end":{"line":16,"column":18}},"10":{"start":{"line":17,"column":0},"end":{"line":17,"column":23}},"11":{"start":{"line":19,"column":0},"end":{"line":21,"column":3}},"12":{"start":{"line":20,"column":2},"end":{"line":20,"column":41}},"13":{"start":{"line":23,"column":0},"end":{"line":23,"column":21}}},"fnMap":{"0":{"name":"(anonymous_0)","decl":{"start":{"line":8,"column":67},"end":{"line":8,"column":68}},"loc":{"start":{"line":8,"column":77},"end":{"line":8,"column":90}},"line":8},"1":{"name":"(anonymous_1)","decl":{"start":{"line":19,"column":23},"end":{"line":19,"column":24}},"loc":{"start":{"line":19,"column":37},"end":{"line":21,"column":1}},"line":19}},"branchMap":{"0":{"loc":{"start":{"line":8,"column":23},"end":{"line":8,"column":97}},"type":"binary-expr","locations":[{"start":{"line":8,"column":23},"end":{"line":8,"column":91}},{"start":{"line":8,"column":95},"end":{"line":8,"column":97}}],"line":8}},"s":{"0":1,"1":1,"2":1,"3":1,"4":1,"5":1,"6":0,"7":1,"8":1,"9":1,"10":1,"11":1,"12":1,"13":1},"f":{"0":0,"1":1},"b":{"0":[1,1]},"_coverageSchema":"1a1c01bbd47fc00a2c39e90264f33305004495a9","hash":"b727c02c9c1f57aa89d381f3a9e9862f2a445bf8"}
-,"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\config\\db.js": {"path":"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\config\\db.js","statementMap":{"0":{"start":{"line":1,"column":17},"end":{"line":1,"column":36}},"1":{"start":{"line":3,"column":18},"end":{"line":13,"column":1}},"2":{"start":{"line":4,"column":2},"end":{"line":12,"column":3}},"3":{"start":{"line":5,"column":17},"end":{"line":5,"column":62}},"4":{"start":{"line":7,"column":4},"end":{"line":7,"column":63}},"5":{"start":{"line":9,"column":4},"end":{"line":9,"column":64}},"6":{"start":{"line":11,"column":4},"end":{"line":11,"column":20}},"7":{"start":{"line":15,"column":0},"end":{"line":17,"column":3}},"8":{"start":{"line":16,"column":2},"end":{"line":16,"column":68}},"9":{"start":{"line":19,"column":0},"end":{"line":21,"column":3}},"10":{"start":{"line":20,"column":2},"end":{"line":20,"column":37}},"11":{"start":{"line":23,"column":0},"end":{"line":25,"column":3}},"12":{"start":{"line":24,"column":2},"end":{"line":24,"column":39}},"13":{"start":{"line":27,"column":0},"end":{"line":27,"column":27}}},"fnMap":{"0":{"name":"(anonymous_0)","decl":{"start":{"line":3,"column":18},"end":{"line":3,"column":19}},"loc":{"start":{"line":3,"column":30},"end":{"line":13,"column":1}},"line":3},"1":{"name":"(anonymous_1)","decl":{"start":{"line":15,"column":39},"end":{"line":15,"column":40}},"loc":{"start":{"line":15,"column":45},"end":{"line":17,"column":1}},"line":15},"2":{"name":"(anonymous_2)","decl":{"start":{"line":19,"column":38},"end":{"line":19,"column":39}},"loc":{"start":{"line":19,"column":44},"end":{"line":21,"column":1}},"line":19},"3":{"name":"(anonymous_3)","decl":{"start":{"line":23,"column":32},"end":{"line":23,"column":33}},"loc":{"start":{"line":23,"column":41},"end":{"line":25,"column":1}},"line":23}},"branchMap":{},"s":{"0":0,"1":0,"2":0,"3":0,"4":0,"5":0,"6":0,"7":0,"8":0,"9":0,"10":0,"11":0,"12":0,"13":0},"f":{"0":0,"1":0,"2":0,"3":0},"b":{}}
-,"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\middlewares\\validate.js": {"path":"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\middlewares\\validate.js","statementMap":{"0":{"start":{"line":1,"column":17},"end":{"line":20,"column":1}},"1":{"start":{"line":2,"column":2},"end":{"line":19,"column":4}},"2":{"start":{"line":3,"column":22},"end":{"line":3,"column":70}},"3":{"start":{"line":5,"column":4},"end":{"line":16,"column":5}},"4":{"start":{"line":6,"column":21},"end":{"line":9,"column":9}},"5":{"start":{"line":6,"column":52},"end":{"line":9,"column":7}},"6":{"start":{"line":11,"column":6},"end":{"line":15,"column":9}},"7":{"start":{"line":18,"column":4},"end":{"line":18,"column":11}},"8":{"start":{"line":22,"column":0},"end":{"line":22,"column":26}}},"fnMap":{"0":{"name":"(anonymous_0)","decl":{"start":{"line":1,"column":17},"end":{"line":1,"column":18}},"loc":{"start":{"line":1,"column":29},"end":{"line":20,"column":1}},"line":1},"1":{"name":"(anonymous_1)","decl":{"start":{"line":2,"column":9},"end":{"line":2,"column":10}},"loc":{"start":{"line":2,"column":29},"end":{"line":19,"column":3}},"line":2},"2":{"name":"(anonymous_2)","decl":{"start":{"line":6,"column":39},"end":{"line":6,"column":40}},"loc":{"start":{"line":6,"column":52},"end":{"line":9,"column":7}},"line":6}},"branchMap":{"0":{"loc":{"start":{"line":5,"column":4},"end":{"line":16,"column":5}},"type":"if","locations":[{"start":{"line":5,"column":4},"end":{"line":16,"column":5}},{"start":{},"end":{}}],"line":5}},"s":{"0":0,"1":0,"2":0,"3":0,"4":0,"5":0,"6":0,"7":0,"8":0},"f":{"0":0,"1":0,"2":0},"b":{"0":[0,0]}}
-,"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\validators\\auth.validators.js": {"path":"C:\\Users\\a-abdulkareem\\Documents\\GRANTFOX\\api-fox\\src\\validators\\auth.validators.js","statementMap":{"0":{"start":{"line":1,"column":12},"end":{"line":1,"column":26}},"1":{"start":{"line":3,"column":23},"end":{"line":17,"column":2}},"2":{"start":{"line":19,"column":20},"end":{"line":27,"column":2}},"3":{"start":{"line":29,"column":0},"end":{"line":32,"column":2}}},"fnMap":{},"branchMap":{},"s":{"0":0,"1":0,"2":0,"3":0},"f":{},"b":{}}
+{"C:\\Users\\USER\\Documents\\api-fox\\src\\app.js": {"path":"C:\\Users\\USER\\Documents\\api-fox\\src\\app.js","statementMap":{"0":{"start":{"line":1,"column":16},"end":{"line":1,"column":34}},"1":{"start":{"line":2,"column":13},"end":{"line":2,"column":28}},"2":{"start":{"line":3,"column":15},"end":{"line":3,"column":32}},"3":{"start":{"line":4,"column":15},"end":{"line":4,"column":32}},"4":{"start":{"line":5,"column":18},"end":{"line":5,"column":47}},"5":{"start":{"line":7,"column":12},"end":{"line":7,"column":21}},"6":{"start":{"line":10,"column":22},"end":{"line":23,"column":2}},"7":{"start":{"line":16,"column":23},"end":{"line":16,"column":64}},"8":{"start":{"line":17,"column":4},"end":{"line":17,"column":39}},"9":{"start":{"line":18,"column":4},"end":{"line":21,"column":7}},"10":{"start":{"line":26,"column":20},"end":{"line":39,"column":2}},"11":{"start":{"line":32,"column":23},"end":{"line":32,"column":64}},"12":{"start":{"line":33,"column":4},"end":{"line":33,"column":39}},"13":{"start":{"line":34,"column":4},"end":{"line":37,"column":7}},"14":{"start":{"line":42,"column":0},"end":{"line":42,"column":23}},"15":{"start":{"line":44,"column":23},"end":{"line":44,"column":97}},"16":{"start":{"line":44,"column":77},"end":{"line":44,"column":90}},"17":{"start":{"line":46,"column":0},"end":{"line":46,"column":24}},"18":{"start":{"line":47,"column":0},"end":{"line":51,"column":4}},"19":{"start":{"line":52,"column":0},"end":{"line":52,"column":18}},"20":{"start":{"line":53,"column":0},"end":{"line":53,"column":23}},"21":{"start":{"line":55,"column":0},"end":{"line":57,"column":3}},"22":{"start":{"line":56,"column":2},"end":{"line":56,"column":41}},"23":{"start":{"line":60,"column":0},"end":{"line":60,"column":34}},"24":{"start":{"line":63,"column":0},"end":{"line":65,"column":3}},"25":{"start":{"line":64,"column":2},"end":{"line":64,"column":54}},"26":{"start":{"line":67,"column":0},"end":{"line":69,"column":3}},"27":{"start":{"line":68,"column":2},"end":{"line":68,"column":57}},"28":{"start":{"line":71,"column":0},"end":{"line":71,"column":21}}},"fnMap":{"0":{"name":"(anonymous_0)","decl":{"start":{"line":15,"column":11},"end":{"line":15,"column":12}},"loc":{"start":{"line":15,"column":25},"end":{"line":22,"column":3}},"line":15},"1":{"name":"(anonymous_1)","decl":{"start":{"line":31,"column":11},"end":{"line":31,"column":12}},"loc":{"start":{"line":31,"column":25},"end":{"line":38,"column":3}},"line":31},"2":{"name":"(anonymous_2)","decl":{"start":{"line":44,"column":67},"end":{"line":44,"column":68}},"loc":{"start":{"line":44,"column":77},"end":{"line":44,"column":90}},"line":44},"3":{"name":"(anonymous_3)","decl":{"start":{"line":55,"column":23},"end":{"line":55,"column":24}},"loc":{"start":{"line":55,"column":37},"end":{"line":57,"column":1}},"line":55},"4":{"name":"(anonymous_4)","decl":{"start":{"line":63,"column":28},"end":{"line":63,"column":29}},"loc":{"start":{"line":63,"column":42},"end":{"line":65,"column":1}},"line":63},"5":{"name":"(anonymous_5)","decl":{"start":{"line":67,"column":31},"end":{"line":67,"column":32}},"loc":{"start":{"line":67,"column":45},"end":{"line":69,"column":1}},"line":67}},"branchMap":{"0":{"loc":{"start":{"line":44,"column":23},"end":{"line":44,"column":97}},"type":"binary-expr","locations":[{"start":{"line":44,"column":23},"end":{"line":44,"column":91}},{"start":{"line":44,"column":95},"end":{"line":44,"column":97}}],"line":44}},"s":{"0":1,"1":1,"2":1,"3":1,"4":1,"5":1,"6":1,"7":0,"8":0,"9":0,"10":1,"11":0,"12":0,"13":0,"14":1,"15":1,"16":0,"17":1,"18":1,"19":1,"20":1,"21":1,"22":1,"23":1,"24":1,"25":0,"26":1,"27":0,"28":1},"f":{"0":0,"1":0,"2":0,"3":1,"4":0,"5":0},"b":{"0":[1,1]},"_coverageSchema":"1a1c01bbd47fc00a2c39e90264f33305004495a9","hash":"4cdcb50b1ceac3c71a96130cc657c8e6200d4418"}
+,"C:\\Users\\USER\\Documents\\api-fox\\src\\config\\db.js": {"path":"C:\\Users\\USER\\Documents\\api-fox\\src\\config\\db.js","statementMap":{"0":{"start":{"line":1,"column":17},"end":{"line":1,"column":36}},"1":{"start":{"line":3,"column":18},"end":{"line":13,"column":1}},"2":{"start":{"line":4,"column":2},"end":{"line":12,"column":3}},"3":{"start":{"line":5,"column":17},"end":{"line":5,"column":62}},"4":{"start":{"line":7,"column":4},"end":{"line":7,"column":63}},"5":{"start":{"line":9,"column":4},"end":{"line":9,"column":64}},"6":{"start":{"line":11,"column":4},"end":{"line":11,"column":20}},"7":{"start":{"line":15,"column":0},"end":{"line":17,"column":3}},"8":{"start":{"line":16,"column":2},"end":{"line":16,"column":68}},"9":{"start":{"line":19,"column":0},"end":{"line":21,"column":3}},"10":{"start":{"line":20,"column":2},"end":{"line":20,"column":37}},"11":{"start":{"line":23,"column":0},"end":{"line":25,"column":3}},"12":{"start":{"line":24,"column":2},"end":{"line":24,"column":39}},"13":{"start":{"line":27,"column":0},"end":{"line":27,"column":27}}},"fnMap":{"0":{"name":"(anonymous_0)","decl":{"start":{"line":3,"column":18},"end":{"line":3,"column":19}},"loc":{"start":{"line":3,"column":30},"end":{"line":13,"column":1}},"line":3},"1":{"name":"(anonymous_1)","decl":{"start":{"line":15,"column":39},"end":{"line":15,"column":40}},"loc":{"start":{"line":15,"column":45},"end":{"line":17,"column":1}},"line":15},"2":{"name":"(anonymous_2)","decl":{"start":{"line":19,"column":38},"end":{"line":19,"column":39}},"loc":{"start":{"line":19,"column":44},"end":{"line":21,"column":1}},"line":19},"3":{"name":"(anonymous_3)","decl":{"start":{"line":23,"column":32},"end":{"line":23,"column":33}},"loc":{"start":{"line":23,"column":41},"end":{"line":25,"column":1}},"line":23}},"branchMap":{},"s":{"0":0,"1":0,"2":0,"3":0,"4":0,"5":0,"6":0,"7":0,"8":0,"9":0,"10":0,"11":0,"12":0,"13":0},"f":{"0":0,"1":0,"2":0,"3":0},"b":{}}
+,"C:\\Users\\USER\\Documents\\api-fox\\src\\middlewares\\validate.js": {"path":"C:\\Users\\USER\\Documents\\api-fox\\src\\middlewares\\validate.js","statementMap":{"0":{"start":{"line":1,"column":17},"end":{"line":20,"column":1}},"1":{"start":{"line":2,"column":2},"end":{"line":19,"column":4}},"2":{"start":{"line":3,"column":22},"end":{"line":3,"column":70}},"3":{"start":{"line":5,"column":4},"end":{"line":16,"column":5}},"4":{"start":{"line":6,"column":21},"end":{"line":9,"column":9}},"5":{"start":{"line":6,"column":52},"end":{"line":9,"column":7}},"6":{"start":{"line":11,"column":6},"end":{"line":15,"column":9}},"7":{"start":{"line":18,"column":4},"end":{"line":18,"column":11}},"8":{"start":{"line":22,"column":0},"end":{"line":22,"column":26}}},"fnMap":{"0":{"name":"(anonymous_0)","decl":{"start":{"line":1,"column":17},"end":{"line":1,"column":18}},"loc":{"start":{"line":1,"column":29},"end":{"line":20,"column":1}},"line":1},"1":{"name":"(anonymous_1)","decl":{"start":{"line":2,"column":9},"end":{"line":2,"column":10}},"loc":{"start":{"line":2,"column":29},"end":{"line":19,"column":3}},"line":2},"2":{"name":"(anonymous_2)","decl":{"start":{"line":6,"column":39},"end":{"line":6,"column":40}},"loc":{"start":{"line":6,"column":52},"end":{"line":9,"column":7}},"line":6}},"branchMap":{"0":{"loc":{"start":{"line":5,"column":4},"end":{"line":16,"column":5}},"type":"if","locations":[{"start":{"line":5,"column":4},"end":{"line":16,"column":5}},{"start":{},"end":{}}],"line":5}},"s":{"0":0,"1":0,"2":0,"3":0,"4":0,"5":0,"6":0,"7":0,"8":0},"f":{"0":0,"1":0,"2":0},"b":{"0":[0,0]}}
+,"C:\\Users\\USER\\Documents\\api-fox\\src\\validators\\auth.validators.js": {"path":"C:\\Users\\USER\\Documents\\api-fox\\src\\validators\\auth.validators.js","statementMap":{"0":{"start":{"line":1,"column":12},"end":{"line":1,"column":26}},"1":{"start":{"line":3,"column":23},"end":{"line":17,"column":2}},"2":{"start":{"line":19,"column":20},"end":{"line":27,"column":2}},"3":{"start":{"line":29,"column":0},"end":{"line":32,"column":2}}},"fnMap":{},"branchMap":{},"s":{"0":0,"1":0,"2":0,"3":0},"f":{},"b":{}}
 }
diff --git a/coverage/lcov-report/index.html b/coverage/lcov-report/index.html
index 632fdbc..5a62e12 100644
--- a/coverage/lcov-report/index.html
+++ b/coverage/lcov-report/index.html
@@ -23,9 +23,9 @@ <h1>All files</h1>
         <div class='clearfix'>
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">31.7% </span>
+                <span class="strong">35.71% </span>
                 <span class="quiet">Statements</span>
-                <span class='fraction'>13/41</span>
+                <span class='fraction'>20/56</span>
             </div>
         
             
@@ -37,16 +37,16 @@ <h1>All files</h1>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">11.11% </span>
+                <span class="strong">7.69% </span>
                 <span class="quiet">Functions</span>
-                <span class='fraction'>1/9</span>
+                <span class='fraction'>1/13</span>
             </div>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">33.33% </span>
+                <span class="strong">37.03% </span>
                 <span class="quiet">Lines</span>
-                <span class='fraction'>13/39</span>
+                <span class='fraction'>20/54</span>
             </div>
         
             
@@ -80,17 +80,17 @@ <h1>All files</h1>
 </thead>
 <tbody><tr>
 	<td class="file high" data-value="src"><a href="src/index.html">src</a></td>
-	<td data-value="92.85" class="pic high">
-	<div class="chart"><div class="cover-fill" style="width: 92%"></div><div class="cover-empty" style="width: 8%"></div></div>
+	<td data-value="68.96" class="pic high">
+	<div class="chart"><div class="cover-fill" style="width: 68%"></div><div class="cover-empty" style="width: 32%"></div></div>
 	</td>
-	<td data-value="92.85" class="pct high">92.85%</td>
-	<td data-value="14" class="abs high">13/14</td>
+	<td data-value="68.96" class="pct high">68.96%</td>
+	<td data-value="29" class="abs high">20/29</td>
 	<td data-value="100" class="pct high">100%</td>
 	<td data-value="2" class="abs high">2/2</td>
-	<td data-value="50" class="pct high">50%</td>
-	<td data-value="2" class="abs high">1/2</td>
-	<td data-value="100" class="pct high">100%</td>
-	<td data-value="13" class="abs high">13/13</td>
+	<td data-value="16.66" class="pct low">16.66%</td>
+	<td data-value="6" class="abs low">1/6</td>
+	<td data-value="71.42" class="pct high">71.42%</td>
+	<td data-value="28" class="abs high">20/28</td>
 	</tr>
 
 <tr>
@@ -146,7 +146,7 @@ <h1>All files</h1>
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/app.js.html b/coverage/lcov-report/src/app.js.html
index 446b5b1..0041249 100644
--- a/coverage/lcov-report/src/app.js.html
+++ b/coverage/lcov-report/src/app.js.html
@@ -23,9 +23,9 @@ <h1><a href="../index.html">All files</a> / <a href="index.html">src</a> app.js<
         <div class='clearfix'>
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">92.85% </span>
+                <span class="strong">68.96% </span>
                 <span class="quiet">Statements</span>
-                <span class='fraction'>13/14</span>
+                <span class='fraction'>20/29</span>
             </div>
         
             
@@ -37,16 +37,16 @@ <h1><a href="../index.html">All files</a> / <a href="index.html">src</a> app.js<
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">50% </span>
+                <span class="strong">16.66% </span>
                 <span class="quiet">Functions</span>
-                <span class='fraction'>1/2</span>
+                <span class='fraction'>1/6</span>
             </div>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">100% </span>
+                <span class="strong">71.42% </span>
                 <span class="quiet">Lines</span>
-                <span class='fraction'>13/13</span>
+                <span class='fraction'>20/28</span>
             </div>
         
             
@@ -85,13 +85,97 @@ <h1><a href="../index.html">All files</a> / <a href="index.html">src</a> app.js<
 <a name='L20'></a><a href='#L20'>20</a>
 <a name='L21'></a><a href='#L21'>21</a>
 <a name='L22'></a><a href='#L22'>22</a>
-<a name='L23'></a><a href='#L23'>23</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
+<a name='L23'></a><a href='#L23'>23</a>
+<a name='L24'></a><a href='#L24'>24</a>
+<a name='L25'></a><a href='#L25'>25</a>
+<a name='L26'></a><a href='#L26'>26</a>
+<a name='L27'></a><a href='#L27'>27</a>
+<a name='L28'></a><a href='#L28'>28</a>
+<a name='L29'></a><a href='#L29'>29</a>
+<a name='L30'></a><a href='#L30'>30</a>
+<a name='L31'></a><a href='#L31'>31</a>
+<a name='L32'></a><a href='#L32'>32</a>
+<a name='L33'></a><a href='#L33'>33</a>
+<a name='L34'></a><a href='#L34'>34</a>
+<a name='L35'></a><a href='#L35'>35</a>
+<a name='L36'></a><a href='#L36'>36</a>
+<a name='L37'></a><a href='#L37'>37</a>
+<a name='L38'></a><a href='#L38'>38</a>
+<a name='L39'></a><a href='#L39'>39</a>
+<a name='L40'></a><a href='#L40'>40</a>
+<a name='L41'></a><a href='#L41'>41</a>
+<a name='L42'></a><a href='#L42'>42</a>
+<a name='L43'></a><a href='#L43'>43</a>
+<a name='L44'></a><a href='#L44'>44</a>
+<a name='L45'></a><a href='#L45'>45</a>
+<a name='L46'></a><a href='#L46'>46</a>
+<a name='L47'></a><a href='#L47'>47</a>
+<a name='L48'></a><a href='#L48'>48</a>
+<a name='L49'></a><a href='#L49'>49</a>
+<a name='L50'></a><a href='#L50'>50</a>
+<a name='L51'></a><a href='#L51'>51</a>
+<a name='L52'></a><a href='#L52'>52</a>
+<a name='L53'></a><a href='#L53'>53</a>
+<a name='L54'></a><a href='#L54'>54</a>
+<a name='L55'></a><a href='#L55'>55</a>
+<a name='L56'></a><a href='#L56'>56</a>
+<a name='L57'></a><a href='#L57'>57</a>
+<a name='L58'></a><a href='#L58'>58</a>
+<a name='L59'></a><a href='#L59'>59</a>
+<a name='L60'></a><a href='#L60'>60</a>
+<a name='L61'></a><a href='#L61'>61</a>
+<a name='L62'></a><a href='#L62'>62</a>
+<a name='L63'></a><a href='#L63'>63</a>
+<a name='L64'></a><a href='#L64'>64</a>
+<a name='L65'></a><a href='#L65'>65</a>
+<a name='L66'></a><a href='#L66'>66</a>
+<a name='L67'></a><a href='#L67'>67</a>
+<a name='L68'></a><a href='#L68'>68</a>
+<a name='L69'></a><a href='#L69'>69</a>
+<a name='L70'></a><a href='#L70'>70</a>
+<a name='L71'></a><a href='#L71'>71</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-neutral">&nbsp;</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-neutral">&nbsp;</span>
 <span class="cline-any cline-yes">1x</span>
@@ -107,13 +191,61 @@ <h1><a href="../index.html">All files</a> / <a href="index.html">src</a> app.js<
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-neutral">&nbsp;</span>
 <span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
 <span class="cline-any cline-yes">1x</span></td><td class="text"><pre class="prettyprint lang-js">const express = require('express');
 const cors = require('cors');
 const helmet = require('helmet');
 const morgan = require('morgan');
+const rateLimit = require('express-rate-limit');
 &nbsp;
 const app = express();
 &nbsp;
+// Global rate limiter: 100 requests per 15 minutes per IP
+const globalLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 100, // limit each IP to 100 requests per windowMs
+  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
+  legacyHeaders: false, // Disable the `X-RateLimit-*` headers
+  handler: <span class="fstat-no" title="function not covered" >(r</span>eq, res) =&gt; {
+    const retryAfter = <span class="cstat-no" title="statement not covered" >Math.ceil(req.rateLimit.resetTime / 1000);</span>
+<span class="cstat-no" title="statement not covered" >    res.set('Retry-After', retryAfter);</span>
+<span class="cstat-no" title="statement not covered" >    res.status(429).json({</span>
+      message: 'Too many requests, please try again later.',
+      retryAfter: retryAfter
+    });
+  }
+});
+&nbsp;
+// Stricter auth rate limiter: 10 requests per 15 minutes
+const authLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 10, // limit each IP to 10 requests per windowMs
+  standardHeaders: true,
+  legacyHeaders: false,
+  handler: <span class="fstat-no" title="function not covered" >(r</span>eq, res) =&gt; {
+    const retryAfter = <span class="cstat-no" title="statement not covered" >Math.ceil(req.rateLimit.resetTime / 1000);</span>
+<span class="cstat-no" title="statement not covered" >    res.set('Retry-After', retryAfter);</span>
+<span class="cstat-no" title="statement not covered" >    res.status(429).json({</span>
+      message: 'Too many authentication attempts, please try again later.',
+      retryAfter: retryAfter
+    });
+  }
+});
+&nbsp;
+// Apply global rate limiter to all requests
+app.use(globalLimiter);
+&nbsp;
 const allowedOrigins = process.env.ALLOWED_ORIGINS?.split(',').map(<span class="fstat-no" title="function not covered" >or</span>igin =&gt; <span class="cstat-no" title="statement not covered" >origin.trim())</span> || [];
 &nbsp;
 app.use(express.json());
@@ -129,6 +261,18 @@ <h1><a href="../index.html">All files</a> / <a href="index.html">src</a> app.js<
   res.status(200).json({ status: 'ok' });
 });
 &nbsp;
+// Apply stricter rate limiter to auth routes
+app.use('/api/auth', authLimiter);
+&nbsp;
+// Example auth routes (for testing rate limiting)
+app.post('/api/auth/login', <span class="fstat-no" title="function not covered" >(r</span>eq, res) =&gt; {
+<span class="cstat-no" title="statement not covered" >  res.status(200).json({ message: 'Login endpoint' });</span>
+});
+&nbsp;
+app.post('/api/auth/register', <span class="fstat-no" title="function not covered" >(r</span>eq, res) =&gt; {
+<span class="cstat-no" title="statement not covered" >  res.status(200).json({ message: 'Register endpoint' });</span>
+});
+&nbsp;
 module.exports = app;</pre></td></tr></table></pre>
 
                 <div class='push'></div><!-- for sticky footer -->
@@ -136,7 +280,7 @@ <h1><a href="../index.html">All files</a> / <a href="index.html">src</a> app.js<
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/config/db.js.html b/coverage/lcov-report/src/config/db.js.html
index 10d53e3..fd46aee 100644
--- a/coverage/lcov-report/src/config/db.js.html
+++ b/coverage/lcov-report/src/config/db.js.html
@@ -148,7 +148,7 @@ <h1><a href="../../index.html">All files</a> / <a href="index.html">src/config</
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/config/index.html b/coverage/lcov-report/src/config/index.html
index e22b6ea..edfd311 100644
--- a/coverage/lcov-report/src/config/index.html
+++ b/coverage/lcov-report/src/config/index.html
@@ -101,7 +101,7 @@ <h1><a href="../../index.html">All files</a> src/config</h1>
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/index.html b/coverage/lcov-report/src/index.html
index 9b9c844..686d9d0 100644
--- a/coverage/lcov-report/src/index.html
+++ b/coverage/lcov-report/src/index.html
@@ -23,9 +23,9 @@ <h1><a href="../index.html">All files</a> src</h1>
         <div class='clearfix'>
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">92.85% </span>
+                <span class="strong">68.96% </span>
                 <span class="quiet">Statements</span>
-                <span class='fraction'>13/14</span>
+                <span class='fraction'>20/29</span>
             </div>
         
             
@@ -37,16 +37,16 @@ <h1><a href="../index.html">All files</a> src</h1>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">50% </span>
+                <span class="strong">16.66% </span>
                 <span class="quiet">Functions</span>
-                <span class='fraction'>1/2</span>
+                <span class='fraction'>1/6</span>
             </div>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">100% </span>
+                <span class="strong">71.42% </span>
                 <span class="quiet">Lines</span>
-                <span class='fraction'>13/13</span>
+                <span class='fraction'>20/28</span>
             </div>
         
             
@@ -80,17 +80,17 @@ <h1><a href="../index.html">All files</a> src</h1>
 </thead>
 <tbody><tr>
 	<td class="file high" data-value="app.js"><a href="app.js.html">app.js</a></td>
-	<td data-value="92.85" class="pic high">
-	<div class="chart"><div class="cover-fill" style="width: 92%"></div><div class="cover-empty" style="width: 8%"></div></div>
+	<td data-value="68.96" class="pic high">
+	<div class="chart"><div class="cover-fill" style="width: 68%"></div><div class="cover-empty" style="width: 32%"></div></div>
 	</td>
-	<td data-value="92.85" class="pct high">92.85%</td>
-	<td data-value="14" class="abs high">13/14</td>
+	<td data-value="68.96" class="pct high">68.96%</td>
+	<td data-value="29" class="abs high">20/29</td>
 	<td data-value="100" class="pct high">100%</td>
 	<td data-value="2" class="abs high">2/2</td>
-	<td data-value="50" class="pct high">50%</td>
-	<td data-value="2" class="abs high">1/2</td>
-	<td data-value="100" class="pct high">100%</td>
-	<td data-value="13" class="abs high">13/13</td>
+	<td data-value="16.66" class="pct low">16.66%</td>
+	<td data-value="6" class="abs low">1/6</td>
+	<td data-value="71.42" class="pct high">71.42%</td>
+	<td data-value="28" class="abs high">20/28</td>
 	</tr>
 
 </tbody>
@@ -101,7 +101,7 @@ <h1><a href="../index.html">All files</a> src</h1>
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/middlewares/index.html b/coverage/lcov-report/src/middlewares/index.html
index e9ed502..5e0f640 100644
--- a/coverage/lcov-report/src/middlewares/index.html
+++ b/coverage/lcov-report/src/middlewares/index.html
@@ -101,7 +101,7 @@ <h1><a href="../../index.html">All files</a> src/middlewares</h1>
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/middlewares/validate.js.html b/coverage/lcov-report/src/middlewares/validate.js.html
index ba982be..d4c90a7 100644
--- a/coverage/lcov-report/src/middlewares/validate.js.html
+++ b/coverage/lcov-report/src/middlewares/validate.js.html
@@ -136,7 +136,7 @@ <h1><a href="../../index.html">All files</a> / <a href="index.html">src/middlewa
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/validators/auth.validators.js.html b/coverage/lcov-report/src/validators/auth.validators.js.html
index 66b297e..a2c6746 100644
--- a/coverage/lcov-report/src/validators/auth.validators.js.html
+++ b/coverage/lcov-report/src/validators/auth.validators.js.html
@@ -166,7 +166,7 @@ <h1><a href="../../index.html">All files</a> / <a href="index.html">src/validato
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../../prettify.js"></script>
         <script>
diff --git a/coverage/lcov-report/src/validators/index.html b/coverage/lcov-report/src/validators/index.html
index c480429..b45d8da 100644
--- a/coverage/lcov-report/src/validators/index.html
+++ b/coverage/lcov-report/src/validators/index.html
@@ -101,7 +101,7 @@ <h1><a href="../../index.html">All files</a> src/validators</h1>
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-03-01T15:24:48.861Z
+                at 2026-03-02T20:31:35.363Z
             </div>
         <script src="../../prettify.js"></script>
         <script>
diff --git a/coverage/lcov.info b/coverage/lcov.info
index 39ec636..30708c7 100644
--- a/coverage/lcov.info
+++ b/coverage/lcov.info
@@ -1,28 +1,51 @@
 TN:
 SF:src\app.js
-FN:8,(anonymous_0)
-FN:19,(anonymous_1)
-FNF:2
+FN:15,(anonymous_0)
+FN:31,(anonymous_1)
+FN:44,(anonymous_2)
+FN:55,(anonymous_3)
+FN:63,(anonymous_4)
+FN:67,(anonymous_5)
+FNF:6
 FNH:1
 FNDA:0,(anonymous_0)
-FNDA:1,(anonymous_1)
+FNDA:0,(anonymous_1)
+FNDA:0,(anonymous_2)
+FNDA:1,(anonymous_3)
+FNDA:0,(anonymous_4)
+FNDA:0,(anonymous_5)
 DA:1,1
 DA:2,1
 DA:3,1
 DA:4,1
-DA:6,1
-DA:8,1
+DA:5,1
+DA:7,1
 DA:10,1
-DA:11,1
-DA:16,1
-DA:17,1
-DA:19,1
-DA:20,1
-DA:23,1
-LF:13
-LH:13
-BRDA:8,0,0,1
-BRDA:8,0,1,1
+DA:16,0
+DA:17,0
+DA:18,0
+DA:26,1
+DA:32,0
+DA:33,0
+DA:34,0
+DA:42,1
+DA:44,1
+DA:46,1
+DA:47,1
+DA:52,1
+DA:53,1
+DA:55,1
+DA:56,1
+DA:60,1
+DA:63,1
+DA:64,0
+DA:67,1
+DA:68,0
+DA:71,1
+LF:28
+LH:20
+BRDA:44,0,0,1
+BRDA:44,0,1,1
 BRF:2
 BRH:2
 end_of_record
diff --git a/package-lock.json b/package-lock.json
index 2a587ca..5d08ae6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,6 +12,7 @@
         "cors": "^2.8.6",
         "dotenv": "^17.3.1",
         "express": "^5.2.1",
+        "express-rate-limit": "^8.2.1",
         "helmet": "^8.1.0",
         "joi": "^18.0.2",
         "mongoose": "^9.2.3",
@@ -55,6 +56,7 @@
       "integrity": "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.29.0",
         "@babel/generator": "^7.29.0",
@@ -1470,6 +1472,7 @@
       "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -1838,6 +1841,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.9.0",
         "caniuse-lite": "^1.0.30001759",
@@ -2518,6 +2522,7 @@
       "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.2.0",
         "@eslint-community/regexpp": "^4.6.1",
@@ -2784,6 +2789,7 @@
       "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
       "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "accepts": "^2.0.0",
         "body-parser": "^2.2.1",
@@ -2822,6 +2828,24 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/express-rate-limit": {
+      "version": "8.2.1",
+      "resolved": "https://registry.npmmirror.com/express-rate-limit/-/express-rate-limit-8.2.1.tgz",
+      "integrity": "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==",
+      "license": "MIT",
+      "dependencies": {
+        "ip-address": "10.0.1"
+      },
+      "engines": {
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/express-rate-limit"
+      },
+      "peerDependencies": {
+        "express": ">= 4.11"
+      }
+    },
     "node_modules/fast-deep-equal": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
@@ -3443,6 +3467,15 @@
       "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
       "license": "ISC"
     },
+    "node_modules/ip-address": {
+      "version": "10.0.1",
+      "resolved": "https://registry.npmmirror.com/ip-address/-/ip-address-10.0.1.tgz",
+      "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
     "node_modules/ipaddr.js": {
       "version": "1.9.1",
       "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
diff --git a/package.json b/package.json
index 81064c4..28f3e4a 100644
--- a/package.json
+++ b/package.json
@@ -28,15 +28,16 @@
     "cors": "^2.8.6",
     "dotenv": "^17.3.1",
     "express": "^5.2.1",
+    "express-rate-limit": "^8.2.1",
     "helmet": "^8.1.0",
     "joi": "^18.0.2",
     "mongoose": "^9.2.3",
     "morgan": "^1.10.1"
   },
   "devDependencies": {
-    "nodemon": "^3.1.14",
     "eslint": "^8.57.0",
     "jest": "^29.7.0",
+    "nodemon": "^3.1.14",
     "supertest": "^6.3.4"
   }
 }
diff --git a/src/app.js b/src/app.js
index a2ab2ca..9767503 100644
--- a/src/app.js
+++ b/src/app.js
@@ -2,9 +2,45 @@ const express = require('express');
 const cors = require('cors');
 const helmet = require('helmet');
 const morgan = require('morgan');
+const rateLimit = require('express-rate-limit');
 
 const app = express();
 
+// Global rate limiter: 100 requests per 15 minutes per IP
+const globalLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 100, // limit each IP to 100 requests per windowMs
+  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
+  legacyHeaders: false, // Disable the `X-RateLimit-*` headers
+  handler: (req, res) => {
+    const retryAfter = Math.ceil(req.rateLimit.resetTime / 1000);
+    res.set('Retry-After', retryAfter);
+    res.status(429).json({
+      message: 'Too many requests, please try again later.',
+      retryAfter: retryAfter
+    });
+  }
+});
+
+// Stricter auth rate limiter: 10 requests per 15 minutes
+const authLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 10, // limit each IP to 10 requests per windowMs
+  standardHeaders: true,
+  legacyHeaders: false,
+  handler: (req, res) => {
+    const retryAfter = Math.ceil(req.rateLimit.resetTime / 1000);
+    res.set('Retry-After', retryAfter);
+    res.status(429).json({
+      message: 'Too many authentication attempts, please try again later.',
+      retryAfter: retryAfter
+    });
+  }
+});
+
+// Apply global rate limiter to all requests
+app.use(globalLimiter);
+
 const allowedOrigins = process.env.ALLOWED_ORIGINS?.split(',').map(origin => origin.trim()) || [];
 
 app.use(express.json());
@@ -20,4 +56,16 @@ app.get('/api/health', (req, res) => {
   res.status(200).json({ status: 'ok' });
 });
 
+// Apply stricter rate limiter to auth routes
+app.use('/api/auth', authLimiter);
+
+// Example auth routes (for testing rate limiting)
+app.post('/api/auth/login', (req, res) => {
+  res.status(200).json({ message: 'Login endpoint' });
+});
+
+app.post('/api/auth/register', (req, res) => {
+  res.status(200).json({ message: 'Register endpoint' });
+});
+
 module.exports = app;
\ No newline at end of file

From 267214191d2900939b17ac8164838f4d22a687b2 Mon Sep 17 00:00:00 2001
From: Nwokolo Chukwuemeka Paul <nwokolopaul979@gmail.com>
Date: Wed, 4 Mar 2026 19:18:04 +0100
Subject: [PATCH 2/2] Update package.json

Updated the package.json for the files
---
 package.json | 53 +++++++++++++++++++++++++++++++++++++++++++++++++---
 1 file changed, 50 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index 8722647..2ad7f89 100644
--- a/package.json
+++ b/package.json
@@ -39,10 +39,57 @@
     "nodemailer": "^8.0.1"
   },
   "devDependencies": {
-    "eslint": "^8.57.0",
-    "jest": "^29.7.0",
+    "@eslint/js": "^9.39.3",
+    "eslint": "^9.39.3",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-node": "^11.1.0",
+    "globals": "^17.4.0",
+    "jest": "^30.2.0",
     "nodemon": "^3.1.14",
-    "supertest": "^6.3.4"
+    "prettier": "^3.8.1",
+    "supertest": "^7.2.2"
+  }
+}{
+  "name": "api-fox",
+  "version": "1.0.0",
+  "description": "StellarAid Backend is the server-side API powering the StellarAid crowdfunding platform — a blockchain‑enabled system built on the Stellar network to support transparent, secure, and efficient fundraising for social impact initiatives.",
+  "main": "index.js",
+  "scripts": {
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "lint": "eslint src/",
+    "lint:fix": "eslint src/ --fix",
+    "format": "prettier --write \"src/**/*.{js,json,md}\"",
+    "build": "echo \"No build required for Node.js project\"",
+    "dev": "nodemon src/server.js",
+    "start": "node src/server.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SudiptaPaul-31/api-fox.git"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "type": "commonjs",
+  "bugs": {
+    "url": "https://github.com/SudiptaPaul-31/api-fox/issues"
+  },
+  "homepage": "https://github.com/SudiptaPaul-31/api-fox#readme",
+  "dependencies": {
+    "bcryptjs": "^3.0.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.3.1",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.2.1",
+    "helmet": "^8.1.0",
+    "joi": "^18.0.2",
+    "jsonwebtoken": "^9.0.3",
+    "mongoose": "^9.2.3",
+    "morgan": "^1.10.1",
+    "nodemailer": "^8.0.1"
+  },
+  "devDependencies": {
     "@eslint/js": "^9.39.3",
     "eslint": "^9.39.3",
     "eslint-config-prettier": "^10.1.8",