From e0f16e9539bb9dc5d246409a805a305e5cbbd496 Mon Sep 17 00:00:00 2001
From: Alfred Nutile <365385+alnutile@users.noreply.github.com>
Date: Wed, 18 Jun 2025 09:19:33 -0400
Subject: [PATCH] feat(core): set custom API rate limit (#5984)

---
 app/Providers/RouteServiceProvider.php | 2 +-
 config/api.php                         | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100644 config/api.php

diff --git a/app/Providers/RouteServiceProvider.php b/app/Providers/RouteServiceProvider.php
index c85960746..d1fccf416 100644
--- a/app/Providers/RouteServiceProvider.php
+++ b/app/Providers/RouteServiceProvider.php
@@ -49,7 +49,7 @@ class RouteServiceProvider extends ServiceProvider
                 return Limit::perMinute(1000)->by($request->user()?->id ?: $request->ip());
             }
 
-            return Limit::perMinute(200)->by($request->user()?->id ?: $request->ip());
+            return Limit::perMinute(config('api.throttle'))->by($request->user()?->id ?: $request->ip());
         });
         RateLimiter::for('5', function (Request $request) {
             return Limit::perMinute(5)->by($request->user()?->id ?: $request->ip());
diff --git a/config/api.php b/config/api.php
new file mode 100644
index 000000000..72d50f4ff
--- /dev/null
+++ b/config/api.php
@@ -0,0 +1,5 @@
+<?php
+
+return [
+    'throttle' => env('API_THROTTLE', 200),
+];