feat(throttling): add auth throttling and structured cooldown errors

2026-04-30 15:25:45 +03:30
parent 3152284cf3
commit 08e1793765
5 changed files with 338 additions and 1 deletions
--- a/config/settings/base.py
+++ b/config/settings/base.py
@@ -131,6 +131,14 @@ REST_FRAMEWORK = {
        "rest_framework.throttling.AnonRateThrottle",
        "rest_framework.throttling.UserRateThrottle",
    ],
+    "DEFAULT_THROTTLE_RATES": {
+        "anon": "60/min",
+        "user": "300/min",
+        "otp_send_burst": "3/10m",
+        "otp_send_sustained": "10/day",
+        "login_password": "5/10m",
+        "login_otp": "5/10m",
+    },
    "EXCEPTION_HANDLER": "core.exceptions.handlers.exception_handler",
 }