Introduce granular rate limiting across various API categories to improve security and prevent abuse. This includes protection against brute-force attacks on authentication and SMS endpoints, as well as resource management for public, customer, wallet, and staff APIs. - Add `auth` rate limiter (5 requests/min per IP) - Add `sms` rate limiter (1 request/min per phone/IP) - Add `public` rate limiter (30 requests/min per IP) - Add `customer` rate limiter (60 requests/min per user) - Add `wallet` rate limiter (30 requests/min per user) - Add `staff` rate limiter (60 requests/min per user) - Apply middleware to corresponding routes in `api.php` - Remove obsolete `test_pdf_generation.php` script |
||
|---|---|---|
| .. | ||
| api.php | ||
| console.php | ||
| web.php | ||