Laravel API Rate Limiting: Default and Custom Throttle

An example from our own source to limit a public API endpoint to 10 attempts per IP/user.

- - - - -
Support the channel by checking out my products:

- - - - -
Other places to follow:

[mohamedalkomy]

It's the first time to know about throttle and RateLimiter, Thanks for your effort.❤❤❤

[LHKleyn]

You can do return Limit::none() to turn off ratelimiter, I believe if you remove the code it starts looking at cache settings for rate limit

[dangtu-work]

If I want to customize the error message, how could I do that?

[BlueJDev]

One thing I'm currently working on is limiting non registered users to use a demo function on my site to avoid high costs. I personally don't like the by IP match as many people have VPNs so can simply change the IP address. Any advice on a better way? (Without external fingerprint services as they cost a small fortune monthly) maybe laravel has one already?
I'm currently building my own fingerprinter in laravel to do this but it's tricky! I'm thinking of taking a lot of browser identifiable information and hashing it for obfuscation and then matching it to saved IDs to match upto something like 70% of the data.
The only thing I can think to avoid doing this is just limiting use to registered users but worry (as many people do) that I will lose potential users as they can't try it before signing up...

[nasritn]

Thanks ❤
What's the default value of by()
If we dont use ->by($user->id) or ip

[SanderCokart]

How about the rate limit method of throttle:something, 60 I believe is the syntax

[ystrength]

The ->middleware(middleware: 'throttle:cancelled''); example didn't work, but this did: Route::middleware(['throttle:cancelled'])->get('/cancelled', ....

[_timestamp]

That's the proof that very few people reads the docs 😅

[MYodN-ru]

I think it's better to use nginx rate limiter

[jonwinder]

I am working two jobs right now making 160k a year and today i quit both of them. I have a feasible idea for an application and enough money in the bank to deelop it and still afford all my bills. Taking a huge risk, but i want to work for myself. I realized that i do not want to support a company that is using super outdated tecchnologies as part of their foundational stack. Someone can easily create a better appllication in 2023.