Return 429 if rate limit is triggered

espoon-voltti · Nov 12, 2024 · f48523f · f48523f
1 parent 2ea67e1
commit f48523f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/apigw/src/enduser/routes/auth-weak-login.ts b/apigw/src/enduser/routes/auth-weak-login.ts
@@ -31,7 +31,10 @@ export const authWeakLogin = (redis: RedisClient) =>
         GET: true, // return previous value
         NX: true // only set if key doesn't exist
       })
-      if (previous) throw new Error('Login rate limit for user triggered')
+      if (previous) {
+        res.sendStatus(429)
+        return
+      }
 
       const { id } = await citizenWeakLogin(body)
       const user: EvakaSessionUser = {