Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to define a rate limiting policy for Duende IdentityServer endpoints? #1525

Open
merijndejonge opened this issue Dec 21, 2024 · 0 comments

Comments

@merijndejonge
Copy link

Which version of Duende IdentityServer are you using?
7.0.8+f28cac9
Which version of .NET are you using?
8.0.10

I'm trying to rate limit the different endpoints of Duende Identity Server using the Microsoft.AspNetCore.RateLimiting middleware.
According to the docs (https://learn.microsoft.com/en-us/aspnet/core/performance/rate-limit?view=aspnetcore-8.0 and https://blog.maartenballiauw.be/post/2022/09/26/aspnet-core-rate-limiting-middleware.html) there are two ways to add rate limiting: by setting a rate limit globally, or by setting rate limits by policies.

Using the global approach works as a charm, but I want to have more fine-grained control over rate limits in different parts of my system. Therefore, I prefer rate limit policies over global rate limits.

However, I have now idea how to get such policies applied to the default endpoints of Duende IdentityServer.

Any recommendation?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant