Node.js · Middle · Question 43 of 75

Why add rate limiting to a login endpoint?

1To make logins faster
2Because browsers require it
✓Correct answer: To slow down brute-force and credential-stuffing attacks

Explanation

Limit attempts per IP and per account. With several server instances, keep the counters in a shared store like Redis.

Further reading

Test yourself

Take the Node.js · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.