π Issue Summary
Implement IP and API token rate limiting to protect proof generator endpoints from CPU exhaustion attacks.
β Problem or Motivation
Unthrottled POST requests to /generate-proof can crash service CPU resources completely.
π‘ Proposed Solution
- Integrate express-rate-limit and redis-rate-limiter.
- Enforce limit of 10 proof generation requests per minute per client IP.
- Return HTTP 429 Too Many Requests with Retry-After headers.
π§© Affected Areas
β
Checklist
π Issue Summary
Implement IP and API token rate limiting to protect proof generator endpoints from CPU exhaustion attacks.
β Problem or Motivation
Unthrottled POST requests to /generate-proof can crash service CPU resources completely.
π‘ Proposed Solution
π§© Affected Areas
zk-proof-service/server.js)β Checklist