Disable rate limiting for health endpoints (#882)

DFE-Digital · Oct 30, 2023 · 6f3b56f · 6f3b56f
1 parent eeab13a
commit 6f3b56f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/TeachingRecordSystem/src/TeachingRecordSystem.Api/Program.cs b/TeachingRecordSystem/src/TeachingRecordSystem.Api/Program.cs
@@ -298,7 +298,9 @@ public static void Main(string[] args)
 
         if (env.IsProduction())
         {
-            app.UseRateLimiter();
+            // Apply rate limiting to authenticated endpoints
+            // (i.e. everywhere except health check, status endpoints etc.)
+            app.UseWhen(ctx => ctx.User.Identity?.IsAuthenticated == true, x => x.UseRateLimiter());
         }
 
         app.Use((ctx, next) =>