class Rack::Attack # Rate limits for the API throttle('api', limit: 150, period: 5.minutes) do |req| req.ip if req.path.match(/\A\/api\//) end self.throttled_response = lambda do |env| now = Time.now.utc match_data = env['rack.attack.match_data'] headers = { 'X-RateLimit-Limit' => match_data[:limit].to_s, 'X-RateLimit-Remaining' => '0', 'X-RateLimit-Reset' => (now + (match_data[:period] - now.to_i % match_data[:period])).iso8601(6) } [429, headers, [{ error: 'Throttled' }.to_json]] end end