SShortSingh.
Back to feed

Why Notifio rates-limits by licence token, not IP address

0
·1 views

Notifio is a desktop app that monitors rental listing pages and triggers server-side email alerts when new properties appear. The developer chose to rate-limit API requests by licence token rather than IP address, because multiple users in shared student housing or university networks often share a single IP. Under an IP-based limit, all housemates would compete for the same request budget, meaning legitimate users could have their alerts silently dropped. Using per-licence keys ensures every paying customer gets an independent allowance, which also aligns with what the rate limit is actually meant to control. The developer also namespaced rate-limit keys per endpoint to prevent licence validation calls from consuming the budget meant for notification delivery.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Iraqi Developer Builds Free Research Portal Offering Access to 250 Million Papers

Ehsan, a developer from Baghdad, Iraq, created ScholarAI Pro to address the high cost of academic papers, which can reach $35 each — roughly a month's salary in Iraq. The platform provides free, login-free access to over 250 million research papers sourced through the OpenAlex and Semantic Scholar APIs. It also offers AI-generated summaries and direct PDF downloads where available. Built on Next.js 14 and hosted on Vercel, the site has attracted users primarily from the US, Germany, Iraq, and Canada since launch. Ehsan is seeking feedback from researchers and students on how to improve the platform further.

0
ProgrammingDEV Community ·

Developer Creates Word Cipher Using ASCII Code Products, Encodes Linus Torvalds Quote

A developer shared a cryptographic puzzle on DEV Community where each word in a sentence is replaced by the product of its letters' ASCII values. The encoded sentence turned out to be 'Linus doesn't want his Linux to be called GNU/Linux,' a nod to the longstanding debate between Torvalds and Stallman over naming. The slash in GNU/Linux was represented as actual mathematical division, making that word appear as a small decimal fraction. Solvers could deduce word lengths from digit counts and identify letters through ratios between encoded values. The developer also shared a short Python snippet to generate such ciphers and suggested ways to make future puzzles harder to crack.

0
ProgrammingDEV Community ·

Dev Team Rebuilds AI App Backend in 48 Hours After API Key Theft by Bots

The team behind AI mentor KODA suffered an overnight credential breach after their API key was left exposed in frontend JavaScript code, allowing bots to drain their credits. Within 48 hours, they migrated the key to a Cloudflare Worker, a serverless proxy that keeps the key hidden from the browser and adds automatic AI model fallback. Chat history was also moved from browser-local storage to a Supabase cloud database, meaning user conversations now sync across devices and sessions. Row Level Security was implemented at the database level to ensure users can only access their own chat data. The team also automated a referral and ambassador program using database triggers, all built and deployed from a budget Android smartphone.

0
ProgrammingDEV Community ·

Developer open-sources Astro SEO Theme with perfect 100/100 Lighthouse score

A developer has released Astro SEO Theme, a free open-source website template built with Astro, Tailwind CSS v4, and React, aimed at B2B SaaS companies and startups. The theme achieves a perfect 100/100 Lighthouse score across performance, accessibility, best practices, and SEO by shipping zero client-side JavaScript by default. It includes enterprise-grade SEO features such as automatic hreflang tags, JSON-LD structured data, canonical URLs, and auto-generated sitemaps out of the box. The template also supports multilingual routing with English and Spanish implementations, author E-E-A-T profiles, and a strict Content Security Policy configured for Vercel deployments. Developers can scaffold a new project instantly via the Astro CLI, with a live demo available at astro-seo-theme.vercel.app.

Why Notifio rates-limits by licence token, not IP address · ShortSingh