trails/openspec/specs/rate-limiting/spec.md at 4e2bfb0bbe9ab177fdb04b822a6d29ed76121bb4

Ullrich Schäfer 0b9b99984e Fix all OpenSpec validation failures (36/36 passing)

- Add ## Purpose sections and convert delta headers to ## Requirements
  on all 25 specs
- Add SHALL keywords to requirements missing them (gpx-import,
  planner-session, planner-journal-handoff)
- Convert prose GPX format section to proper scenarios (no-go-areas)
- Create specs/ delta files for 7 changes that were missing them
  (activity-photos, local-dev-stack, multi-day-routes, route-discovery,
  route-sharing, visual-redesign, waypoint-notes)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 22:17:52 +02:00

681 B

Raw Blame History

Purpose

Request rate limiting for Planner session creation and BRouter API calls to prevent abuse.

Requirements

Requirement: Session creation rate limit

The Planner SHALL limit session creation to 10 per IP per hour.

Scenario: Rate limit exceeded

WHEN an IP creates more than 10 sessions in one hour
THEN the server responds with 429 Too Many Requests

Requirement: BRouter call rate limit

The Planner SHALL limit route computations to 60 per session per hour.

Scenario: Routing rate limit exceeded

WHEN a session exceeds 60 BRouter calls in one hour
THEN the server responds with 429 and the client shows a "slow down" message

681 B Raw Blame History