About CORS bypass, APIs, and rate limiting

Ask us anything
,
1

Hello everyone in this great community!

I use the REST API plugin by setting the CORS bypass to true to call endpoints that have no authentication but rate limiting. If I don’t do this, I get a CORS related error.

I imagine that the endpoint server controls the rate limiting from the IP of the calls. Is this how it works?

So, when I go through the Weweb server with the CORS bypass setting, do all my users’ calls to the endpoint have the same IP address? At the risk of reaching rate limitation too quickly?

Or does each user have their own rate limitation for calls to that same endpoint?

I’m not sure I have a good handle on what I’m doing! :wink:

2

I think it’s the IP of that server. You should route it through your own backend, or just set up the CORS properly. Rate limits usually apply to credentials, not so often to IP addresses.