add rate limiter for registration route

Author: TobMoeller

routes/routes.php

@@ -32,6 +32,7 @@
     }
 
     $limiter = config('fortify.limiters.login');
+    $registrationLimiter = config('fortify.limiters.registration');
     $twoFactorLimiter = config('fortify.limiters.two-factor');
     $verificationLimiter = config('fortify.limiters.verification', '6,1');
 
@@ -75,7 +76,10 @@
         }
 
         Route::post(RoutePath::for('register', '/register'), [RegisteredUserController::class, 'store'])
-            ->middleware(['guest:'.config('fortify.guard')])
+            ->middleware(array_filter([
+                'guest:'.config('fortify.guard'),
+                $registrationLimiter ? 'throttle:'.$registrationLimiter : null,
+            ]))
             ->name('register.store');
     }
 

stubs/FortifyServiceProvider.php

@@ -42,5 +42,9 @@ public function boot(): void
         RateLimiter::for('two-factor', function (Request $request) {
             return Limit::perMinute(5)->by($request->session()->get('login.id'));
         });
+
+        RateLimiter::for('registration', function (Request $request) {
+            return Limit::perMinute(5)->by($request->ip());
+        });
     }
 }

stubs/fortify.php

@@ -117,6 +117,7 @@
     'limiters' => [
         'login' => 'login',
         'two-factor' => 'two-factor',
+        'registration' => 'registration',
     ],
 
     /*