Rate limiting in Laravel - Mini Project: Build & Apply

Implementing Rate Limiting in Laravel

📖 Scenario: You are building a simple API in Laravel that should limit how many requests a user can make in a short time. This helps protect your app from too many requests that could slow it down or cause errors.

🎯 Goal: Build a Laravel route with rate limiting that allows only 5 requests per minute per user IP address.

📋 What You'll Learn

Create a route in routes/web.php named /api/data

Define a rate limiter named api_limit allowing 5 requests per minute

Apply the api_limit rate limiter to the /api/data route

Return a JSON response with {"message": "Request successful"} when accessed

💡 Why This Matters

🌍 Real World

Rate limiting is used in real APIs to prevent abuse and keep services running smoothly by limiting how often users can make requests.

💼 Career

Understanding rate limiting is important for backend developers and API designers to build secure and reliable web services.

1

Create the API route

In routes/web.php, create a GET route named /api/data that returns a JSON response with {"message": "Request successful"}.

Laravel

<?php

// Your code here

Need a hint?

Use Route::get with a closure that returns response()->json().

2

Define the rate limiter

In app/Providers/RouteServiceProvider.php, inside the boot method, define a rate limiter named api_limit that allows 5 requests per minute per IP address using RateLimiter::for.

Laravel

json(['message' => 'Request successful']);
});

// Your code here

Need a hint?

Use RateLimiter::for with a closure that returns Limit::perMinute(5)->by($request->ip()).

3

Apply the rate limiter to the route

In routes/web.php, apply the api_limit rate limiter to the /api/data route using the throttle middleware.

Laravel

by($request->ip());
        });
    }
}

use Illuminate\Support\Facades\Route;

// Add throttle middleware to the route below
Route::get('/api/data', function () {
    return response()->json(['message' => 'Request successful']);
});

Need a hint?

Use Route::middleware('throttle:api_limit')->get(...) to apply the rate limiter.

4

Complete and test the rate limiting setup

Ensure the full code includes the RateLimiter::for definition in RouteServiceProvider and the /api/data route with the throttle:api_limit middleware applied. This completes the rate limiting setup.

Laravel

by($request->ip());
        });
    }
}

use Illuminate\Support\Facades\Route;

Route::middleware('throttle:api_limit')->get('/api/data', function () {
    return response()->json(['message' => 'Request successful']);
});

// Your code here if needed

Need a hint?

Make sure the Limit class is imported and the rate limiter and route are correctly set.