Laravel Rate Limiting: Protect Your Application

RateLimiter::for('api', function (Request $request) {
    return Limit::perMinute(60)->by($request->user()?->id ?: $request->ip());
});

RateLimiter::for('uploads', function (Request $request) {
    return Limit::perMinute(5)
        ->by($request->user()->id)
        ->response(fn() => response('Too many uploads!', 429));
});

Route::middleware(['throttle:api'])->group(function () {
    // Protected routes
});