Add rate limit configs

packages/strapi-plugin-users-permissions/config/policies/rateLimit.js

@@ -3,10 +3,10 @@ const RateLimit = require('koa2-ratelimit').RateLimit;
 module.exports = async (ctx, next) => {
   const message = ctx.request.admin ? [{ messages: [{ id: 'Auth.form.error.ratelimit' }] }] : 'Too many attempts, please try again in a minute.';
 
-  return RateLimit.middleware({
+  return RateLimit.middleware(Object.assign({}, {
     interval: 1*60*1000,
     max: 5,
     prefixKey: `${ctx.request.url}:${ctx.request.ip}`,
     message
-  })(ctx, next);
+  }, strapi.plugins['users-permissions'].config.ratelimit))(ctx, next);
 };

packages/strapi-plugin-users-permissions/config/request.json

@@ -0,0 +1,6 @@
+{
+  "ratelimit": {
+    "interval": 60000,
+    "max": 10
+  }
+}