package limiter

import (
	"time"

	"golang.org/x/time/rate"
)

const (
	DefaultAuthInterval  = time.Second * 15 // average authentication errors per second
	DefaultAuthLimit     = 100              // authentication error burst rate limit
	DefaultLoginInterval = time.Minute      // average failed logins per second
	DefaultLoginLimit    = 10               // failed logins burst rate limit
)

// Auth limits the number of authentication errors from a single IP per time interval (every 15 seconds by default).
var Auth = NewLimit(rate.Every(DefaultAuthInterval), DefaultAuthLimit)

// Login limits the number of failed login attempts from a single IP per time interval (one per minute by default).
var Login = NewLimit(rate.Every(DefaultLoginInterval), DefaultLoginLimit)