Merge pull request #34353 from officialasishkumar/fix-rate-limit-ipv6-key-generator

fix(backend-defaults): use ipKeyGenerator for rate limiter keys
This commit is contained in:
Fredrik Adelöw
2026-05-25 15:40:43 +02:00
committed by GitHub
3 changed files with 106 additions and 5 deletions
@@ -0,0 +1,5 @@
---
'@backstage/backend-defaults': patch
---
Fixed the built-in rate limiter throwing a validation error and refusing to start when `backend.rateLimit` is enabled. Requests are now keyed using the address normalization helper from `express-rate-limit`, which is required by newer versions of that library and ensures IPv6 clients are grouped by their address block rather than by individual address.