From 852e0f5f5bc0b2530bcd4908ea5906d8e0570e9c Mon Sep 17 00:00:00 2001
From: HeagBoKaT <egordiki71@gmail.com>
Date: Fri, 26 Jun 2026 09:45:35 +0300
Subject: [PATCH] fix: rate limiter was blocking all /api/cats reads after 10
 requests
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

uploadLimiter now only applies to POST /api/cats (uploads), not GET
reads — previously users were getting 429 after ~10 page navigations.
Also remove duplicate file input in ProfilePage and cancel stale rAF
on route transition cleanup.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 client/src/App.tsx               | 3 ++-
 client/src/pages/ProfilePage.tsx | 1 -
 server/src/index.ts              | 6 +++++-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/client/src/App.tsx b/client/src/App.tsx
index 5639ec3..076f13b 100644
--- a/client/src/App.tsx
+++ b/client/src/App.tsx
@@ -33,10 +33,11 @@ function AnimatedRoutes() {
     if (el) {
       el.classList.remove('page-enter-active');
       el.classList.add('page-enter');
-      requestAnimationFrame(() => {
+      const rafId = requestAnimationFrame(() => {
         el.classList.remove('page-enter');
         el.classList.add('page-enter-active');
       });
+      return () => cancelAnimationFrame(rafId);
     }
   }, [location.pathname]);
 
diff --git a/client/src/pages/ProfilePage.tsx b/client/src/pages/ProfilePage.tsx
index 0fb9794..29ac0e1 100644
--- a/client/src/pages/ProfilePage.tsx
+++ b/client/src/pages/ProfilePage.tsx
@@ -268,7 +268,6 @@ export default function ProfilePage() {
             <div className="divider mb-4" />
 
             <div>
-              <input type="file" ref={fileInputRef} onChange={onFileChange} accept="image/*" className="hidden" />
               <Button
                 variant="outline"
                 onClick={() => fileInputRef.current?.click()}
diff --git a/server/src/index.ts b/server/src/index.ts
index dc09d9e..e29d39c 100644
--- a/server/src/index.ts
+++ b/server/src/index.ts
@@ -54,7 +54,11 @@ async function main() {
     standardHeaders: true,
     legacyHeaders: false,
   });
-  app.use('/api/cats', uploadLimiter);
+  // Rate-limit only cat uploads (POST), not reads
+  app.use('/api/cats', (req, _res, next) => {
+    if (req.method !== 'POST') return next();
+    return uploadLimiter(req, _res, next);
+  });
 
   app.use('/uploads', express.static(path.join(__dirname, '..', 'uploads')));
 
-- 
2.43.0