skip general rate limiter on dev mode

server/src/api/middleware/rateLimiter.ts

@@ -1,12 +1,14 @@
 import rateLimit from "express-rate-limit";
 
-export const generalApiLimiter = rateLimit({
-	windowMs: 60 * 1000,
-	limit: 600,
-	standardHeaders: true,
-	legacyHeaders: false,
-	ipv6Subnet: 64,
-});
+export const generalApiLimiter = (devMode: boolean) =>
+	rateLimit({
+		windowMs: 60 * 1000,
+		limit: 600,
+		standardHeaders: true,
+		legacyHeaders: false,
+		ipv6Subnet: 64,
+		skip: () => devMode,
+	});
 
 export const authApiLimiter = rateLimit({
 	windowMs: 60 * 1000,

server/src/app.ts

@@ -38,7 +38,8 @@ export const createApp = ({
 	};
 	const publicStatusPageCorsOrigin = createStatusPageCorsOrigin(allowedOrigin, services.statusPagesRepository);
 
-	app.use(generalApiLimiter);
+	const devMode = envSettings.nodeEnv === "development";
+	app.use(generalApiLimiter(devMode));
 
 	app.use((req, res, next) => {
 		const corsOptions = isPublicStatusPageApiPath(req.method, req.path)