Merge pull request #8063 from cakephp/5.next-rate-limit

markstory · web-flow · commit eaa88f072924 · 2025-12-30T23:01:14.000-05:00
Add RateLimit middleware docs.
diff --git a/en/appendices/5-3-migration-guide.rst b/en/appendices/5-3-migration-guide.rst
@@ -151,6 +151,15 @@ Error
   ``Debugger.editorBasePath`` Configure value if defined. This improves
   debugging workflows within containerized environments.
 
+Http
+----
+
+- The new ``RateLimitMiddleware`` provides configurable rate limiting for your
+  application to protect against abuse and ensure fair usage of resources. It
+  supports multiple identification strategies (IP, user, route, API key),
+  different rate limiting algorithms (sliding window, fixed window, token bucket),
+  and advanced features like custom identifiers, request costs, and dynamic limits.
+
 I18n
 ----
 
diff --git a/en/controllers/middleware.rst b/en/controllers/middleware.rst
@@ -57,6 +57,9 @@ CakePHP provides several middleware to handle common tasks in web applications:
 * :doc:`Cake\Http\Middleware\SecurityHeadersMiddleware </security/security-headers>`
   makes it possible to add security related headers like ``X-Frame-Options`` to
   responses.
+* :doc:`Cake\Http\Middleware\RateLimitMiddleware </controllers/middleware/rate-limit>`
+  provides configurable rate limiting to protect against abuse and ensure fair
+  usage of resources.
 
 .. _using-middleware:
 
diff --git a/en/controllers/middleware/rate-limit.rst b/en/controllers/middleware/rate-limit.rst
