refactor: migrate rate limiting from express-rate-limit to custom Upstash Redis implementation and reorganize configuration files

Author: rishhbh

README.md

@@ -98,7 +98,7 @@ Whether you're summarizing a research paper, technical documentation, blog post,
 * Strict payload validation using Zod schemas
 * Secure password hashing with bcrypt
 * Middleware-based authorization
-* Rate limiting on auth and LLM routes via express-rate-limit
+* Rate limiting on auth and LLM routes via Upstash Redis
 
 ### Infrastructure
 
@@ -281,7 +281,7 @@ pdf-parse mammoth
 * AWS EC2
 * GitHub Actions
 * Redis
-* express-rate-limit
+* @upstash/ratelimit
 
 ### AI Models
 

server/README.md

@@ -40,9 +40,9 @@ server/
 │   └── scrape.js           # URL → scrape → summarize (with Redis caching)
 ├── middlewares/
 │   ├── authMiddleware.js   # protectRoute (JWT verification)
-│   ├── authRateLimit.js    # Rate limiting for auth routes (Upstash Redis)
 │   ├── errorHandler.js     # Global error handler
-│   └── llmRateLimit.js     # Rate limiting for LLM/Ingestion routes
+│   ├── rateLimiter.js      # Rate limit middleware wrapper
+│   └── redisRateLimit.js   # Upstash Redis instances for auth & ai limiters
 ├── models/
 │   └── User.js             # Mongoose user schema
 ├── routes/

server/package-lock.json

@@ -16,6 +16,7 @@
     "@cerebras/cerebras_cloud_sdk": "^1.64.1",
     "@google/genai": "^2.6.0",
     "@mozilla/readability": "^0.6.0",
+    "@upstash/ratelimit": "^2.0.8",
     "@upstash/redis": "^1.38.0",
     "axios": "^1.17.0",
     "bcrypt": "^6.0.0",
@@ -24,7 +25,6 @@
     "crypto": "^1.0.1",
     "dotenv": "^17.4.2",
     "express": "^5.2.1",
-    "express-rate-limit": "^8.5.2",
     "https": "^1.0.0",
     "jsdom": "^29.1.1",
     "jsonwebtoken": "^9.0.3",

server/package.json

@@ -5,4 +5,4 @@ const redis = new Redis({
   token: process.env.UPSTASH_REDIS_REST_TOKEN,
 });
 
-export default redis;
+export default redis;

server/src/config/utils.js server/src/config/generateJWT.jsserver/src/config/utils.js renamed to server/src/config/generateJWT.js

@@ -1,7 +1,7 @@
 import bcrypt from "bcrypt";
 import jwt from "jsonwebtoken";
 import User from "../models/User.js";
-import { generateToken } from "../config/utils.js";
+import { generateToken } from "../config/generateJWT.js";
 import { registerSchema, loginSchema } from "../validators/auth.validator.js";
 
 export const registerUser = async (req, res, next) => {

server/src/services/redis.js server/src/config/redis.jsserver/src/services/redis.js renamed to server/src/config/redis.js

@@ -3,14 +3,15 @@ import geminiClient from "../config/llm/geminiClient.js";
 import cerebrasClient from "../config/llm/cerebrasClient.js";
 import extractText from "../services/document.js";
 import sarvamClient from "../config/llm/sarvamClient.js";
-import redis from "../services/redis.js";
+import redis from "../config/redis.js";
 import hashContent from "../utils/hashContent.js";
 import { streamingModels } from "../config/llm/streamingClients.js";
 import { streamAndCache } from "../utils/streamResponse.js";
 
 const summariseDoc = async (req, res, next) => {
   const { client } = req.body;
   const shouldStream = req.body.stream === "true" || req.body.stream === true;
+  
   const models = {
     gemma: gemmaClient,
     gemini: geminiClient,

server/src/controllers/auth.js

@@ -5,7 +5,7 @@ import geminiClient from "../config/llm/geminiClient.js";
 import gemmaClient from "../config/llm/gemmaClient.js";
 import cerebrasClient from "../config/llm/cerebrasClient.js";
 import sarvamClient from "../config/llm/sarvamClient.js";
-import redis from "../services/redis.js";
+import redis from "../config/redis.js";
 import { webSummarySchema } from "../validators/summary.validator.js";
 import { streamingModels } from "../config/llm/streamingClients.js";
 import { streamAndCache } from "../utils/streamResponse.js";