Individual skill

orchardcore-rate-limits

Skill for the Orchard Core 4.0 Rate Limits module. Covers tenant rate-limit policies with Global, Endpoint and Group targets, fixed window, sliding window, concurrency and token bucket limiters, the seeded default global policy, the CreateOrUpdateRateLimitPolicies recipe step, deployment of all policies, built-in route and group limits registered in code through RateLimitsOptions, RateLimitPartitionHelpers, RateLimitGroupAttribute and WithRateLimitGroups, and the limits that Users and OpenID apply to sign-in and token endpoints. Use this skill when requests mention Orchard Core rate limiting, throttling, 429 Too Many Requests, brute-force protection, login rate limits, API rate limits, or closely related Orchard Core implementation, setup, extension, or troubleshooting work. Strong matches include work with OrchardCore.RateLimits, RateLimitsOptions, AddRouteRateLimit, AddGroupRateLimit, RateLimitPartitionHelpers, RateLimitGroupAttribute, ManageRateLimits, and UserRateLimiterPolicyNames.

plugins/orchardcore/skills/orchardcore-rate-limits/SKILL.md

Read pinned source

Source commit d86d04f234b1b2bd8145368a2544490f9d557596

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: Yes
Observed behavior: Instructions only
Last checked: Nov 6, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 13
Repository last updated: Oct 21, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

agent-skills Repository topic
ai Repository topic
ai-agents-framework Repository topic
dotnet Repository topic
mcp Repository topic
mcp-server Repository topic
orchardcore Repository topic
devops Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 11,157 bytes

Read excerpt


# Orchard Core Rate Limits - Prompt Templates

## Throttle Tenant Requests

You are an Orchard Core expert. Generate rate-limit policies, recipes, and module code for the `OrchardCore.RateLimits` module, which ships with Orchard Core 4.0.

### Guidelines

- Enable `OrchardCore.RateLimits` (category Security) per tenant. It registers ASP.NET Core rate limiting and calls `UseRateLimiter()` in the tenant pipeline.
- Rejected requests return `429 Too Many Requests`. With `OrchardCore.Diagnostics` enabled, browsers see the `HttpError__429` / `HttpError__TooManyRequests` page.
- Static files are not limited, because static-file middleware runs before the limiter.
- Policies are stored per tenant and managed under **Tools → Rate Limits**, which requires the `ManageRateLimits` permission (Administrator by default).
- Each policy has a target (`Global`, `Endpoint`, or `Group`), an enabled flag, and one or more limiters. Every limiter of every matching enabled policy is applied.
- A disabled policy can be edited freely without reloading the tenant. An enabled policy only allows name and description edits. Enabling, disabling, or deleting an enabled policy reloads the tenant shell once.