rate limit option

Author: lukeholder

src/controllers/CartController.php

@@ -19,6 +19,7 @@
 use craft\elements\User;
 use craft\errors\ElementNotFoundException;
 use craft\errors\MissingComponentException;
+use craft\helpers\App;
 use craft\helpers\Json;
 use craft\helpers\StringHelper;
 use craft\helpers\UrlHelper;
@@ -95,7 +96,7 @@ public function behaviors(): array
                             'cart-by-number' => [
                                 'class' => RateLimit::class,
                                 'limit' => 1,
-                                'window' => 1,
+                                'window' => (float)App::env('CRAFT_COMMERCE_CART_RATE_LIMIT_WINDOW') ?: 0.5,
                                 // Only apply rate limiting when a cart number is explicitly passed
                                 'active' => function(Context $context, $rateLimitId) {
                                     return $context->request->getBodyParam('number') || $context->request->getQueryParam('number');