feat: add WebSocket rate limiting for enhanced security

src/main/java/com/thughari/randomchat/config/RateLimitConfig.java

@@ -0,0 +1,25 @@
+package com.thughari.randomchat.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.socket.server.standard.ServletServerContainerFactoryBean;
+
+@Configuration
+public class RateLimitConfig {
+
+    @Bean
+    public ServletServerContainerFactoryBean createWebSocketContainer() {
+        ServletServerContainerFactoryBean container = new ServletServerContainerFactoryBean();
+
+        // Set maximum message size to 64KB
+        container.setMaxTextMessageBufferSize(64 * 1024);
+
+        // Set maximum binary message size to 64KB
+        container.setMaxBinaryMessageBufferSize(64 * 1024);
+
+        // Set maximum number of sessions per remote address
+        container.setMaxSessionsPerRemote(2);
+
+        return container;
+    }
+}

src/main/resources/application-prod.properties

@@ -2,6 +2,11 @@ spring.application.name=RandomChat
 
 server.tomcat.threads.virtual.enabled=true
 
+# Rate limiting configuration
+spring.websocket.max-text-message-size=65536
+spring.websocket.max-binary-message-size=65536
+spring.websocket.max-sessions-per-remote=2
+
 twilio.account.sid = ${twilio.account.sid}
 twilio.auth.token = ${twilio.auth.token}