Aggressive bot detection with 429 errors AJAX Cart API

Online Store and Theme Development
21

@Zak, I’ve had a look at that shop and this is what I’m seeing:

  1. /add.js - Add product A to cart
  2. /change.js - Change quantity from 1 to 2
  3. /update - Update quantity from 1 to 2
  4. /change.js - Change quantity from 2 to 3
  5. /update - Update quantity from 2 to 3

It appears both the update and change endpoints are used at approximately the same time to make the same change/update to the cart, leading to 429 responses.