five-on-it / apps/api/src/rate-limits
apps/api/src/rate-limits
How often something may be done, counted in memory a window at a time per key: the OAuth server's limits (client registrations an hour per address, sign-ins a quarter of an hour per e-mail, token requests a minute per client: oauth.ts) and the new guest accounts an address may make in an hour (POST /auth/guest, FOI_GUEST_SIGNUPS). Each API process counts its own, and a restart forgets.