Think of good Rate-Limits

[SpraxDev]

Especially authentication routes should be protected by rate-limits, for example (but not limited to):

• Confirm and change of email addresses
• Login
• OAuth2.0 App Create/Edit/Image Upload/...
• Authorization page that gets presented to the user

Maybe even one big rate-limit on the whole page to stop behavior that is totally not friendly or a totally borked bot/crawler.

---

4c3d3c1e19a5a0c3cd9ce3f6728b8365f5a5d897