feat: add rate limiting middleware to auth endpoints
#933 · Rust · ★ 761 · Apache-2.0 · updated 8d ago
Problem No HTTP-level rate limiting exists. Auth endpoints (login, token exchange, introspect) are unbounded. The only throttling is domain-level password reset token counting. Acceptance Criteria Rate limiting middleware applied to authentication endpoints: POST…