Description
Prevent abuse by limiting the number of notifications that can be sent within a configurable time window.
Tasks
Add rate limiter middleware.
Configure limits per user or API key.
Return informative error responses.
Record rate limit events.
Acceptance Criteria
Excess requests are blocked.
Limits are configurable.
Existing users remain unaffected below thresholds.
Description
Prevent abuse by limiting the number of notifications that can be sent within a configurable time window.
Tasks
Add rate limiter middleware.
Configure limits per user or API key.
Return informative error responses.
Record rate limit events.
Acceptance Criteria
Excess requests are blocked.
Limits are configurable.
Existing users remain unaffected below thresholds.