add rate limits to all public endpoints

packages/backend/src/server/api/endpoints/sw/register.ts

@@ -45,6 +45,12 @@ export const meta = {
 			},
 		},
 	},
+
+	// 2 calls per second
+	limit: {
+		duration: 1000,
+		max: 2,
+	},
 } as const;
 
 export const paramDef = {

packages/backend/src/server/api/endpoints/sw/show-registration.ts

@@ -34,6 +34,12 @@ export const meta = {
 			},
 		},
 	},
+
+	// 2 calls per second
+	limit: {
+		duration: 1000,
+		max: 2,
+	},
 } as const;
 
 export const paramDef = {

packages/backend/src/server/api/endpoints/sw/unregister.ts

@@ -15,6 +15,12 @@ export const meta = {
 	requireCredential: false,
 
 	description: 'Unregister from receiving push notifications.',
+
+	// 2 calls per second
+	limit: {
+		duration: 1000,
+		max: 2,
+	},
 } as const;
 
 export const paramDef = {

packages/backend/src/server/api/endpoints/sw/update-registration.ts

@@ -43,6 +43,12 @@ export const meta = {
 			id: ' b09d8066-8064-5613-efb6-0e963b21d012',
 		},
 	},
+
+	// 2 calls per second
+	limit: {
+		duration: 1000,
+		max: 2,
+	},
 } as const;
 
 export const paramDef = {