feat(api): ✨ Implement rate limiting

api/api/v1/accounts/familiar_followers/index.ts

@@ -9,6 +9,7 @@ import { User, db } from "@versia/kit/db";
 import type { Users } from "@versia/kit/tables";
 import { type InferSelectModel, sql } from "drizzle-orm";
 import { ApiError } from "~/classes/errors/api-error";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 const route = createRoute({
     method: "get",
@@ -26,6 +27,7 @@ const route = createRoute({
             scopes: ["read:follows"],
             permissions: [RolePermission.ManageOwnFollows],
         }),
+        rateLimit(5),
         qsQuery(),
     ] as const,
     request: {

api/api/v1/accounts/index.ts

@@ -8,6 +8,7 @@ import { and, eq, isNull } from "drizzle-orm";
 import ISO6391 from "iso-639-1";
 import { ApiError } from "~/classes/errors/api-error";
 import { config } from "~/config.ts";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 const schema = z.object({
     username: z.string().openapi({
@@ -55,6 +56,7 @@ const route = createRoute({
             scopes: ["write:accounts"],
             challenge: true,
         }),
+        rateLimit(5),
         jsonOrForm(),
     ] as const,
     request: {

api/api/v1/accounts/lookup/index.ts

@@ -7,6 +7,7 @@ import { Users } from "@versia/kit/tables";
 import { and, eq, isNull } from "drizzle-orm";
 import { ApiError } from "~/classes/errors/api-error";
 import { config } from "~/config.ts";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 const route = createRoute({
     method: "get",
@@ -19,6 +20,7 @@ const route = createRoute({
             auth: false,
             permissions: [RolePermission.Search],
         }),
+        rateLimit(5),
     ] as const,
     request: {
         query: z.object({

api/api/v1/accounts/relationships/index.ts

@@ -8,6 +8,7 @@ import {
 import { RolePermission } from "@versia/client/schemas";
 import { Relationship } from "@versia/kit/db";
 import { ApiError } from "~/classes/errors/api-error";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 const route = createRoute({
     method: "get",
@@ -20,6 +21,7 @@ const route = createRoute({
     },
     tags: ["Accounts"],
     middleware: [
+        rateLimit(10),
         auth({
             auth: true,
             scopes: ["read:follows"],

api/api/v1/accounts/search/index.ts

@@ -7,6 +7,7 @@ import { Users } from "@versia/kit/tables";
 import { eq, ilike, not, or, sql } from "drizzle-orm";
 import stringComparison from "string-comparison";
 import { ApiError } from "~/classes/errors/api-error";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 export const route = createRoute({
     method: "get",
@@ -18,6 +19,7 @@ export const route = createRoute({
     },
     tags: ["Accounts"],
     middleware: [
+        rateLimit(5),
         auth({
             auth: false,
             permissions: [RolePermission.Search, RolePermission.ViewAccounts],

api/api/v1/accounts/update_credentials/index.ts

@@ -10,6 +10,7 @@ import { and, eq, isNull } from "drizzle-orm";
 import { ApiError } from "~/classes/errors/api-error";
 import { contentToHtml } from "~/classes/functions/status";
 import { config } from "~/config.ts";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 const route = createRoute({
     method: "patch",
@@ -21,6 +22,7 @@ const route = createRoute({
     },
     tags: ["Accounts"],
     middleware: [
+        rateLimit(5),
         auth({
             auth: true,
             permissions: [RolePermission.ManageOwnAccount],

api/api/v1/apps/index.ts

@@ -7,6 +7,7 @@ import {
 } from "@versia/client/schemas";
 import { Application } from "@versia/kit/db";
 import { ApiError } from "~/classes/errors/api-error";
+import { rateLimit } from "~/middlewares/rate-limit";
 
 const route = createRoute({
     method: "post",
@@ -17,7 +18,7 @@ const route = createRoute({
         url: "https://docs.joinmastodon.org/methods/apps/#create",
     },
     tags: ["Apps"],
-    middleware: [jsonOrForm()],
+    middleware: [jsonOrForm(), rateLimit(4)],
     request: {
         body: {
             content: {

api/api/v1/emojis/index.ts

@@ -8,6 +8,7 @@ import { Emojis } from "@versia/kit/tables";
 import { and, eq, isNull, or } from "drizzle-orm";
 import { ApiError } from "~/classes/errors/api-error";
 import { config } from "~/config.ts";
+
 const schema = z.object({
     shortcode: CustomEmojiSchema.shape.shortcode,
     element: z