Open-event-server: Limit the number of emails an account can sent out in a given timeframe

[mariobehling]

One account yesterday tried a password reset requesting a reset 1000 times.

Please implement a threshhold for account resets and propose a threshhold for other emails in a certain time frame. Open relevant issues for this.

A threshhold for an account reset email should be 3 times per hour. After that the user should receive a message: "You have reached the threshhold for this action. Please try again in one hour."

[shreyanshdwivedi]

I'll be working on this

[mariobehling]

Thank you. It is related to this frontend issue: https://github.com/fossasia/open-event-frontend/issues/3128 and https://github.com/fossasia/open-event-frontend/issues/3129.

[CosmicCoder96]

@shreyanshdwivedi https://github.com/fossasia/open-event-server/issues/6034

[niranjan94]

Also, we need rate limiting on all of the API endpoints to prevent misuse. @shreyanshdwivedi please create an issue for it with the solution.