Limit the number of emails an account can sent out in a given timeframe

[mariobehling]

One account yesterday tried a password reset requesting a reset 1000 times.

Please implement a threshhold for account resets and propose a threshhold for other emails in a certain time frame. Open relevant issues for this.

A threshhold for an account reset email should be 3 times per hour. After that the user should receive a message: "You have reached the threshhold for this action. Please try again in one hour."

[shreyanshdwivedi]

I'll be working on this

[mariobehling]

Thank you. It is related to this frontend issue: fossasia/open-event-frontend#3128 and fossasia/open-event-frontend#3129.

[abhinavk96]

@shreyanshdwivedi #6034

[niranjan94]

Also, we need rate limiting on all of the API endpoints to prevent misuse. @shreyanshdwivedi please create an issue for it with the solution.