Password Reset API returns "email rate limit exceeded"

[Gbuomprisco]

Bug report

• [ x ] I confirm this is a bug with Supabase, not with my own application.
• [ x ] I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

Using the latest Supabase CLI (2.19.5) - InBucket has been replaced with Mailpit (though I haven't seen announcements or changelog updates) - however this could be unrelated.

When resetting the password, I get the following error (during development, of course):

{"code":"over_email_send_rate_limit","message":"email rate limit exceeded"}

To clarify, sign ups work correctly.

To Reproduce

Steps to reproduce the behavior, please provide code snippets or a repository:

1. Attempt to reset the password
2. See error returned by the auth/v1/recover API

Expected behavior

1. The API should work.
2. Such a regression should easily be caught by a test

Screenshots

If applicable, add screenshots to help explain your problem.

System information

• OS: [e.g. macOS, Windows]
• Browser (if applies) [e.g. chrome, safari]
• Version of supabase-js: [e.g. 6.0.2]
• Version of Node.js: [e.g. 10.10.0]

Additional context

NA

[Gbuomprisco]

Fixed by adding

[auth.rate_limit]
email_sent = 10

to config.toml

[a9a4k]

Thanks @Gbuomprisco for documenting the fix 🥇