#rate-limit

Better Auth rate limiting: the built-in limiter, its blind spots, and what to add

How Better Auth rate limiting works: defaults, per-path rules, storage, the auth.api blind spot and spoofable IPs, plus express-rate-limit tiers on Redis.