fix: nyan

packages/backend/package.json

@@ -79,6 +79,7 @@
 		"@fastify/express": "3.0.0",
 		"@fastify/http-proxy": "9.5.0",
 		"@fastify/multipart": "8.2.0",
+		"@fastify/rate-limit": "^9.1.0",
 		"@fastify/static": "7.0.3",
 		"@fastify/view": "9.1.0",
 		"@google-cloud/logging": "^10.5.0",

packages/backend/src/server/oauth/OAuth2ProviderService.ts

@@ -13,6 +13,7 @@ import oauth2orize, { type OAuth2, AuthorizationError, ValidateFunctionArity2, O
 import oauth2Pkce from 'oauth2orize-pkce';
 import fastifyCors from '@fastify/cors';
 import fastifyView from '@fastify/view';
+import rateLimit from '@fastify/rate-limit';
 import pug from 'pug';
 import bodyParser from 'body-parser';
 import fastifyExpress from '@fastify/express';
@@ -393,6 +394,11 @@ export class OAuth2ProviderService {
 			},
 		});
 
+		fastify.register(rateLimit, {
+			max: 100,
+			timeWindow: '1 hour'
+		});
+
 		await fastify.register(fastifyExpress);
 		fastify.use('/authorize', this.#server.authorize(((areq, done) => {
 			(async (): Promise<Parameters<typeof done>> => {