rateLimit: {
enabled: true,
customRules: {
...
'/send-verification-email': {
window: 300,
max: 1,
},
},
} storage: 'database',
modelName: 'rateLimit'model RateLimit {
id String @id @default(uuid()) @db.Uuid
key String
count Int
lastRequest BigInt @map("last_request")
@@map("rate_limits")
}auth.api.sendVerificationEmail from server bypasses the rate limitations, it only works when request is coming from the client using authClient.sendVerificationEmail