feat: add rate limit for authentication

* improve error handling in frontend

server/src/middleware/globalRateLimit.js

@@ -1,6 +0,0 @@
-import { rateLimit } from 'express-rate-limit'
-
-export default rateLimit({
-  windowMs: 60 * 1000, // 1 minute
-  max: 100,
-})

server/src/middleware/rateLimiter.js

@@ -0,0 +1,19 @@
+import rateLimit from 'express-rate-limit'
+
+export const globalRateLimit = rateLimit({
+  windowMs: 60 * 1000, // 1 minute
+  max: 100,
+})
+
+export const authenticateRateLimit = rateLimit({
+  windowMs: 2 * 60 * 1000,
+  max: 5,
+})
+
+export const sessionRateLimit = rateLimit({
+  windowMs: 10 * 1000,
+  max: 1,
+  keyGenerator: (req) => {
+    return req.user ? req.user._id : req.ip
+  },
+})

server/src/middleware/sessionRateLimit.js

@@ -1,9 +0,0 @@
-import { rateLimit } from 'express-rate-limit'
-
-export default rateLimit({
-  windowMs: 10 * 1000,
-  max: 1,
-  keyGenerator: (req) => {
-    return req.user ? req.user._id : req.ip
-  },
-})