## PR #142: Add rate limiting
**Summary**: Adds rate limiting middleware to the API endpoints.
**Security**: ✅ No issues found. Rate limiting is properly implemented.
**Bugs**:
- Line 45: The rate limit counter resets on server restart. Consider using Redis for persistence.
**Suggestions**:
- Add unit tests for the rate limiting logic
- Consider making the limit configurable via environment variable
---
## PR #143: Fix auth bug
**Summary**: Fixes a bug where expired tokens weren't being rejected.
**Security**: ⚠️ Line 23: The token expiry check uses `<=` instead of `<`. This allows tokens to be used for 1 extra second after expiry.
**Bugs**: None found.
**Suggestions**:
- Add a test case for tokens at exact expiry time