From ef354e7083cbb85eef5072ae6f7e48c0af1eb6e4 Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kyle.spearrin@gmail.com>
Date: Tue, 26 Sep 2017 21:58:28 -0400
Subject: [PATCH] rate limit email verification api endpoints

---
 src/Api/settings.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/src/Api/settings.json b/src/Api/settings.json
index 0734f64bf..d8ba05b4c 100644
--- a/src/Api/settings.json
+++ b/src/Api/settings.json
@@ -72,16 +72,6 @@
         "Period": "1s",
         "Limit": 5
       },
-      {
-        "Endpoint": "post:/auth/token",
-        "Period": "1m",
-        "Limit": 10
-      },
-      {
-        "Endpoint": "post:/auth/token/two-factor",
-        "Period": "1m",
-        "Limit": 5
-      },
       {
         "Endpoint": "post:/accounts/register",
         "Period": "1m",
@@ -99,7 +89,17 @@
       },
       {
         "Endpoint": "post:/account/email",
+        "Period": "10m",
+        "Limit": 5
+      },
+      {
+        "Endpoint": "post:/account/verify-email-token",
         "Period": "1m",
+        "Limit": 2
+      },
+      {
+        "Endpoint": "post:/account/verify-email",
+        "Period": "10m",
         "Limit": 5
       },
       {