OWASP API Security Top 10 2019 Checklist
lack-of-resources-and-rate-limiting-too-many-requests
general > lack-of-resources-and-rate-limiting-too-many-requests
Guidance
Notify the client when the rate limit is exceeded by providing the limit number and the time when the limit will
be reset. Also, define an appropriate '429' status code response.
Applies to Operation