Description

Implement a rate-limited free tier for the Shutter API. This will be used by default for all users accessing the API with a public API key. Limits should be enforced based on IP address, with stricter rules for endpoints such as the identity registration endpoint.

Requirements

• Add a public API key to access the endpoints
• Enforce global rate limit per IP address (e.g., 100 requests/day)
• Enforce stricter rate limit per IP for the identity registration endpoint (e.g., 30/day)
• Use IP address for rate limiting
• Rate limits should be configurable per endpoint via environment variables or config
• Add monitoring/logging for rate limit hits
• Conduct basic load testing to validate rate thresholds per API instance

Notes

• This tier is meant for public usage.
• No authentication or payment is required at this tier.