All requests sent to the Auth API will be subject to a rate limit.
Rate limiting restricts the number of requests the API will accept for processing over a given period of time (time window). If the number of requests exceeds the rate limit, subsequent requests are rejected.
Customers will be restricted to the following rate limit restrictions:
- 1 calls per second
- 1,000 calls per 24 hour period (Starts after first request)
Responses will contain the following headers that provide more information regarding the rate limit status:
- x-ratelimit-remaining - The number of requests remaining until the rate limit is enforced
- x-ratelimit-limit- The total number of requests that can be made within the rate limited time period
- x-ratelimit-reset - The time in milliseconds until the rate limit is reset