I Rate-Limited an API by Hand. Then I Configured One in a Form Field.

My hotel booking backend has an GET endpoint that has no rate limiting at all, nothing stops a client from calling it as fast as it can respond. When I needed to expose the backend publicly for a sepa...