Merge pull request #32026 from overleaf/jpa-rate-limit-accept-invite

[web] add rate limit for accepting project invite

GitOrigin-RevId: 1b6e8d7b7547d03cbf3a8ed53b606b9541e37d1f

services/web/app/src/Features/Collaborators/CollaboratorsRouter.mjs

@@ -28,6 +28,10 @@ const rateLimiters = {
     points: 20,
     duration: 60,
   }),
+  acceptProjectInvite: new RateLimiter('accept-project-invite', {
+    points: 25, // just over view-project-invite
+    duration: 60,
+  }),
 }
 
 export default {
@@ -124,6 +128,7 @@ export default {
         'project-invite'
       ),
       AuthenticationController.requireLogin(),
+      RateLimiterMiddleware.rateLimit(rateLimiters.acceptProjectInvite),
       CollaboratorsInviteController.acceptInvite,
       AnalyticsRegistrationSourceMiddleware.clearSource()
     )