Christian, husband, father, and programmer. I write code for the web. In my spare time, I’ve been working on a little Phoenix project that involves a JSON API. Developers frequently neglect rate limiting when they build an API, assuming they are even aware that it is a best practice. It’s true that in many cases rate limiting isn’t worth the effort, but when it comes to authentication, it definite