fix: apply authLimiter to OTP and password reset routes (#264)

* fix: apply authLimiter to OTP and password reset routes

* refactor: isolate auth routes from dashboard limiter

Author: shravya290706

apps/dashboard-api/src/routes/auth.js

@@ -31,6 +31,13 @@ const dashboardLimiter = rateLimit({
 router.post('/register', authLimiter, register);
 
 router.post('/login', authLimiter, login);
+
+router.post('/send-otp', authLimiter, sendOtp);
+router.post('/verify-otp', authLimiter, verifyOtp);
+
+router.post('/forgot-password', authLimiter, forgotPassword);
+router.post('/reset-password', authLimiter, resetPassword);
+
 router.get('/github/start', startGithubAuth);
 router.get('/github/callback', handleGithubCallback);
 
@@ -40,12 +47,6 @@ router.put('/change-password', authorization, changePassword);
 
 router.delete('/delete-account', authorization, deleteAccount);
 
-router.post('/send-otp', sendOtp);
-router.post('/verify-otp', verifyOtp);
-
-router.post('/forgot-password', forgotPassword);
-router.post('/reset-password', resetPassword);
-
 router.post('/refresh-token', refreshToken);
 router.post('/logout', authorization, logout);