feat: add some security

src/modules/admin/auth/admin-auth.controller.ts

@@ -2,8 +2,10 @@ import { Body, Controller, HttpCode, HttpStatus, Post } from '@nestjs/common';
 import { AdminAuthService } from './providers/admin-auth.service';
 import { AdminLoginDTO } from './dtos/admin-login.dto';
 import { Public } from '@/modules/auth/decorators/public.decorator';
+import { Throttle } from '@nestjs/throttler';
 
 @Controller('admin/auth')
+@Throttle({ login: {} })
 export class AdminAuthController {
   constructor(
     /**

src/modules/admin/choices/admin-choices.controller.ts

@@ -17,9 +17,11 @@ import {
   Post,
   Query,
 } from '@nestjs/common';
+import { Throttle } from '@nestjs/throttler';
 
 @Controller('admin/choices')
 @Roles(Role.SUPERUSER, Role.ADMIN)
+@Throttle({ admin: {} })
 export class AdminChoicesController {
   constructor(
     /**

src/modules/admin/questions/admin-questions.controller.ts

@@ -21,9 +21,11 @@ import {
   Post,
   Query,
 } from '@nestjs/common';
+import { Throttle } from '@nestjs/throttler';
 
 @Controller('admin/questions')
 @Roles(Role.SUPERUSER, Role.ADMIN)
+@Throttle({ admin: {} })
 export class AdminQuestionsController {
   constructor(
     /**

src/modules/admin/scoring/admin-scoring.controller.ts

@@ -15,9 +15,11 @@ import {
   Post,
   Query,
 } from '@nestjs/common';
+import { Throttle } from '@nestjs/throttler';
 
 @Controller('admin/scoring')
 @Roles(Role.SUPERUSER, Role.ADMIN)
+@Throttle({ admin: {} })
 export class AdminScoringController {
   constructor(
     /**

src/modules/admin/tests/admin-tests.controller.ts

@@ -17,9 +17,11 @@ import {
   Post,
   Query,
 } from '@nestjs/common';
+import { Throttle } from '@nestjs/throttler';
 
 @Controller('admin/tests')
 @Roles(Role.SUPERUSER, Role.ADMIN)
+@Throttle({ admin: {} })
 export class AdminTestsController {
   constructor(
     /**

src/modules/auth/auth.controller.ts

@@ -4,6 +4,7 @@ import { AuthService } from './providers/auth.service';
 import { VerifyOtpDTO } from './dtos/verify-otp.dto';
 import { Public } from './decorators/public.decorator';
 import { RefreshTokenDTO } from './dtos/refresh-token.dto';
+import { Throttle } from '@nestjs/throttler';
 
 @Controller('auth')
 export class AuthController {
@@ -17,6 +18,7 @@ export class AuthController {
   @Public()
   @Post('login')
   @HttpCode(HttpStatus.OK)
+  @Throttle({ login: {} })
   public async logIn(@Body() loginDto: LoginDTO) {
     return await this.authService.logIn(loginDto);
   }
@@ -24,6 +26,7 @@ export class AuthController {
   @Public()
   @Post('verify-otp')
   @HttpCode(HttpStatus.OK)
+  @Throttle({ otp: {} })
   public async verifyOTP(@Body() verifyOtpDto: VerifyOtpDTO) {
     return await this.authService.verifyOTP(verifyOtpDto);
   }
@@ -31,6 +34,7 @@ export class AuthController {
   @Public()
   @Post('refresh')
   @HttpCode(HttpStatus.OK)
+  @Throttle({ login: {} })
   public async refreshToken(@Body() refreshTokenDto: RefreshTokenDTO) {
     return await this.authService.refreshToken(refreshTokenDto);
   }