# Authentication rate limits

Credential endpoints are rate limited in production.

Credential endpoints are now rate limited in production. The Worker previously left the limiter off because it does not set `NODE_ENV`. `get-session` and `jwks` remain free of rate-limit database writes. See [Rate limits](/docs/features/auth#rate-limits) and [PR #196](https://github.com/CarlosZiegler/template-cloudflare/pull/196).