From d0c2e9b7fc4c1e6a3a26ba36865ae45a2f5e1675 Mon Sep 17 00:00:00 2001
From: KernelDeimos <7225168+KernelDeimos@users.noreply.github.com>
Date: Wed, 18 Feb 2026 17:25:15 -0500
Subject: [PATCH] fix(oidc): rate-limit identity for username

---
 src/backend/src/routers/user-protected/change-username.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/backend/src/routers/user-protected/change-username.js b/src/backend/src/routers/user-protected/change-username.js
index ece0c5fc7..03d06383a 100644
--- a/src/backend/src/routers/user-protected/change-username.js
+++ b/src/backend/src/routers/user-protected/change-username.js
@@ -46,7 +46,7 @@ module.exports = {
         }
 
         const svc_edgeRateLimit = req.services.get('edge-rate-limit');
-        if ( ! svc_edgeRateLimit.check('change-email-start') ) {
+        if ( ! svc_edgeRateLimit.check('change-username-start') ) {
             return res.status(429).send('Too many requests.');
         }