Fix rate limiting

backend/routes/profile.py

@@ -17,7 +17,7 @@ from similarity import is_user_similar_to_verified
 from .messaging import messagingManager
 from security.audit import log_security
 from security.profanity import contains_profanity
-from security.rate_limit import rate_limit_per_user
+from security.rate_limit import rate_limit_per_ip
 
 router = APIRouter()
 
@@ -41,7 +41,7 @@ PROFILE_PICTURES_DIR = Path("data/uploads/pfp")
 os.makedirs(PROFILE_PICTURES_DIR, exist_ok=True)
 
 @router.post("/upload-profile-picture")
-@rate_limit_per_user("10/minute")
+@rate_limit_per_ip("10/minute")
 async def upload_profile_picture(
     request: Request,
     profile_picture: UploadFile = File(...),
@@ -167,7 +167,7 @@ async def list_users(
     }
 
 @router.put("/user/profile")
-@rate_limit_per_user("10/minute")
+@rate_limit_per_ip("10/minute")
 async def update_user_profile(
     request: Request,
     update_request: UpdateProfileRequest,
@@ -245,7 +245,7 @@ async def update_user_profile(
 
 
 @router.put("/user/bio")
-@rate_limit_per_user("10/minute")
+@rate_limit_per_ip("10/minute")
 async def update_user_bio(
     request: Request,
     bio_request: UpdateBioRequest,