But don't REST on your laurels
Looks like your API needs a reality check on rate limiting with 10 occurrences of OWASP API4:2019 issues. And hey, one lonely server variable with an empty enum, how cute!