Index: src/routes/openwebauth.js
===================================================================
--- src/routes/openwebauth.js	(revision d85b66f559540eafc15e272713f7309f657ceb42)
+++ src/routes/openwebauth.js	(revision e46ebaa7d0ba257f3e7916d2a4ecfa52e68617da)
@@ -16,4 +16,5 @@
 import db from '../config/database.js';
 import { renderPage } from '../middleware/render.js';
+import { owaMagicLimiter } from '../middleware/rate-limit.js';
 
 const router = express.Router();
@@ -166,5 +167,5 @@
  * foutpagina geeft en geen redirect.
  */
-router.post('/magic', async (req, res) => {
+router.post('/magic', owaMagicLimiter, async (req, res) => {
   const bdest = OWA.fromBdest(req.body && req.body.bdest);
   if (!bdest) return res.status(400).type('text/plain').send('bad bdest');