Rate Limit Authenticated Users in .NET: The Partitioned Rate Limiter Playbook

Global rate limits are a trap. Use the user's JWT sub claim as a partition key and get fair, per-user throttling with the built-in ASP.NET Core middleware — plus YARP and Redis patterns for when you scale out.