Use express-rate-limit; limit login attempts to 5 per 15 minutes and general endpoints to reasonable rates.
Use express-rate-limit; limit login attempts to 5 per 15 minutes and general endpoints to reasonable rates.