Implementing Rate Limiting and Throttling

import rateLimit from "express-rate-limit";
import RedisStore from "rate-limit-redis";

app.post("/login", rateLimit({
  store: new RedisStore({ sendCommand: (...a) => redis.call(...a) }),
  windowMs: 15 * 60_000, max: 5,
  keyGenerator: (req) => req.body.email + ":" + req.ip,
  standardHeaders: true
}), loginHandler);

-- KEYS[1]=bucket, ARGV: now, rate, capacity, cost
local b = redis.call("HMGET", KEYS[1], "tokens","ts")
local tokens = tonumber(b[1]) or tonumber(ARGV[3])
local ts = tonumber(b[2]) or tonumber(ARGV[1])
tokens = math.min(tonumber(ARGV[3]), tokens + (ARGV[1]-ts)*ARGV[2])
if tokens < tonumber(ARGV[4]) then return 0 end
tokens = tokens - ARGV[4]
redis.call("HMSET", KEYS[1], "tokens", tokens, "ts", ARGV[1])
return 1