Throttlers and rate limiters, how they should be implemented

Hello @noamshemesh ,
Thank you for your work on this package.

I'm raising this to discuss the current implementation,

Click for dark mode users

[noamshemesh]

Thanks, please raise a PR with a fix.
In general, if I understand the issue correctly, I don't see a huge problem here as even with long processing requests, the number of requests is limited and the user of this library can fine tune the number of requests according to the endpoint.

Thanks @noamshemesh
I'm not a keen nodejs developer but maybe I will try.
Even if the limit is set to say 5 request/minute , super slow right? The attacker can check for long running request, and only address these endpoints, say for instance 3requests / minute would be sufficient to make the processor busy.
I'm aware that a long returning request doesn't mean necessarily the processor is busy, it can be doing other jobs, or sleeping or whatever...

Check my repo.