bazar3/server/middlewares/rateLimit.js

const { RateLimiterMemory } = require('rate-limiter-flexible');

const publicLimiter = new RateLimiterMemory({
  points: 100,
  duration: 60
});

module.exports = {
  publicLimiter: (req, res, next) => {
    publicLimiter.consume(req.anonymizedIP)
      .then(() => next())
      .catch(() => res.status(429).json({ error: 'Too many requests' }));
  }
};