API Rate Limiting Middleware with Token Bucket and Per-Endpoint Tiers

[JamesEjembi]

Problem Statement

Public API endpoints lack rate limiting, allowing abusive clients to degrade service for others. Implement configurable rate limiting middleware with per-endpoint tiers and burst handling.

Technical Bounds

• Algorithm: token bucket with configurable refill rate
• Storage: in-memory with optional Redis backend
• Tiers: free (10 req/min), pro (100 req/min), enterprise (1000 req/min)
• Burst: 2x sustained rate for up to 10 seconds
• Response: 429 with Retry-After header

Steps

1. Implement token bucket rate limiter
2. Create middleware with per-endpoint tier config
3. Add Redis backend for distributed rate limiting
4. Write tests for burst, cooldown, and edge cases

[ekwe7]

I would love to work on this issue. I have experience building production ready applications and collaborating through GitHub workflows. I'll carefully analyze the current implementation, propose a reliable solution, and submit a well-tested PR. My focus is on clean code, maintainability, and timely delivery