title: How to extend time after max invalid attempt for Login (node-rate-limiter-flexible)
body: <p>Basically i want to protect my login endpoint API from brute-force attack. The existing idea is when user consume max invalid attempt(suppose 5 retry) then i want to locked user and extend time for another each invalid attempt by 30 sec. </p>
  
  <p>I am protecting that endpoint by node-rate-limiter-flexible package. (You can suggest best library for this)</p>
  
  <pre><code>const opts = {
    points: 5, // 6 points
    duration: 30, // Per second
  };
  
  const rateLimiter = new RateLimiterMemory(opts);
  
  rateLimiter.consume(userid)
      .then((rateLimiterRes) =&gt; {
        // Login endpoint code
      })
      .catch((rateLimiterRes) =&gt; {
        // Too many invalid attempts
      });
  </code></pre>
  
  <p>Above code is working fine for max 5 invalid attempt and then blocked user for 30 second. But what i want to do that when user consumed max invalid attempt then for another each invalid attempt extend time by 30 sec. ((Means time will be gradually increase for each invalid attempt. maximum for 1 day). (Sorry for my ugly English)</p>