System Design Drill Day 7: Rate Limiting APIs, Logins and OTPs with Redis

Someone finds your OTP endpoint and starts hammering it. Every call sends an SMS, and you pay for each one. Rate limiting fits into a half-hour interview and still touches algorithms, shared state and