| Subject: | Rate limits should be checked first |
Plack::Middleware::Throttle::call passes the request through to the application, then checks rate limits. It should check rate limits first and only pas the request through to the application if whitelisted or allowed to protect resources from abuse.
If there is a public repository for this distribution, I'd be happy to submit a patch/pull-request.