How to prevent brute force attacks using Node and Express js

Question

I’m working on a Node and Express.js application that requires users to log in, and I want to protect it from brute force attacks. I’ve read about methods like rate limiting and IP-based blocking, but I’m unsure about the best way to implement these techniques in a way that’s both efficient and user-friendly.

What would be the most effective way to prevent brute force login attempts in this type of setup? Any code examples or library recommendations would be very helpful.