if (!rateLimitHelper.allowRequest(clientIp)) {
            if (logger.isDebugEnabled()) {
                logger.debug("Rate limit exceeded: clientIp={}", clientIp);
            }
            sendRateLimitResponse(httpResponse, rateLimitHelper.getRetryAfterSeconds());
            return;
        }

        chain.doFilter(request, response);
    }

    /**
     * Send a 403 Forbidden response for blocked IPs.