2016-12-28 16:49:51 -06:00
|
|
|
import * as Limiter from 'ratelimiter';
|
2017-01-23 03:25:52 -06:00
|
|
|
import * as debug from 'debug';
|
2018-03-28 11:20:40 -05:00
|
|
|
import limiterDB from '../../db/redis';
|
2017-03-01 07:33:43 -06:00
|
|
|
import { Endpoint } from './endpoints';
|
2018-07-07 05:19:00 -05:00
|
|
|
import getAcct from '../../misc/acct/render';
|
2018-04-11 03:40:01 -05:00
|
|
|
import { IUser } from '../../models/user';
|
2016-12-28 16:49:51 -06:00
|
|
|
|
2017-01-23 03:25:52 -06:00
|
|
|
const log = debug('misskey:limitter');
|
|
|
|
|
2018-04-11 03:40:01 -05:00
|
|
|
export default (endpoint: Endpoint, user: IUser) => new Promise((ok, reject) => {
|
2017-03-01 07:33:43 -06:00
|
|
|
const limitation = endpoint.limit;
|
|
|
|
|
|
|
|
const key = limitation.hasOwnProperty('key')
|
|
|
|
? limitation.key
|
2016-12-28 16:49:51 -06:00
|
|
|
: endpoint.name;
|
|
|
|
|
2017-03-01 07:33:43 -06:00
|
|
|
const hasShortTermLimit =
|
|
|
|
limitation.hasOwnProperty('minInterval');
|
2016-12-28 16:49:51 -06:00
|
|
|
|
2017-03-01 07:33:43 -06:00
|
|
|
const hasLongTermLimit =
|
|
|
|
limitation.hasOwnProperty('duration') &&
|
|
|
|
limitation.hasOwnProperty('max');
|
2016-12-28 16:49:51 -06:00
|
|
|
|
2017-03-01 07:33:43 -06:00
|
|
|
if (hasShortTermLimit) {
|
2016-12-28 16:49:51 -06:00
|
|
|
min();
|
2017-03-01 07:33:43 -06:00
|
|
|
} else if (hasLongTermLimit) {
|
2016-12-28 16:49:51 -06:00
|
|
|
max();
|
|
|
|
} else {
|
|
|
|
ok();
|
|
|
|
}
|
|
|
|
|
|
|
|
// Short-term limit
|
2017-01-23 03:25:52 -06:00
|
|
|
function min() {
|
2016-12-28 16:49:51 -06:00
|
|
|
const minIntervalLimiter = new Limiter({
|
2018-04-11 03:40:01 -05:00
|
|
|
id: `${user._id}:${key}:min`,
|
2017-03-01 07:33:43 -06:00
|
|
|
duration: limitation.minInterval,
|
2016-12-28 16:49:51 -06:00
|
|
|
max: 1,
|
|
|
|
db: limiterDB
|
|
|
|
});
|
|
|
|
|
2017-01-23 03:25:52 -06:00
|
|
|
minIntervalLimiter.get((err, info) => {
|
|
|
|
if (err) {
|
|
|
|
return reject('ERR');
|
|
|
|
}
|
|
|
|
|
2018-04-11 03:40:01 -05:00
|
|
|
log(`@${getAcct(user)} ${endpoint.name} min remaining: ${info.remaining}`);
|
2017-01-23 03:25:52 -06:00
|
|
|
|
|
|
|
if (info.remaining === 0) {
|
2016-12-28 16:49:51 -06:00
|
|
|
reject('BRIEF_REQUEST_INTERVAL');
|
|
|
|
} else {
|
2017-03-01 07:33:43 -06:00
|
|
|
if (hasLongTermLimit) {
|
2016-12-28 16:49:51 -06:00
|
|
|
max();
|
|
|
|
} else {
|
|
|
|
ok();
|
|
|
|
}
|
|
|
|
}
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
// Long term limit
|
2017-01-23 03:25:52 -06:00
|
|
|
function max() {
|
2016-12-28 16:49:51 -06:00
|
|
|
const limiter = new Limiter({
|
2018-04-11 03:40:01 -05:00
|
|
|
id: `${user._id}:${key}`,
|
2017-03-01 07:33:43 -06:00
|
|
|
duration: limitation.duration,
|
|
|
|
max: limitation.max,
|
2016-12-28 16:49:51 -06:00
|
|
|
db: limiterDB
|
|
|
|
});
|
|
|
|
|
2017-01-23 03:25:52 -06:00
|
|
|
limiter.get((err, info) => {
|
|
|
|
if (err) {
|
|
|
|
return reject('ERR');
|
|
|
|
}
|
|
|
|
|
2018-04-11 03:40:01 -05:00
|
|
|
log(`@${getAcct(user)} ${endpoint.name} max remaining: ${info.remaining}`);
|
2017-01-23 03:25:52 -06:00
|
|
|
|
|
|
|
if (info.remaining === 0) {
|
2016-12-28 16:49:51 -06:00
|
|
|
reject('RATE_LIMIT_EXCEEDED');
|
|
|
|
} else {
|
|
|
|
ok();
|
|
|
|
}
|
|
|
|
});
|
|
|
|
}
|
|
|
|
});
|