2016-12-28 16:49:51 -06:00
|
|
|
import * as Limiter from 'ratelimiter';
|
2021-03-23 00:54:09 -05:00
|
|
|
import { redisClient } from '../../db/redis';
|
2018-07-15 13:43:36 -05:00
|
|
|
import { IEndpoint } from './endpoints';
|
2021-07-15 06:45:32 -05:00
|
|
|
import { getAcct } from '@/misc/acct';
|
2019-04-07 07:50:36 -05:00
|
|
|
import { User } from '../../models/entities/user';
|
2019-03-02 03:51:59 -06:00
|
|
|
import Logger from '../../services/logger';
|
2016-12-28 16:49:51 -06:00
|
|
|
|
2019-02-03 01:45:13 -06:00
|
|
|
const logger = new Logger('limiter');
|
2017-01-23 03:25:52 -06:00
|
|
|
|
2021-03-23 21:05:37 -05:00
|
|
|
export default (endpoint: IEndpoint, user: User) => new Promise<void>((ok, reject) => {
|
2019-04-12 11:43:22 -05:00
|
|
|
const limitation = endpoint.meta.limit!;
|
2017-03-01 07:33:43 -06:00
|
|
|
|
|
|
|
const key = limitation.hasOwnProperty('key')
|
|
|
|
? limitation.key
|
2016-12-28 16:49:51 -06:00
|
|
|
: endpoint.name;
|
|
|
|
|
2017-03-01 07:33:43 -06:00
|
|
|
const hasShortTermLimit =
|
|
|
|
limitation.hasOwnProperty('minInterval');
|
2016-12-28 16:49:51 -06:00
|
|
|
|
2017-03-01 07:33:43 -06:00
|
|
|
const hasLongTermLimit =
|
|
|
|
limitation.hasOwnProperty('duration') &&
|
|
|
|
limitation.hasOwnProperty('max');
|
2016-12-28 16:49:51 -06:00
|
|
|
|
2017-03-01 07:33:43 -06:00
|
|
|
if (hasShortTermLimit) {
|
2016-12-28 16:49:51 -06:00
|
|
|
min();
|
2017-03-01 07:33:43 -06:00
|
|
|
} else if (hasLongTermLimit) {
|
2016-12-28 16:49:51 -06:00
|
|
|
max();
|
|
|
|
} else {
|
|
|
|
ok();
|
|
|
|
}
|
|
|
|
|
|
|
|
// Short-term limit
|
2017-01-23 03:25:52 -06:00
|
|
|
function min() {
|
2016-12-28 16:49:51 -06:00
|
|
|
const minIntervalLimiter = new Limiter({
|
2019-04-07 07:50:36 -05:00
|
|
|
id: `${user.id}:${key}:min`,
|
2017-03-01 07:33:43 -06:00
|
|
|
duration: limitation.minInterval,
|
2016-12-28 16:49:51 -06:00
|
|
|
max: 1,
|
2021-03-23 00:54:09 -05:00
|
|
|
db: redisClient
|
2016-12-28 16:49:51 -06:00
|
|
|
});
|
|
|
|
|
2017-01-23 03:25:52 -06:00
|
|
|
minIntervalLimiter.get((err, info) => {
|
|
|
|
if (err) {
|
|
|
|
return reject('ERR');
|
|
|
|
}
|
|
|
|
|
2019-02-03 01:45:13 -06:00
|
|
|
logger.debug(`@${getAcct(user)} ${endpoint.name} min remaining: ${info.remaining}`);
|
2017-01-23 03:25:52 -06:00
|
|
|
|
|
|
|
if (info.remaining === 0) {
|
2016-12-28 16:49:51 -06:00
|
|
|
reject('BRIEF_REQUEST_INTERVAL');
|
|
|
|
} else {
|
2017-03-01 07:33:43 -06:00
|
|
|
if (hasLongTermLimit) {
|
2016-12-28 16:49:51 -06:00
|
|
|
max();
|
|
|
|
} else {
|
|
|
|
ok();
|
|
|
|
}
|
|
|
|
}
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
// Long term limit
|
2017-01-23 03:25:52 -06:00
|
|
|
function max() {
|
2016-12-28 16:49:51 -06:00
|
|
|
const limiter = new Limiter({
|
2019-04-07 07:50:36 -05:00
|
|
|
id: `${user.id}:${key}`,
|
2017-03-01 07:33:43 -06:00
|
|
|
duration: limitation.duration,
|
|
|
|
max: limitation.max,
|
2021-03-23 00:54:09 -05:00
|
|
|
db: redisClient
|
2016-12-28 16:49:51 -06:00
|
|
|
});
|
|
|
|
|
2017-01-23 03:25:52 -06:00
|
|
|
limiter.get((err, info) => {
|
|
|
|
if (err) {
|
|
|
|
return reject('ERR');
|
|
|
|
}
|
|
|
|
|
2019-02-03 01:45:13 -06:00
|
|
|
logger.debug(`@${getAcct(user)} ${endpoint.name} max remaining: ${info.remaining}`);
|
2017-01-23 03:25:52 -06:00
|
|
|
|
|
|
|
if (info.remaining === 0) {
|
2016-12-28 16:49:51 -06:00
|
|
|
reject('RATE_LIMIT_EXCEEDED');
|
|
|
|
} else {
|
|
|
|
ok();
|
|
|
|
}
|
|
|
|
});
|
|
|
|
}
|
|
|
|
});
|