summary refs log tree commit diff
path: root/src/middlewares/RateLimit.ts
diff options
context:
space:
mode:
authorFlam3rboy <34555296+Flam3rboy@users.noreply.github.com>2021-01-30 19:57:28 +0100
committerFlam3rboy <34555296+Flam3rboy@users.noreply.github.com>2021-01-30 19:57:28 +0100
commit879dafb5d12cc56ab9c8362e818cf8dccc4e5ea5 (patch)
tree7a6e6b1bded0c85bfcf25265ca60fe98f4a0e1c7 /src/middlewares/RateLimit.ts
parent:sparkles: Authentication (diff)
downloadserver-879dafb5d12cc56ab9c8362e818cf8dccc4e5ea5.tar.xz
:sparkles: RateLimit
Diffstat (limited to '')
-rw-r--r--src/middlewares/RateLimit.ts40
1 files changed, 40 insertions, 0 deletions
diff --git a/src/middlewares/RateLimit.ts b/src/middlewares/RateLimit.ts
new file mode 100644

index 00000000..abfc1c3d --- /dev/null +++ b/src/middlewares/RateLimit.ts
@@ -0,0 +1,40 @@ +import { NextFunction, Request, Response } from "express"; +import db from "../util/Database"; +import { getIpAdress } from "./GlobalRateLimit"; + +export function RateLimit({ count = 10, timespan = 1000 * 5, name = "/" }) { + return async (req: Request, res: Response, next: NextFunction) => { + let id = req.userid || getIpAdress(req); // TODO: .replaceAll(".", "_"); // for ip adress replace all dots to save in database + + const limit: { count: number; start: number } = (await db.data.ratelimit.routes[name][id].get()) || { + count: 0, + start: Date.now(), + }; + + if (limit.start < Date.now() - timespan) { + limit.start = Date.now(); + limit.count = 0; + } + + if (limit.count > count) { + const wait = Date.now() - limit.start; + + return res + .set("Retry-After", `${wait.toFixed(0)}`) + .set("X-RateLimit-Limit", `${count}`) + .set("X-RateLimit-Remaining", "0") + .set("X-RateLimit-Reset", `${limit.start + wait}`) + .set("X-RateLimit-Reset-After", `${wait}`) + .set("X-RateLimit-Bucket", name) + .set("X-RateLimit-Global", "false") + .status(429) + .json({ + message: "You are being rate limited.", + retry_after: wait, + global: false, + }); + } + + return next(); + }; +}