import { NextFunction, Request, Response } from "express"; import Config from "../util/Config"; import db from "../util/Database"; export async function GlobalRateLimit(req: Request, res: Response, next: NextFunction) { if (!Config.get().server.ipRateLimit.enabled) return next(); const ip = getIpAdress(req); let limit = (await db.data.ratelimit.global[ip].get()) || { start: Date.now(), count: 0 }; if (limit.start < Date.now() - Config.get().server.ipRateLimit.timespan) { limit.start = Date.now(); limit.count = 0; } if (limit.count > Config.get().server.ipRateLimit.count) { const timespan = Date.now() - limit.start; return res .set("Retry-After", `${timespan.toFixed(0)}`) .set("X-RateLimit-Global", "true") .status(429) .json({ message: "You are being rate limited.", retry_after: timespan, global: true, }); } res.once("close", async () => { if (res.statusCode >= 400) { limit.count++; await db.data.ratelimit.global[ip].set(limit); } }); return next(); } export function getIpAdress(req: Request): string { const { forwadedFor } = Config.get().server; const ip = forwadedFor ? req.headers[forwadedFor] : req.ip; return ip.replaceAll(".", "_").replaceAll(":", "_"); }