graph_attack 2.2.0 → 2.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8e7c2758ed10d1304e998ecdfb980897aec795513e69eaef79cfcc7b0d42b76f
-  data.tar.gz: 286c11e9c2dea795607c3c35d4b662254609ae71b89f3e6d6a17729578900132
+  metadata.gz: e5c8d6555e219c82d4a4120f699037145c83a8c6ab5d890aa0f7a75f9560db2c
+  data.tar.gz: da27f205db905e6a6b3c05dd34b50d4057908372c86bae9b53b8f7cb8ef86e09
 SHA512:
-  metadata.gz: 0ffe6fd28792ec03d9592ac3caf36268dba9c4710cefbe1ab9f4f3913eaf45f610beebaa6a7a183e4593b1e447ae69fd93df4094815231d15dae1b72c6fa1e59
-  data.tar.gz: 4e38c3c995f9efe86991d237d27c1b1c0ccc984d4b7870acb3fbd24f204e80881edd337211f47d705919556a3467db08836581982a68b5345f7edd4a2fc2e5d4
+  metadata.gz: 81506f5a365831038e0fff051d7ef707e4903c561bc8cbbe7148a2ff79daef43ec98e26699331163a42e07328dcd2b08797682155d91b78b54f145809d080dd6
+  data.tar.gz: 964047fc9a4e4516bdb1d6c0ae899e7fdc484c44c83268e9e7dd6fc13ffb563bdba43a4ba6b3a1cecf8ed538c61ec1804eac64fac7418d1094280280d87aeff1

data/.rubocop.yml

@@ -69,7 +69,7 @@ RSpec/NestedGroups:
 
 # Allow longer examples (default 5)
 RSpec/ExampleLength:
-  Max: 8
+  Max: 15
 
 Layout/EmptyLinesAroundAttributeAccessor:
   Enabled: true

data/CHANGELOG.md

@@ -1,6 +1,21 @@
 unreleased
 ----------
 
+v2.3.0
+------
+
+Feature:
+- Add configuration for setting defaults. E.g.:
+
+    ```rb
+    GraphAttack.configure do |config|
+      # config.threshold = 15
+      # config.interval = 60
+      # config.on = :ip
+      # config.redis_client = Redis.new
+    end
+    ```
+
 v2.2.0
 ------
 

data/README.md

@@ -85,6 +85,20 @@ extension GraphAttack::RateLimit,
           redis_client: Redis.new(url: "…")
 ```
 
+### Common configuration
+
+To have a default configuration for all rate-limited fields, you can create an
+initializer:
+
+```rb
+GraphAttack.configure do |config|
+  # config.threshold = 15
+  # config.interval = 60
+  # config.on = :ip
+  # config.redis_client = Redis.new
+end
+```
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run
@@ -104,7 +118,7 @@ tests and linting are pristine by calling `bundle && bin/rake`, then create a
 commit for this version, for example with:
 
 ```sh
-git add .
+git add --patch
 git commit -m v`ruby -rbundler/setup -rgraph_attack/version -e "puts GraphAttack::VERSION"`
 ```
 

data/graph_attack.gemspec

@@ -29,7 +29,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'graphql', '>= 1.7.9'
 
   # A Redis-backed rate limiter.
-  spec.add_dependency 'ratelimit', '>= 1.0.3'
+  spec.add_dependency 'ratelimit', '>= 1.0.4'
 
   # Loads local dependencies.
   spec.add_development_dependency 'bundler', '~> 2.0'

data/lib/graph_attack/configuration.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module GraphAttack
+  # Store the config
+  class Configuration
+    # Number of calls allowed.
+    attr_accessor :threshold
+
+    # Time interval in seconds.
+    attr_accessor :interval
+
+    # Key on the context on which to differentiate users.
+    attr_accessor :on
+
+    # Use a custom Redis client.
+    attr_accessor :redis_client
+
+    def initialize
+      @threshold = nil
+      @interval = nil
+      @on = :ip
+      @redis_client = Redis.new
+    end
+  end
+
+  class << self
+    attr_writer :configuration
+
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    def configure
+      yield(configuration)
+    end
+  end
+end

data/lib/graph_attack/rate_limit.rb

@@ -3,11 +3,10 @@
 module GraphAttack
   class RateLimit < GraphQL::Schema::FieldExtension
     def resolve(object:, arguments:, **_rest)
-      rate_limited_field = object.context[rate_limited_key]
+      rate_limited_field = object.context[on]
 
-      unless object.context.key?(rate_limited_key)
-        raise GraphAttack::Error,
-              "Missing :#{rate_limited_key} key on the GraphQL context"
+      unless object.context.key?(on)
+        raise GraphAttack::Error, "Missing :#{on} key on the GraphQL context"
       end
 
       if rate_limited_field && calls_exceeded_on_query?(rate_limited_field)
@@ -20,9 +19,9 @@ module GraphAttack
     private
 
     def key
-      on = "-#{options[:on]}" if options[:on]
+      suffix = "-#{on}" if on != :ip
 
-      "graphql-query-#{field.name}#{on}"
+      "graphql-query-#{field.name}#{suffix}"
     end
 
     def calls_exceeded_on_query?(rate_limited_field)
@@ -34,6 +33,7 @@ module GraphAttack
 
     def threshold
       options[:threshold] ||
+        GraphAttack.configuration.threshold ||
         raise(
           GraphAttack::Error,
           'Missing "threshold:" option on the GraphAttack::RateLimit extension',
@@ -42,6 +42,7 @@ module GraphAttack
 
     def interval
       options[:interval] ||
+        GraphAttack.configuration.interval ||
         raise(
           GraphAttack::Error,
           'Missing "interval:" option on the GraphAttack::RateLimit extension',
@@ -49,11 +50,11 @@ module GraphAttack
     end
 
     def redis_client
-      options[:redis_client] || Redis.new
+      options[:redis_client] || GraphAttack.configuration.redis_client
     end
 
-    def rate_limited_key
-      options[:on] || :ip
+    def on
+      options[:on] || GraphAttack.configuration.on
     end
   end
 end

data/lib/graph_attack/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module GraphAttack
-  VERSION = '2.2.0'
+  VERSION = '2.3.0'
 end

data/lib/graph_attack.rb

@@ -6,7 +6,7 @@ require 'graphql/tracing'
 
 require 'graph_attack/version'
 
-# Class-based schema
+require 'graph_attack/configuration'
 require 'graph_attack/error'
 require 'graph_attack/rate_limit'
 require 'graph_attack/rate_limited'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: graph_attack
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.3.0
 platform: ruby
 authors:
 - Fanny Cheung
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-12-09 00:00:00.000000000 Z
+date: 2023-02-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: graphql
@@ -31,14 +31,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.3
+        version: 1.0.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.3
+        version: 1.0.4
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -164,6 +164,7 @@ files:
 - bin/setup
 - graph_attack.gemspec
 - lib/graph_attack.rb
+- lib/graph_attack/configuration.rb
 - lib/graph_attack/error.rb
 - lib/graph_attack/rate_limit.rb
 - lib/graph_attack/rate_limited.rb