@kewacode/guard 1.0.2 → 1.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Readme.md +29 -0
- package/package.json +1 -1
- package/src/constants.ts +1 -0
- package/src/decorators/kewa-rate-limit.decorator.ts +11 -0
- package/src/guards/kewa-rate-limit.guard.ts +62 -0
- package/src/index.ts +5 -0
- package/src/interfaces/kewa-options.interface.ts +5 -0
- package/src/kewa-guard.module.ts +29 -0
- package/src/kewa-guard.service.ts +80 -0
- package/tsconfig.lib.json +10 -0
- package/index.js +0 -442
package/Readme.md
ADDED
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
# 🛡️ Kewa Guard
|
|
2
|
+
|
|
3
|
+
> **Distributed Rate Limiter for NestJS using Redis & Sliding Window Algorithm.**
|
|
4
|
+
|
|
5
|
+
[](https://www.npmjs.com/package/@kewa/guard)
|
|
6
|
+
[](LICENSE)
|
|
7
|
+
[](https://nestjs.com/)
|
|
8
|
+
|
|
9
|
+
**Kewa Guard** é uma biblioteca leve e performática para proteção de rotas em aplicações **NestJS**. Diferente de limitadores simples em memória, ele utiliza **Redis** com scripts **Lua** atômicos para garantir precisão absoluta em ambientes distribuídos (cluster/microservices).
|
|
10
|
+
|
|
11
|
+
## 🚀 Features
|
|
12
|
+
|
|
13
|
+
- 🕷 **Distributed:** Funciona perfeitamente com múltiplas instâncias da API.
|
|
14
|
+
- ⚡ **Atomic:** Usa Lua Scripts para evitar _Race Conditions_.
|
|
15
|
+
- 🪟 **Sliding Window Log:** Algoritmo preciso (não reseta todos os limites no minuto cheio).
|
|
16
|
+
- 🔌 **Plug & Play:** Configuração simples via Módulo Dinâmico.
|
|
17
|
+
- 🛑 **Smart Headers:** Retorna headers padrão (`X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset`).
|
|
18
|
+
|
|
19
|
+
---
|
|
20
|
+
|
|
21
|
+
## 📦 Instalação
|
|
22
|
+
|
|
23
|
+
```bash
|
|
24
|
+
npm install @kewa/guard ioredis
|
|
25
|
+
# ou
|
|
26
|
+
pnpm add @kewa/guard ioredis
|
|
27
|
+
# ou
|
|
28
|
+
yarn add @kewa/guard ioredis
|
|
29
|
+
```
|
package/package.json
CHANGED
package/src/constants.ts
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export const KEWA_REDIS_CLIENT = 'REDIS_CLIENT';
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { SetMetadata } from '@nestjs/common';
|
|
2
|
+
|
|
3
|
+
export const KEWA_RATE_LIMIT_KEY = 'kewa_rate_limit_key';
|
|
4
|
+
|
|
5
|
+
export interface KewaRateLimitOptions {
|
|
6
|
+
limit: number;
|
|
7
|
+
ttl: number;
|
|
8
|
+
}
|
|
9
|
+
|
|
10
|
+
export const KewaRateLimit = (options: KewaRateLimitOptions) =>
|
|
11
|
+
SetMetadata(KEWA_RATE_LIMIT_KEY, options);
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
import {
|
|
2
|
+
CanActivate,
|
|
3
|
+
ExecutionContext,
|
|
4
|
+
HttpException,
|
|
5
|
+
HttpStatus,
|
|
6
|
+
Injectable,
|
|
7
|
+
} from '@nestjs/common';
|
|
8
|
+
import { Reflector } from '@nestjs/core';
|
|
9
|
+
import { Request, Response } from 'express';
|
|
10
|
+
import {
|
|
11
|
+
KEWA_RATE_LIMIT_KEY,
|
|
12
|
+
KewaRateLimitOptions,
|
|
13
|
+
} from '../decorators/kewa-rate-limit.decorator';
|
|
14
|
+
import { KewaGuardService } from '../kewa-guard.service';
|
|
15
|
+
|
|
16
|
+
@Injectable()
|
|
17
|
+
export class KewaRateLimitGuard implements CanActivate {
|
|
18
|
+
constructor(
|
|
19
|
+
private reflector: Reflector,
|
|
20
|
+
private kewaGuardService: KewaGuardService,
|
|
21
|
+
) {}
|
|
22
|
+
|
|
23
|
+
async canActivate(context: ExecutionContext): Promise<boolean> {
|
|
24
|
+
const options = this.reflector.get<KewaRateLimitOptions>(
|
|
25
|
+
KEWA_RATE_LIMIT_KEY,
|
|
26
|
+
context.getHandler(),
|
|
27
|
+
);
|
|
28
|
+
|
|
29
|
+
if (!options) {
|
|
30
|
+
return true;
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
const { limit, ttl } = options;
|
|
34
|
+
|
|
35
|
+
const request = context.switchToHttp().getRequest<Request>();
|
|
36
|
+
const response = context.switchToHttp().getResponse<Response>();
|
|
37
|
+
|
|
38
|
+
const ip = request.ip || request.connection.remoteAddress;
|
|
39
|
+
|
|
40
|
+
const key = `rate_limit:${ip}:${context.getClass().name}.${context.getHandler().name}`;
|
|
41
|
+
|
|
42
|
+
const { allowed, remaining, resetAt } =
|
|
43
|
+
await this.kewaGuardService.checkLimit(key, limit, ttl);
|
|
44
|
+
|
|
45
|
+
response.header('X-RateLimit-Limit', limit.toString());
|
|
46
|
+
response.header('X-RateLimit-Remaining', remaining.toString());
|
|
47
|
+
response.header('X-RateLimit-Reset', resetAt.toString());
|
|
48
|
+
|
|
49
|
+
if (!allowed) {
|
|
50
|
+
throw new HttpException(
|
|
51
|
+
{
|
|
52
|
+
statusCode: HttpStatus.TOO_MANY_REQUESTS,
|
|
53
|
+
error: 'Too Many Requests',
|
|
54
|
+
message: `Você excedeu o limite de ${limit} requisições em ${ttl} segundos.`,
|
|
55
|
+
},
|
|
56
|
+
HttpStatus.TOO_MANY_REQUESTS,
|
|
57
|
+
);
|
|
58
|
+
}
|
|
59
|
+
|
|
60
|
+
return true;
|
|
61
|
+
}
|
|
62
|
+
}
|
package/src/index.ts
ADDED
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import { DynamicModule, Global, Module } from '@nestjs/common';
|
|
2
|
+
import Redis from 'ioredis';
|
|
3
|
+
import { KEWA_REDIS_CLIENT } from './constants';
|
|
4
|
+
import { KewaGuardService } from './kewa-guard.service';
|
|
5
|
+
import { KewaGuardOptions } from './interfaces/kewa-options.interface';
|
|
6
|
+
|
|
7
|
+
@Global()
|
|
8
|
+
@Module({})
|
|
9
|
+
export class KewaGuardModule {
|
|
10
|
+
static register(options: KewaGuardOptions): DynamicModule {
|
|
11
|
+
return {
|
|
12
|
+
module: KewaGuardModule,
|
|
13
|
+
providers: [
|
|
14
|
+
{
|
|
15
|
+
provide: KEWA_REDIS_CLIENT,
|
|
16
|
+
useFactory: () => {
|
|
17
|
+
return new Redis({
|
|
18
|
+
host: options.host,
|
|
19
|
+
port: options.port,
|
|
20
|
+
password: options.password,
|
|
21
|
+
});
|
|
22
|
+
},
|
|
23
|
+
},
|
|
24
|
+
KewaGuardService,
|
|
25
|
+
],
|
|
26
|
+
exports: [KewaGuardService],
|
|
27
|
+
};
|
|
28
|
+
}
|
|
29
|
+
}
|
|
@@ -0,0 +1,80 @@
|
|
|
1
|
+
import { Inject, Injectable, OnModuleDestroy } from '@nestjs/common';
|
|
2
|
+
import Redis from 'ioredis';
|
|
3
|
+
import { KEWA_REDIS_CLIENT } from './constants';
|
|
4
|
+
|
|
5
|
+
interface RateLimitResult {
|
|
6
|
+
allowed: boolean;
|
|
7
|
+
remaining: number;
|
|
8
|
+
resetAt: number;
|
|
9
|
+
}
|
|
10
|
+
|
|
11
|
+
@Injectable()
|
|
12
|
+
export class KewaGuardService implements OnModuleDestroy {
|
|
13
|
+
constructor(@Inject(KEWA_REDIS_CLIENT) private readonly redis: Redis) {}
|
|
14
|
+
|
|
15
|
+
onModuleDestroy() {
|
|
16
|
+
this.redis.disconnect();
|
|
17
|
+
}
|
|
18
|
+
|
|
19
|
+
async checkLimit(
|
|
20
|
+
key: string,
|
|
21
|
+
limit: number,
|
|
22
|
+
ttlSeconds: number,
|
|
23
|
+
): Promise<RateLimitResult> {
|
|
24
|
+
const now = Date.now();
|
|
25
|
+
const windowStart = now - ttlSeconds * 1000;
|
|
26
|
+
|
|
27
|
+
const luaScript = `
|
|
28
|
+
local key = KEYS[1]
|
|
29
|
+
local limit = tonumber(ARGV[1])
|
|
30
|
+
local now = tonumber(ARGV[2])
|
|
31
|
+
local windowStart = tonumber(ARGV[3])
|
|
32
|
+
local ttl = tonumber(ARGV[4])
|
|
33
|
+
|
|
34
|
+
redis.call('ZREMRANGEBYSCORE', key, 0, windowStart)
|
|
35
|
+
|
|
36
|
+
local currentCount = redis.call('ZCARD', key)
|
|
37
|
+
|
|
38
|
+
local allowed = 1
|
|
39
|
+
local remaining = 0
|
|
40
|
+
|
|
41
|
+
if currentCount >= limit then
|
|
42
|
+
allowed = 0
|
|
43
|
+
remaining = 0
|
|
44
|
+
else
|
|
45
|
+
redis.call('ZADD', key, now, now)
|
|
46
|
+
redis.call('EXPIRE', key, ttl)
|
|
47
|
+
allowed = 1
|
|
48
|
+
remaining = limit - (currentCount + 1)
|
|
49
|
+
end
|
|
50
|
+
|
|
51
|
+
local resetAt = math.floor((now + (ttl * 1000)) / 1000)
|
|
52
|
+
|
|
53
|
+
return { allowed, remaining, resetAt }
|
|
54
|
+
`;
|
|
55
|
+
|
|
56
|
+
const result = (await this.redis.eval(
|
|
57
|
+
luaScript,
|
|
58
|
+
1,
|
|
59
|
+
key,
|
|
60
|
+
limit,
|
|
61
|
+
now,
|
|
62
|
+
windowStart,
|
|
63
|
+
ttlSeconds,
|
|
64
|
+
)) as [number, number, number];
|
|
65
|
+
|
|
66
|
+
return {
|
|
67
|
+
allowed: result[0] === 1,
|
|
68
|
+
remaining: result[1],
|
|
69
|
+
resetAt: result[2],
|
|
70
|
+
};
|
|
71
|
+
}
|
|
72
|
+
|
|
73
|
+
async ping() {
|
|
74
|
+
return await this.redis.ping();
|
|
75
|
+
}
|
|
76
|
+
|
|
77
|
+
getClient() {
|
|
78
|
+
return this.redis;
|
|
79
|
+
}
|
|
80
|
+
}
|
package/index.js
DELETED
|
@@ -1,442 +0,0 @@
|
|
|
1
|
-
/******/ (() => {
|
|
2
|
-
// webpackBootstrap
|
|
3
|
-
/******/ 'use strict';
|
|
4
|
-
/******/ var __webpack_modules__ = [
|
|
5
|
-
/* 0 */
|
|
6
|
-
/***/ function (__unused_webpack_module, exports, __webpack_require__) {
|
|
7
|
-
var __createBinding =
|
|
8
|
-
(this && this.__createBinding) ||
|
|
9
|
-
(Object.create
|
|
10
|
-
? function (o, m, k, k2) {
|
|
11
|
-
if (k2 === undefined) k2 = k;
|
|
12
|
-
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
13
|
-
if (
|
|
14
|
-
!desc ||
|
|
15
|
-
('get' in desc
|
|
16
|
-
? !m.__esModule
|
|
17
|
-
: desc.writable || desc.configurable)
|
|
18
|
-
) {
|
|
19
|
-
desc = {
|
|
20
|
-
enumerable: true,
|
|
21
|
-
get: function () {
|
|
22
|
-
return m[k];
|
|
23
|
-
},
|
|
24
|
-
};
|
|
25
|
-
}
|
|
26
|
-
Object.defineProperty(o, k2, desc);
|
|
27
|
-
}
|
|
28
|
-
: function (o, m, k, k2) {
|
|
29
|
-
if (k2 === undefined) k2 = k;
|
|
30
|
-
o[k2] = m[k];
|
|
31
|
-
});
|
|
32
|
-
var __exportStar =
|
|
33
|
-
(this && this.__exportStar) ||
|
|
34
|
-
function (m, exports) {
|
|
35
|
-
for (var p in m)
|
|
36
|
-
if (
|
|
37
|
-
p !== 'default' &&
|
|
38
|
-
!Object.prototype.hasOwnProperty.call(exports, p)
|
|
39
|
-
)
|
|
40
|
-
__createBinding(exports, m, p);
|
|
41
|
-
};
|
|
42
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
43
|
-
__exportStar(__webpack_require__(1), exports);
|
|
44
|
-
__exportStar(__webpack_require__(5), exports);
|
|
45
|
-
__exportStar(__webpack_require__(6), exports);
|
|
46
|
-
__exportStar(__webpack_require__(7), exports);
|
|
47
|
-
__exportStar(__webpack_require__(9), exports);
|
|
48
|
-
|
|
49
|
-
/***/
|
|
50
|
-
},
|
|
51
|
-
/* 1 */
|
|
52
|
-
/***/ function (__unused_webpack_module, exports, __webpack_require__) {
|
|
53
|
-
var __decorate =
|
|
54
|
-
(this && this.__decorate) ||
|
|
55
|
-
function (decorators, target, key, desc) {
|
|
56
|
-
var c = arguments.length,
|
|
57
|
-
r =
|
|
58
|
-
c < 3
|
|
59
|
-
? target
|
|
60
|
-
: desc === null
|
|
61
|
-
? (desc = Object.getOwnPropertyDescriptor(target, key))
|
|
62
|
-
: desc,
|
|
63
|
-
d;
|
|
64
|
-
if (
|
|
65
|
-
typeof Reflect === 'object' &&
|
|
66
|
-
typeof Reflect.decorate === 'function'
|
|
67
|
-
)
|
|
68
|
-
r = Reflect.decorate(decorators, target, key, desc);
|
|
69
|
-
else
|
|
70
|
-
for (var i = decorators.length - 1; i >= 0; i--)
|
|
71
|
-
if ((d = decorators[i]))
|
|
72
|
-
r =
|
|
73
|
-
(c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) ||
|
|
74
|
-
r;
|
|
75
|
-
return (c > 3 && r && Object.defineProperty(target, key, r), r);
|
|
76
|
-
};
|
|
77
|
-
var __importDefault =
|
|
78
|
-
(this && this.__importDefault) ||
|
|
79
|
-
function (mod) {
|
|
80
|
-
return mod && mod.__esModule ? mod : { default: mod };
|
|
81
|
-
};
|
|
82
|
-
var KewaGuardModule_1;
|
|
83
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
84
|
-
exports.KewaGuardModule = void 0;
|
|
85
|
-
const common_1 = __webpack_require__(2);
|
|
86
|
-
const ioredis_1 = __importDefault(__webpack_require__(3));
|
|
87
|
-
const constants_1 = __webpack_require__(4);
|
|
88
|
-
const kewa_guard_service_1 = __webpack_require__(5);
|
|
89
|
-
let KewaGuardModule = (KewaGuardModule_1 = class KewaGuardModule {
|
|
90
|
-
static register(options) {
|
|
91
|
-
return {
|
|
92
|
-
module: KewaGuardModule_1,
|
|
93
|
-
providers: [
|
|
94
|
-
{
|
|
95
|
-
provide: constants_1.KEWA_REDIS_CLIENT,
|
|
96
|
-
useFactory: () => {
|
|
97
|
-
return new ioredis_1.default({
|
|
98
|
-
host: options.host,
|
|
99
|
-
port: options.port,
|
|
100
|
-
password: options.password,
|
|
101
|
-
});
|
|
102
|
-
},
|
|
103
|
-
},
|
|
104
|
-
kewa_guard_service_1.KewaGuardService,
|
|
105
|
-
],
|
|
106
|
-
exports: [kewa_guard_service_1.KewaGuardService],
|
|
107
|
-
};
|
|
108
|
-
}
|
|
109
|
-
});
|
|
110
|
-
exports.KewaGuardModule = KewaGuardModule;
|
|
111
|
-
exports.KewaGuardModule =
|
|
112
|
-
KewaGuardModule =
|
|
113
|
-
KewaGuardModule_1 =
|
|
114
|
-
__decorate(
|
|
115
|
-
[(0, common_1.Global)(), (0, common_1.Module)({})],
|
|
116
|
-
KewaGuardModule,
|
|
117
|
-
);
|
|
118
|
-
|
|
119
|
-
/***/
|
|
120
|
-
},
|
|
121
|
-
/* 2 */
|
|
122
|
-
/***/ (module) => {
|
|
123
|
-
module.exports = require('@nestjs/common');
|
|
124
|
-
|
|
125
|
-
/***/
|
|
126
|
-
},
|
|
127
|
-
/* 3 */
|
|
128
|
-
/***/ (module) => {
|
|
129
|
-
module.exports = require('ioredis');
|
|
130
|
-
|
|
131
|
-
/***/
|
|
132
|
-
},
|
|
133
|
-
/* 4 */
|
|
134
|
-
/***/ (__unused_webpack_module, exports) => {
|
|
135
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
136
|
-
exports.KEWA_REDIS_CLIENT = void 0;
|
|
137
|
-
exports.KEWA_REDIS_CLIENT = 'REDIS_CLIENT';
|
|
138
|
-
|
|
139
|
-
/***/
|
|
140
|
-
},
|
|
141
|
-
/* 5 */
|
|
142
|
-
/***/ function (__unused_webpack_module, exports, __webpack_require__) {
|
|
143
|
-
var __decorate =
|
|
144
|
-
(this && this.__decorate) ||
|
|
145
|
-
function (decorators, target, key, desc) {
|
|
146
|
-
var c = arguments.length,
|
|
147
|
-
r =
|
|
148
|
-
c < 3
|
|
149
|
-
? target
|
|
150
|
-
: desc === null
|
|
151
|
-
? (desc = Object.getOwnPropertyDescriptor(target, key))
|
|
152
|
-
: desc,
|
|
153
|
-
d;
|
|
154
|
-
if (
|
|
155
|
-
typeof Reflect === 'object' &&
|
|
156
|
-
typeof Reflect.decorate === 'function'
|
|
157
|
-
)
|
|
158
|
-
r = Reflect.decorate(decorators, target, key, desc);
|
|
159
|
-
else
|
|
160
|
-
for (var i = decorators.length - 1; i >= 0; i--)
|
|
161
|
-
if ((d = decorators[i]))
|
|
162
|
-
r =
|
|
163
|
-
(c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) ||
|
|
164
|
-
r;
|
|
165
|
-
return (c > 3 && r && Object.defineProperty(target, key, r), r);
|
|
166
|
-
};
|
|
167
|
-
var __metadata =
|
|
168
|
-
(this && this.__metadata) ||
|
|
169
|
-
function (k, v) {
|
|
170
|
-
if (
|
|
171
|
-
typeof Reflect === 'object' &&
|
|
172
|
-
typeof Reflect.metadata === 'function'
|
|
173
|
-
)
|
|
174
|
-
return Reflect.metadata(k, v);
|
|
175
|
-
};
|
|
176
|
-
var __param =
|
|
177
|
-
(this && this.__param) ||
|
|
178
|
-
function (paramIndex, decorator) {
|
|
179
|
-
return function (target, key) {
|
|
180
|
-
decorator(target, key, paramIndex);
|
|
181
|
-
};
|
|
182
|
-
};
|
|
183
|
-
var __importDefault =
|
|
184
|
-
(this && this.__importDefault) ||
|
|
185
|
-
function (mod) {
|
|
186
|
-
return mod && mod.__esModule ? mod : { default: mod };
|
|
187
|
-
};
|
|
188
|
-
var _a;
|
|
189
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
190
|
-
exports.KewaGuardService = void 0;
|
|
191
|
-
const common_1 = __webpack_require__(2);
|
|
192
|
-
const ioredis_1 = __importDefault(__webpack_require__(3));
|
|
193
|
-
const constants_1 = __webpack_require__(4);
|
|
194
|
-
let KewaGuardService = class KewaGuardService {
|
|
195
|
-
redis;
|
|
196
|
-
constructor(redis) {
|
|
197
|
-
this.redis = redis;
|
|
198
|
-
}
|
|
199
|
-
onModuleDestroy() {
|
|
200
|
-
this.redis.disconnect();
|
|
201
|
-
}
|
|
202
|
-
async checkLimit(key, limit, ttlSeconds) {
|
|
203
|
-
const now = Date.now();
|
|
204
|
-
const windowStart = now - ttlSeconds * 1000;
|
|
205
|
-
const luaScript = `
|
|
206
|
-
local key = KEYS[1]
|
|
207
|
-
local limit = tonumber(ARGV[1])
|
|
208
|
-
local now = tonumber(ARGV[2])
|
|
209
|
-
local windowStart = tonumber(ARGV[3])
|
|
210
|
-
local ttl = tonumber(ARGV[4])
|
|
211
|
-
|
|
212
|
-
redis.call('ZREMRANGEBYSCORE', key, 0, windowStart)
|
|
213
|
-
|
|
214
|
-
local currentCount = redis.call('ZCARD', key)
|
|
215
|
-
|
|
216
|
-
local allowed = 1
|
|
217
|
-
local remaining = 0
|
|
218
|
-
|
|
219
|
-
if currentCount >= limit then
|
|
220
|
-
allowed = 0
|
|
221
|
-
remaining = 0
|
|
222
|
-
else
|
|
223
|
-
redis.call('ZADD', key, now, now)
|
|
224
|
-
redis.call('EXPIRE', key, ttl)
|
|
225
|
-
allowed = 1
|
|
226
|
-
remaining = limit - (currentCount + 1)
|
|
227
|
-
end
|
|
228
|
-
|
|
229
|
-
local resetAt = math.floor((now + (ttl * 1000)) / 1000)
|
|
230
|
-
|
|
231
|
-
return { allowed, remaining, resetAt }
|
|
232
|
-
`;
|
|
233
|
-
const result = await this.redis.eval(
|
|
234
|
-
luaScript,
|
|
235
|
-
1,
|
|
236
|
-
key,
|
|
237
|
-
limit,
|
|
238
|
-
now,
|
|
239
|
-
windowStart,
|
|
240
|
-
ttlSeconds,
|
|
241
|
-
);
|
|
242
|
-
return {
|
|
243
|
-
allowed: result[0] === 1,
|
|
244
|
-
remaining: result[1],
|
|
245
|
-
resetAt: result[2],
|
|
246
|
-
};
|
|
247
|
-
}
|
|
248
|
-
async ping() {
|
|
249
|
-
return await this.redis.ping();
|
|
250
|
-
}
|
|
251
|
-
getClient() {
|
|
252
|
-
return this.redis;
|
|
253
|
-
}
|
|
254
|
-
};
|
|
255
|
-
exports.KewaGuardService = KewaGuardService;
|
|
256
|
-
exports.KewaGuardService = KewaGuardService = __decorate(
|
|
257
|
-
[
|
|
258
|
-
(0, common_1.Injectable)(),
|
|
259
|
-
__param(0, (0, common_1.Inject)(constants_1.KEWA_REDIS_CLIENT)),
|
|
260
|
-
__metadata('design:paramtypes', [
|
|
261
|
-
typeof (_a =
|
|
262
|
-
typeof ioredis_1.default !== 'undefined' && ioredis_1.default) ===
|
|
263
|
-
'function'
|
|
264
|
-
? _a
|
|
265
|
-
: Object,
|
|
266
|
-
]),
|
|
267
|
-
],
|
|
268
|
-
KewaGuardService,
|
|
269
|
-
);
|
|
270
|
-
|
|
271
|
-
/***/
|
|
272
|
-
},
|
|
273
|
-
/* 6 */
|
|
274
|
-
/***/ (__unused_webpack_module, exports) => {
|
|
275
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
276
|
-
|
|
277
|
-
/***/
|
|
278
|
-
},
|
|
279
|
-
/* 7 */
|
|
280
|
-
/***/ function (__unused_webpack_module, exports, __webpack_require__) {
|
|
281
|
-
var __decorate =
|
|
282
|
-
(this && this.__decorate) ||
|
|
283
|
-
function (decorators, target, key, desc) {
|
|
284
|
-
var c = arguments.length,
|
|
285
|
-
r =
|
|
286
|
-
c < 3
|
|
287
|
-
? target
|
|
288
|
-
: desc === null
|
|
289
|
-
? (desc = Object.getOwnPropertyDescriptor(target, key))
|
|
290
|
-
: desc,
|
|
291
|
-
d;
|
|
292
|
-
if (
|
|
293
|
-
typeof Reflect === 'object' &&
|
|
294
|
-
typeof Reflect.decorate === 'function'
|
|
295
|
-
)
|
|
296
|
-
r = Reflect.decorate(decorators, target, key, desc);
|
|
297
|
-
else
|
|
298
|
-
for (var i = decorators.length - 1; i >= 0; i--)
|
|
299
|
-
if ((d = decorators[i]))
|
|
300
|
-
r =
|
|
301
|
-
(c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) ||
|
|
302
|
-
r;
|
|
303
|
-
return (c > 3 && r && Object.defineProperty(target, key, r), r);
|
|
304
|
-
};
|
|
305
|
-
var __metadata =
|
|
306
|
-
(this && this.__metadata) ||
|
|
307
|
-
function (k, v) {
|
|
308
|
-
if (
|
|
309
|
-
typeof Reflect === 'object' &&
|
|
310
|
-
typeof Reflect.metadata === 'function'
|
|
311
|
-
)
|
|
312
|
-
return Reflect.metadata(k, v);
|
|
313
|
-
};
|
|
314
|
-
var _a, _b;
|
|
315
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
316
|
-
exports.KewaRateLimitGuard = void 0;
|
|
317
|
-
const common_1 = __webpack_require__(2);
|
|
318
|
-
const core_1 = __webpack_require__(8);
|
|
319
|
-
const kewa_rate_limit_decorator_1 = __webpack_require__(9);
|
|
320
|
-
const kewa_guard_service_1 = __webpack_require__(5);
|
|
321
|
-
let KewaRateLimitGuard = class KewaRateLimitGuard {
|
|
322
|
-
reflector;
|
|
323
|
-
kewaGuardService;
|
|
324
|
-
constructor(reflector, kewaGuardService) {
|
|
325
|
-
this.reflector = reflector;
|
|
326
|
-
this.kewaGuardService = kewaGuardService;
|
|
327
|
-
}
|
|
328
|
-
async canActivate(context) {
|
|
329
|
-
const options = this.reflector.get(
|
|
330
|
-
kewa_rate_limit_decorator_1.KEWA_RATE_LIMIT_KEY,
|
|
331
|
-
context.getHandler(),
|
|
332
|
-
);
|
|
333
|
-
if (!options) {
|
|
334
|
-
return true;
|
|
335
|
-
}
|
|
336
|
-
const { limit, ttl } = options;
|
|
337
|
-
const request = context.switchToHttp().getRequest();
|
|
338
|
-
const response = context.switchToHttp().getResponse();
|
|
339
|
-
const ip = request.ip || request.connection.remoteAddress;
|
|
340
|
-
const key = `rate_limit:${ip}:${context.getClass().name}.${context.getHandler().name}`;
|
|
341
|
-
const { allowed, remaining, resetAt } =
|
|
342
|
-
await this.kewaGuardService.checkLimit(key, limit, ttl);
|
|
343
|
-
response.header('X-RateLimit-Limit', limit.toString());
|
|
344
|
-
response.header('X-RateLimit-Remaining', remaining.toString());
|
|
345
|
-
response.header('X-RateLimit-Reset', resetAt.toString());
|
|
346
|
-
if (!allowed) {
|
|
347
|
-
throw new common_1.HttpException(
|
|
348
|
-
{
|
|
349
|
-
statusCode: common_1.HttpStatus.TOO_MANY_REQUESTS,
|
|
350
|
-
error: 'Too Many Requests',
|
|
351
|
-
message: `Você excedeu o limite de ${limit} requisições em ${ttl} segundos.`,
|
|
352
|
-
},
|
|
353
|
-
common_1.HttpStatus.TOO_MANY_REQUESTS,
|
|
354
|
-
);
|
|
355
|
-
}
|
|
356
|
-
return true;
|
|
357
|
-
}
|
|
358
|
-
};
|
|
359
|
-
exports.KewaRateLimitGuard = KewaRateLimitGuard;
|
|
360
|
-
exports.KewaRateLimitGuard = KewaRateLimitGuard = __decorate(
|
|
361
|
-
[
|
|
362
|
-
(0, common_1.Injectable)(),
|
|
363
|
-
__metadata('design:paramtypes', [
|
|
364
|
-
typeof (_a =
|
|
365
|
-
typeof core_1.Reflector !== 'undefined' && core_1.Reflector) ===
|
|
366
|
-
'function'
|
|
367
|
-
? _a
|
|
368
|
-
: Object,
|
|
369
|
-
typeof (_b =
|
|
370
|
-
typeof kewa_guard_service_1.KewaGuardService !== 'undefined' &&
|
|
371
|
-
kewa_guard_service_1.KewaGuardService) === 'function'
|
|
372
|
-
? _b
|
|
373
|
-
: Object,
|
|
374
|
-
]),
|
|
375
|
-
],
|
|
376
|
-
KewaRateLimitGuard,
|
|
377
|
-
);
|
|
378
|
-
|
|
379
|
-
/***/
|
|
380
|
-
},
|
|
381
|
-
/* 8 */
|
|
382
|
-
/***/ (module) => {
|
|
383
|
-
module.exports = require('@nestjs/core');
|
|
384
|
-
|
|
385
|
-
/***/
|
|
386
|
-
},
|
|
387
|
-
/* 9 */
|
|
388
|
-
/***/ (__unused_webpack_module, exports, __webpack_require__) => {
|
|
389
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
390
|
-
exports.KewaRateLimit = exports.KEWA_RATE_LIMIT_KEY = void 0;
|
|
391
|
-
const common_1 = __webpack_require__(2);
|
|
392
|
-
exports.KEWA_RATE_LIMIT_KEY = 'kewa_rate_limit_key';
|
|
393
|
-
const KewaRateLimit = (options) =>
|
|
394
|
-
(0, common_1.SetMetadata)(exports.KEWA_RATE_LIMIT_KEY, options);
|
|
395
|
-
exports.KewaRateLimit = KewaRateLimit;
|
|
396
|
-
|
|
397
|
-
/***/
|
|
398
|
-
},
|
|
399
|
-
/******/
|
|
400
|
-
];
|
|
401
|
-
/************************************************************************/
|
|
402
|
-
/******/ // The module cache
|
|
403
|
-
/******/ var __webpack_module_cache__ = {};
|
|
404
|
-
/******/
|
|
405
|
-
/******/ // The require function
|
|
406
|
-
/******/ function __webpack_require__(moduleId) {
|
|
407
|
-
/******/ // Check if module is in cache
|
|
408
|
-
/******/ var cachedModule = __webpack_module_cache__[moduleId];
|
|
409
|
-
/******/ if (cachedModule !== undefined) {
|
|
410
|
-
/******/ return cachedModule.exports;
|
|
411
|
-
/******/
|
|
412
|
-
}
|
|
413
|
-
/******/ // Create a new module (and put it into the cache)
|
|
414
|
-
/******/ var module = (__webpack_module_cache__[moduleId] = {
|
|
415
|
-
/******/ // no module.id needed
|
|
416
|
-
/******/ // no module.loaded needed
|
|
417
|
-
/******/ exports: {},
|
|
418
|
-
/******/
|
|
419
|
-
});
|
|
420
|
-
/******/
|
|
421
|
-
/******/ // Execute the module function
|
|
422
|
-
/******/ __webpack_modules__[moduleId].call(
|
|
423
|
-
module.exports,
|
|
424
|
-
module,
|
|
425
|
-
module.exports,
|
|
426
|
-
__webpack_require__,
|
|
427
|
-
);
|
|
428
|
-
/******/
|
|
429
|
-
/******/ // Return the exports of the module
|
|
430
|
-
/******/ return module.exports;
|
|
431
|
-
/******/
|
|
432
|
-
}
|
|
433
|
-
/******/
|
|
434
|
-
/************************************************************************/
|
|
435
|
-
/******/
|
|
436
|
-
/******/ // startup
|
|
437
|
-
/******/ // Load entry module and return exports
|
|
438
|
-
/******/ // This entry module is referenced by other modules so it can't be inlined
|
|
439
|
-
/******/ var __webpack_exports__ = __webpack_require__(0);
|
|
440
|
-
/******/
|
|
441
|
-
/******/
|
|
442
|
-
})();
|