| | | 1 | | using System.Text.Json; |
| | | 2 | | using System.Threading.RateLimiting; |
| | | 3 | | |
| | | 4 | | namespace Syki.Back.Configs; |
| | | 5 | | |
| | | 6 | | public static class RateLimitingConfigs |
| | | 7 | | { |
| | | 8 | | public const string SensitivePolicy = nameof(SensitivePolicy); |
| | | 9 | | |
| | | 10 | | public static void AddRateLimitingConfigs(this WebApplicationBuilder builder) |
| | | 11 | | { |
| | 2 | 12 | | var settings = builder.Configuration.RateLimiting; |
| | | 13 | | |
| | 2 | 14 | | builder.Services.AddRateLimiter(options => |
| | 2 | 15 | | { |
| | 2 | 16 | | options.GlobalLimiter = PartitionedRateLimiter.Create<HttpContext, string>(context => |
| | 2 | 17 | | { |
| | 1412 | 18 | | var userId = context.User?.Id; |
| | 1412 | 19 | | var partitionKey = userId != null |
| | 1412 | 20 | | ? $"user_{userId}" |
| | 1412 | 21 | | : $"ip_{context.Connection.RemoteIpAddress}"; |
| | 2 | 22 | | |
| | 1414 | 23 | | return RateLimitPartition.GetFixedWindowLimiter(partitionKey, _ => new FixedWindowRateLimiterOptions |
| | 1414 | 24 | | { |
| | 1414 | 25 | | QueueLimit = settings.QueueLimit, |
| | 1414 | 26 | | PermitLimit = settings.GlobalPermitLimit, |
| | 1414 | 27 | | Window = TimeSpan.FromSeconds(settings.GlobalWindowInSeconds), |
| | 1414 | 28 | | }); |
| | 2 | 29 | | }); |
| | 2 | 30 | | |
| | 2 | 31 | | options.AddPolicy(SensitivePolicy, context => |
| | 2 | 32 | | { |
| | 754 | 33 | | var partitionKey = $"ip_{context.Connection.RemoteIpAddress}"; |
| | 2 | 34 | | |
| | 756 | 35 | | return RateLimitPartition.GetFixedWindowLimiter(partitionKey, _ => new FixedWindowRateLimiterOptions |
| | 756 | 36 | | { |
| | 756 | 37 | | QueueLimit = settings.QueueLimit, |
| | 756 | 38 | | PermitLimit = settings.SensitivePermitLimit, |
| | 756 | 39 | | Window = TimeSpan.FromSeconds(settings.SensitiveWindowInSeconds), |
| | 756 | 40 | | }); |
| | 2 | 41 | | }); |
| | 2 | 42 | | |
| | 2 | 43 | | options.OnRejected = async (context, cancellationToken) => |
| | 2 | 44 | | { |
| | 0 | 45 | | context.HttpContext.Response.ContentType = "application/json"; |
| | 0 | 46 | | context.HttpContext.Response.StatusCode = StatusCodes.Status429TooManyRequests; |
| | 2 | 47 | | |
| | 0 | 48 | | if (context.Lease.TryGetMetadata(MetadataName.RetryAfter, out var retryAfter)) |
| | 2 | 49 | | { |
| | 0 | 50 | | context.HttpContext.Response.Headers.RetryAfter = ((int)retryAfter.TotalSeconds).ToString(); |
| | 2 | 51 | | } |
| | 2 | 52 | | |
| | 0 | 53 | | await context.HttpContext.Response.WriteAsync(JsonSerializer.Serialize(TooManyRequests.I), cancellationT |
| | 2 | 54 | | }; |
| | 4 | 55 | | }); |
| | 2 | 56 | | } |
| | | 57 | | |
| | | 58 | | public static void UseRateLimiting(this IApplicationBuilder app) |
| | | 59 | | { |
| | 2 | 60 | | app.UseRateLimiter(); |
| | 2 | 61 | | } |
| | | 62 | | } |