Jaymr/new-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(rate-limit): add user critical rate limit middleware for access token and aff transfer routes

Browse Source
This commit is contained in:
CaIon
2026-08-07 16:01:22 +08:00
parent b941253aea
commit 1da23d6b33
2 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
middleware/rate-limit.go
+11
View File
@@ -178,6 +178,17 @@ func CriticalRateLimit() func(c *gin.Context) {
return defNext
}
func UserCriticalRateLimit(scope string) func(c *gin.Context) {
if !common.CriticalRateLimitEnable {
return defNext
}
return userRateLimitFactory(
common.CriticalRateLimitNum,
common.CriticalRateLimitDuration,
"UC:"+scope,
)
}
func DownloadRateLimit() func(c *gin.Context) {
return rateLimitFactory(common.DownloadRateLimitNum, common.DownloadRateLimitDuration, "DW")
}
router/api-router.go
+2 -2
View File
@@ -90,7 +90,7 @@ func SetApiRouter(router *gin.Engine) {
selfRoute.GET("/models", controller.GetUserModels)
selfRoute.PUT("/self", middleware.CriticalRateLimit(), middleware.DisableCache(), controller.UpdateSelf)
selfRoute.DELETE("/self", controller.DeleteSelf)
selfRoute.GET("/token", middleware.CriticalRateLimit(), middleware.DisableCache(), controller.GenerateAccessToken)
selfRoute.GET("/token", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), middleware.DisableCache(), controller.GenerateAccessToken)
selfRoute.GET("/passkey", controller.PasskeyStatus)
selfRoute.POST("/passkey/register/begin", middleware.DisableCache(), controller.PasskeyRegisterBegin)
selfRoute.POST("/passkey/register/finish", middleware.DisableCache(), controller.PasskeyRegisterFinish)
@@ -110,7 +110,7 @@ func SetApiRouter(router *gin.Engine) {
selfRoute.POST("/waffo/pay", middleware.CriticalRateLimit(), controller.RequestWaffoPay)
selfRoute.POST("/waffo-pancake/amount", controller.RequestWaffoPancakeAmount)
selfRoute.POST("/waffo-pancake/pay", middleware.CriticalRateLimit(), controller.RequestWaffoPancakePay)
selfRoute.POST("/aff_transfer", controller.TransferAffQuota)
selfRoute.POST("/aff_transfer", middleware.UserCriticalRateLimit("aff-transfer"), controller.TransferAffQuota)
selfRoute.PUT("/setting", controller.UpdateUserSetting)
// 2FA routes