generated from coulomb/repo-seed
Bernd Worsch
f1978c3888
A2 — Compilation fixes: - Remove inline FK constraints from Schema.sql; IHP schema compiler cannot parse them. Add 1744329600-restore-fk-constraints.sql migration to restore referential integrity at the DB level. - Rename `#label` → `#label_` throughout to avoid clash with Haskell built-in. - Fix `hub.id == hid` UUID comparisons to use `toUUID hub.id`. - Replace non-existent `setStatus`/`respondJson` calls with `renderJsonWithStatusCode` throughout Api controllers. - Fix qualified package import for `cryptohash-sha256` in Auth.hs. - Add `CanSelect (Text, Text)` instance in Helper.View. - Refactor HSX inline lambdas to named helper functions in 100+ views (GHC cannot infer types for anonymous functions inside quasi-quoted HSX). - Fix missing imports (IHP.QueryBuilder, IHP.Fetch, Web.Routes, Only, etc.) across helpers and controllers. - Remove duplicate `diffUTCTime` definition in BottleneckDetector. - Change `createEventForHub` return type from `IO ResponseReceived` to `IO ()`. - Seed type-registry vocabulary via 1744502400-seed-type-registries.sql (moved from Schema.sql where IHP does not execute INSERT statements). A3 — Tailwind build pipeline: - Add `tailwindcss` to flake.nix native packages. - Uncomment `tailwind.exec` process in devenv shell config. - Add tailwind/tailwind.config.js (scans Web/View/**/*.hs). - Add tailwind/app.css with @tailwind directives. A4 — Admin user seed: - Add 1744416000-seed-admin-user.sql: inserts admin@inter-hub.local with bcrypt-hashed password admin1234! (cost 10). - Add .env.example documenting all required environment variables and default admin credentials. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
67 lines
2.4 KiB
Haskell
67 lines
2.4 KiB
Haskell
module Application.Helper.ApiRateLimit where
|
|
|
|
-- Rate limiting and request logging for /api/v2/ endpoints.
|
|
-- Called before action dispatch in all ApiV2* controllers.
|
|
|
|
import Generated.Types
|
|
import IHP.Prelude
|
|
import IHP.ModelSupport
|
|
import IHP.ControllerPrelude
|
|
import Web.Routes ()
|
|
import Data.Aeson (object, (.=))
|
|
import Database.PostgreSQL.Simple (Only(..))
|
|
import Web.Controller.Api.V2.Auth (respondWithStatus)
|
|
|
|
-- | Log a request to api_request_log and enforce rate limit / quota.
|
|
-- Returns () on success; calls respondWithStatus and exits on limit exceeded.
|
|
checkRateLimitAndLog ::
|
|
( ?context :: ControllerContext
|
|
, ?modelContext :: ModelContext
|
|
, ?respond :: Respond
|
|
, ?request :: Request
|
|
) =>
|
|
ApiConsumer ->
|
|
Text -> -- endpoint path
|
|
Text -> -- HTTP method
|
|
Int -> -- response status code (0 if not yet known; log after)
|
|
IO ()
|
|
checkRateLimitAndLog consumer endpoint method _statusCode = do
|
|
-- Check rate limit: requests in last 60 seconds
|
|
rows1 <- sqlQuery
|
|
"SELECT COUNT(*) FROM api_request_log \
|
|
\WHERE api_consumer_id = ? AND requested_at >= NOW() - INTERVAL '60 seconds'"
|
|
(Only consumer.id)
|
|
let reqCount = case rows1 of
|
|
[Only (n :: Int)] -> n
|
|
_ -> 0
|
|
|
|
when (reqCount >= consumer.rateLimitPerMinute) do
|
|
respondWithStatus 429 $ object
|
|
[ "error" .= ("Rate limit exceeded" :: Text)
|
|
, "code" .= ("rate_limited" :: Text)
|
|
, "retry_after" .= (60 :: Int)
|
|
]
|
|
|
|
-- Check daily quota
|
|
rows2 <- sqlQuery
|
|
"SELECT COUNT(*) FROM api_request_log \
|
|
\WHERE api_consumer_id = ? AND requested_at >= ? - INTERVAL '1 day'"
|
|
(consumer.id, consumer.quotaResetsAt)
|
|
let quotaUsed = case rows2 of
|
|
[Only (n :: Int)] -> n
|
|
_ -> 0
|
|
|
|
when (quotaUsed >= consumer.quotaPerDay) do
|
|
respondWithStatus 429 $ object
|
|
[ "error" .= ("Daily quota exceeded" :: Text)
|
|
, "code" .= ("quota_exceeded" :: Text)
|
|
, "quota_resets_at" .= consumer.quotaResetsAt
|
|
]
|
|
|
|
-- Log the request (status_code will be 0 here; update after response)
|
|
sqlExec
|
|
"INSERT INTO api_request_log (id, api_consumer_id, endpoint, method, status_code, requested_at) \
|
|
\VALUES (uuid_generate_v4(), ?, ?, ?, 200, NOW())"
|
|
(consumer.id, endpoint, method)
|
|
pure ()
|