platform/lib/src/rate_limiter.dart

39 lines
1.4 KiB
Dart
Raw Normal View History

2019-08-14 18:49:14 +00:00
import 'dart:async';
2019-08-14 18:46:53 +00:00
import 'package:angel_framework/angel_framework.dart';
2019-08-14 19:09:48 +00:00
import 'package:angel_security/angel_security.dart';
import 'rate_limiting_window.dart';
2019-08-14 18:46:53 +00:00
/// A base class that facilitates rate limiting API's or endpoints,
/// typically to prevent spam and abuse.
2019-08-14 18:49:14 +00:00
///
/// The rate limiter operates under the assumption that a [User] object
/// can be computed from each request, as well as information about
/// the current rate-limiting window.
abstract class RateLimiter<User> {
2019-08-14 18:46:53 +00:00
/// The maximum number of requests allowed within the given [window].
final int maxRequestsPerWindow;
/// The amount of time, during which, a user is not allowed to send
/// more than [maxRequestsPerWindow].
final Duration window;
RateLimiter(this.maxRequestsPerWindow, this.window);
2019-08-14 19:09:48 +00:00
/// Computes the current window in which the user is acting.
///
/// For example, if your API was limited to 1000 requests/hour,
/// then you would return a window containing the current hour,
/// and the number of requests the user has sent in the past hour.
FutureOr<RateLimitingWindow<User>> getCurrentWindow(
RequestContext req, ResponseContext res);
/// Updates the underlying store with information about the
/// [newWindow] that the user is operating in.
FutureOr<void> updateCurrentWindow(RequestContext req, ResponseContext res,
RateLimitingWindow<User> newWindow);
FutureOr<Object> denyRequest(RequestContext req, ResponseContext res) {
}
2019-08-14 18:46:53 +00:00
}