- Resume scroll position only when arriving via 继续阅读 (?resume=1).
Plain chapter-list / drawer clicks now actively scroll to top on mount.
- Progress format extended to {chapter, page, ratio} for within-page
precision; legacy bare-number and {chapter, page} still read correctly.
- Tappable skeleton logo (sunflower outline, spins) while a page loads;
tap force-fetches a fresh signed URL.
- Viewport-priority image loading: second IntersectionObserver at margin 0
marks truly-visible pages, drives <img fetchpriority="high"> and fires
immediate single-page fetches that cut the batch queue.
- Bounded image cache: unmount previous chapter's <img> elements when
currentPage > 5 into the new chapter; placeholders stay for layout.
One AbortController per live chapter; unmount aborts in-flight batches.
- Hashed chapter IDs on the wire via hashids; DB PKs unchanged.
- Origin/Referer allowlist + rate limiting on all /api/* routes via a
withGuards(opts, handler) wrapper (eliminates 6-line boilerplate x5).
- robots.txt allows Googlebot/Bingbot/Slurp/DuckDuckBot/Baiduspider/
YandexBot only; disallows /api/ for all UAs.
- Extract pure helpers for future TDD: lib/scroll-ratio.ts (calcScrollRatio,
scrollOffsetFromRatio), lib/progress.ts (parseProgress + injectable
StorageLike), lib/rate-limit.ts (optional { now, store, ipOf } deps),
lib/api-guards.ts.
- New env keys: HASHIDS_SALT, ALLOWED_ORIGINS (wired into docker-compose).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
61 lines
1.6 KiB
TypeScript
61 lines
1.6 KiB
TypeScript
export type Bucket = { count: number; resetAt: number };
|
|
|
|
export type RateLimitStore = Pick<
|
|
Map<string, Bucket>,
|
|
"get" | "set" | "delete" | "size"
|
|
> & {
|
|
[Symbol.iterator](): IterableIterator<[string, Bucket]>;
|
|
};
|
|
|
|
export type RateLimitDeps = {
|
|
now?: () => number;
|
|
store?: RateLimitStore;
|
|
ipOf?: (request: Request) => string;
|
|
};
|
|
|
|
const defaultStore: RateLimitStore = new Map<string, Bucket>();
|
|
|
|
function defaultIpOf(request: Request): string {
|
|
const fwd = request.headers.get("x-forwarded-for");
|
|
if (fwd) return fwd.split(",")[0].trim();
|
|
const real = request.headers.get("x-real-ip");
|
|
if (real) return real.trim();
|
|
return "unknown";
|
|
}
|
|
|
|
export function checkRateLimit(
|
|
request: Request,
|
|
opts: { key: string; limit: number; windowMs: number },
|
|
deps: RateLimitDeps = {}
|
|
): Response | null {
|
|
const now = (deps.now ?? Date.now)();
|
|
const store = deps.store ?? defaultStore;
|
|
const ip = (deps.ipOf ?? defaultIpOf)(request);
|
|
const bucketKey = `${opts.key}:${ip}`;
|
|
const bucket = store.get(bucketKey);
|
|
|
|
if (!bucket || now >= bucket.resetAt) {
|
|
store.set(bucketKey, { count: 1, resetAt: now + opts.windowMs });
|
|
if (store.size > 10000) {
|
|
for (const [k, b] of store) {
|
|
if (b.resetAt <= now) store.delete(k);
|
|
}
|
|
}
|
|
return null;
|
|
}
|
|
|
|
if (bucket.count >= opts.limit) {
|
|
const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);
|
|
return Response.json(
|
|
{ error: "Too many requests" },
|
|
{
|
|
status: 429,
|
|
headers: { "Retry-After": String(retryAfter) },
|
|
}
|
|
);
|
|
}
|
|
|
|
bucket.count += 1;
|
|
return null;
|
|
}
|