sunnymh-manga-site/lib/rate-limit.ts
yiekheng b993de43bc Reader: fix resume bug, add loading skeleton, scraping protection, bounded image cache
- Resume scroll position only when arriving via 继续阅读 (?resume=1).
  Plain chapter-list / drawer clicks now actively scroll to top on mount.
- Progress format extended to {chapter, page, ratio} for within-page
  precision; legacy bare-number and {chapter, page} still read correctly.
- Tappable skeleton logo (sunflower outline, spins) while a page loads;
  tap force-fetches a fresh signed URL.
- Viewport-priority image loading: second IntersectionObserver at margin 0
  marks truly-visible pages, drives <img fetchpriority="high"> and fires
  immediate single-page fetches that cut the batch queue.
- Bounded image cache: unmount previous chapter's <img> elements when
  currentPage > 5 into the new chapter; placeholders stay for layout.
  One AbortController per live chapter; unmount aborts in-flight batches.
- Hashed chapter IDs on the wire via hashids; DB PKs unchanged.
- Origin/Referer allowlist + rate limiting on all /api/* routes via a
  withGuards(opts, handler) wrapper (eliminates 6-line boilerplate x5).
- robots.txt allows Googlebot/Bingbot/Slurp/DuckDuckBot/Baiduspider/
  YandexBot only; disallows /api/ for all UAs.
- Extract pure helpers for future TDD: lib/scroll-ratio.ts (calcScrollRatio,
  scrollOffsetFromRatio), lib/progress.ts (parseProgress + injectable
  StorageLike), lib/rate-limit.ts (optional { now, store, ipOf } deps),
  lib/api-guards.ts.
- New env keys: HASHIDS_SALT, ALLOWED_ORIGINS (wired into docker-compose).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-15 21:48:15 +08:00

61 lines
1.6 KiB
TypeScript

export type Bucket = { count: number; resetAt: number };
export type RateLimitStore = Pick<
Map<string, Bucket>,
"get" | "set" | "delete" | "size"
> & {
[Symbol.iterator](): IterableIterator<[string, Bucket]>;
};
export type RateLimitDeps = {
now?: () => number;
store?: RateLimitStore;
ipOf?: (request: Request) => string;
};
const defaultStore: RateLimitStore = new Map<string, Bucket>();
function defaultIpOf(request: Request): string {
const fwd = request.headers.get("x-forwarded-for");
if (fwd) return fwd.split(",")[0].trim();
const real = request.headers.get("x-real-ip");
if (real) return real.trim();
return "unknown";
}
export function checkRateLimit(
request: Request,
opts: { key: string; limit: number; windowMs: number },
deps: RateLimitDeps = {}
): Response | null {
const now = (deps.now ?? Date.now)();
const store = deps.store ?? defaultStore;
const ip = (deps.ipOf ?? defaultIpOf)(request);
const bucketKey = `${opts.key}:${ip}`;
const bucket = store.get(bucketKey);
if (!bucket || now >= bucket.resetAt) {
store.set(bucketKey, { count: 1, resetAt: now + opts.windowMs });
if (store.size > 10000) {
for (const [k, b] of store) {
if (b.resetAt <= now) store.delete(k);
}
}
return null;
}
if (bucket.count >= opts.limit) {
const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);
return Response.json(
{ error: "Too many requests" },
{
status: 429,
headers: { "Retry-After": String(retryAfter) },
}
);
}
bucket.count += 1;
return null;
}