f52313e7c6
- Added AccessControl to ComboHandler for role-based access management. - Implemented gas estimation for plan execution and improved gas limit checks. - Updated execution and preparation methods to enforce step count limits and role restrictions. - Enhanced error handling in orchestrator API endpoints with AppError for better validation feedback. - Integrated request timeout middleware for improved request management. - Updated Swagger documentation to reflect new API structure and parameters.
54 lines
1.5 KiB
TypeScript
54 lines
1.5 KiB
TypeScript
import { Request, Response, NextFunction } from "express";
|
|
|
|
interface ThrottleConfig {
|
|
windowMs: number;
|
|
maxRequests: number;
|
|
}
|
|
|
|
const throttleConfigs: Map<string, ThrottleConfig> = new Map();
|
|
const requestCounts: Map<string, { count: number; resetAt: number }> = new Map();
|
|
|
|
/**
|
|
* API throttling middleware
|
|
*/
|
|
export function apiThrottle(config: ThrottleConfig) {
|
|
return (req: Request, res: Response, next: NextFunction) => {
|
|
const key = req.headers["x-api-key"] as string || req.ip || "unknown";
|
|
const now = Date.now();
|
|
|
|
let record = requestCounts.get(key);
|
|
if (!record || now > record.resetAt) {
|
|
record = {
|
|
count: 0,
|
|
resetAt: now + config.windowMs,
|
|
};
|
|
requestCounts.set(key, record);
|
|
}
|
|
|
|
record.count++;
|
|
|
|
// Set rate limit headers
|
|
res.setHeader("X-RateLimit-Limit", config.maxRequests.toString());
|
|
res.setHeader("X-RateLimit-Remaining", Math.max(0, config.maxRequests - record.count).toString());
|
|
res.setHeader("X-RateLimit-Reset", new Date(record.resetAt).toISOString());
|
|
|
|
if (record.count > config.maxRequests) {
|
|
return res.status(429).json({
|
|
error: "Rate limit exceeded",
|
|
message: `Maximum ${config.maxRequests} requests per ${config.windowMs}ms`,
|
|
retryAfter: Math.ceil((record.resetAt - now) / 1000),
|
|
});
|
|
}
|
|
|
|
next();
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Set throttle configuration for a route
|
|
*/
|
|
export function setThrottleConfig(path: string, config: ThrottleConfig) {
|
|
throttleConfigs.set(path, config);
|
|
}
|
|
|