8eccd3658e
* Introduce rate limiting that works on the edge * typo * Log once on init * Update rateLimit.ts --------- Co-authored-by: zomars <zomars@me.com>
41 lines
1.3 KiB
TypeScript
41 lines
1.3 KiB
TypeScript
import type { NextApiRequest } from "next";
|
|
import z from "zod";
|
|
|
|
export function parseIpFromHeaders(value: string | string[]) {
|
|
return Array.isArray(value) ? value[0] : value.split(",")[0];
|
|
}
|
|
|
|
/**
|
|
* Tries to extract IP address from a request
|
|
* @see https://github.com/vercel/examples/blob/main/edge-functions/ip-blocking/lib/get-ip.ts
|
|
**/
|
|
export default function getIP(request: Request | NextApiRequest) {
|
|
const xff =
|
|
request instanceof Request ? request.headers.get("x-forwarded-for") : request.headers["x-forwarded-for"];
|
|
|
|
return xff ? parseIpFromHeaders(xff) : "127.0.0.1";
|
|
}
|
|
|
|
const banlistSchema = z.array(z.string());
|
|
|
|
export function isIpInBanlist(request: Request | NextApiRequest) {
|
|
const IP = getIP(request);
|
|
const rawBanListJson = process.env.IP_BANLIST || "[]";
|
|
const banList = banlistSchema.parse(JSON.parse(rawBanListJson));
|
|
if (banList.includes(IP)) {
|
|
console.log(`Found banned IP: ${IP} in IP_BANLIST`);
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
export function isIpInBanListString(identifer: string) {
|
|
const rawBanListJson = process.env.IP_BANLIST || "[]";
|
|
const banList = banlistSchema.parse(JSON.parse(rawBanListJson));
|
|
if (banList.includes(identifer)) {
|
|
console.log(`Found banned IP: ${identifer} in IP_BANLIST`);
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|