feat: 请求速率限制逻辑

This commit is contained in:
helloplhm-qwq 2023-11-26 12:49:10 +08:00
parent 240b443dc2
commit 208199a88c
No known key found for this signature in database
GPG Key ID: 6BE1B64B905567C7
2 changed files with 20 additions and 0 deletions

View File

@ -66,6 +66,11 @@ default = {
"_proxy-desc": "代理配置HTTP与HTTPS协议需分开配置",
},
"security": {
"rate_limit": {
"global": 0,
"ip": 0,
"desc": "请求速率限制global为全局ip为单个ip填入的值为至少间隔多久才能进行一次请求单位不限制请填为0"
}
"key": {
"enable": False,
"_enable-desc": "是否开启请求key开启后只有请求头中包含key且值一样时可以访问API",

15
main.py
View File

@ -30,6 +30,7 @@ from common import lxsecurity
from common import Httpx
from apis import SongURL
import traceback
import time
Httpx.checkcn()
@app.route('/')
@ -75,7 +76,21 @@ def check():
# check ip
if (config.check_ip_banned(request.remote_addr)):
return utils.format_dict_json({"code": 1, "msg": "您的IP已被封禁", "data": None}), 403
# check global rate limit
if (
(config.getRequestTime('global') - time.time())
<
(config.read_config("security.rate_limit.global"))
):
return utils.format_dict_json({"code": 5, "msg": "全局限速", "data": None}), 429
if (
(config.getRequestTime(request.remote_addr) - time.time())
<
(config.read_config("security.rate_limit.ip"))
):
return utils.format_dict_json({"code": 5, "msg": "IP限速", "data": None}), 429
# update request time
config.updateRequestTime('global')
config.updateRequestTime(request.remote_addr)
# check host
if (config.read_config("security.allowed_host.enable")):