renil/lx-music-api-server
1
0
Fork 0
mirror of https://github.com/MeoProject/lx-music-api-server.git synced 2025-05-23 19:17:41 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: 请求速率限制逻辑

Browse Source
This commit is contained in:
helloplhm-qwq 2023-11-26 12:49:10 +08:00
parent 240b443dc2
commit 208199a88c
No known key found for this signature in database
GPG Key ID: 6BE1B64B905567C7
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
common/config.py
View File

@ -66,6 +66,11 @@ default = {
"_proxy-desc": "代理配置，HTTP与HTTPS协议需分开配置", "_proxy-desc": "代理配置，HTTP与HTTPS协议需分开配置",
}, },
"security": { "security": {
"rate_limit": {
"global": 0,
"ip": 0,
"desc": "请求速率限制，global为全局，ip为单个ip，填入的值为至少间隔多久才能进行一次请求，单位：秒，不限制请填为0"
}
"key": { "key": {
"enable": False, "enable": False,
"_enable-desc": "是否开启请求key，开启后只有请求头中包含key，且值一样时可以访问API", "_enable-desc": "是否开启请求key，开启后只有请求头中包含key，且值一样时可以访问API",

15
main.py
View File

@ -30,6 +30,7 @@ from common import lxsecurity
from common import Httpx from common import Httpx
from apis import SongURL from apis import SongURL
import traceback import traceback
import time
Httpx.checkcn() Httpx.checkcn()
@app.route('/') @app.route('/')
@ -75,7 +76,21 @@ def check():
# check ip # check ip
if (config.check_ip_banned(request.remote_addr)): if (config.check_ip_banned(request.remote_addr)):
return utils.format_dict_json({"code": 1, "msg": "您的IP已被封禁", "data": None}), 403 return utils.format_dict_json({"code": 1, "msg": "您的IP已被封禁", "data": None}), 403
# check global rate limit
if (
(config.getRequestTime('global') - time.time())
<
(config.read_config("security.rate_limit.global"))
):
return utils.format_dict_json({"code": 5, "msg": "全局限速", "data": None}), 429
if (
(config.getRequestTime(request.remote_addr) - time.time())
<
(config.read_config("security.rate_limit.ip"))
):
return utils.format_dict_json({"code": 5, "msg": "IP限速", "data": None}), 429
# update request time # update request time
config.updateRequestTime('global')
config.updateRequestTime(request.remote_addr) config.updateRequestTime(request.remote_addr)
# check host # check host
if (config.read_config("security.allowed_host.enable")): if (config.read_config("security.allowed_host.enable")):