| | | 1 | | using System.Threading.RateLimiting; |
| | | 2 | | using Elsa.ExternalAuthentication.Constants; |
| | | 3 | | using Microsoft.AspNetCore.Http; |
| | | 4 | | using Microsoft.AspNetCore.RateLimiting; |
| | | 5 | | using Microsoft.Extensions.Options; |
| | | 6 | | |
| | | 7 | | namespace Elsa.ExternalAuthentication.Options; |
| | | 8 | | |
| | 1 | 9 | | public sealed class ConfigureExternalAuthenticationRateLimiterOptions(IOptions<ExternalAuthenticationOptions> externalAu |
| | | 10 | | { |
| | | 11 | | public void Configure(RateLimiterOptions options) |
| | | 12 | | { |
| | 1 | 13 | | var rateLimits = externalAuthenticationOptions.Value.RateLimits; |
| | 1 | 14 | | AddPolicy(options, ExternalAuthenticationRateLimitPolicyNames.Discovery, rateLimits.Discovery, rateLimits.Partit |
| | 1 | 15 | | AddPolicy(options, ExternalAuthenticationRateLimitPolicyNames.ExternalInitiation, rateLimits.ExternalInitiation, |
| | 1 | 16 | | AddPolicy(options, ExternalAuthenticationRateLimitPolicyNames.LocalInitiation, rateLimits.LocalInitiation, rateL |
| | 1 | 17 | | AddPolicy(options, ExternalAuthenticationRateLimitPolicyNames.ProviderCallback, rateLimits.ProviderCallback, rat |
| | 1 | 18 | | AddPolicy(options, ExternalAuthenticationRateLimitPolicyNames.TokenExchange, rateLimits.TokenExchange, rateLimit |
| | | 19 | | |
| | 1 | 20 | | var previousOnRejected = options.OnRejected; |
| | 1 | 21 | | options.OnRejected = async (context, cancellationToken) => |
| | 1 | 22 | | { |
| | 0 | 23 | | context.HttpContext.Response.StatusCode = StatusCodes.Status429TooManyRequests; |
| | 0 | 24 | | if (context.Lease.TryGetMetadata(MetadataName.RetryAfter, out var retryAfter)) |
| | 0 | 25 | | context.HttpContext.Response.Headers.RetryAfter = Math.Ceiling(retryAfter.TotalSeconds).ToString(System. |
| | 1 | 26 | | |
| | 0 | 27 | | if (previousOnRejected != null) |
| | 0 | 28 | | await previousOnRejected(context, cancellationToken); |
| | 1 | 29 | | }; |
| | 1 | 30 | | } |
| | | 31 | | |
| | | 32 | | private static void AddPolicy(RateLimiterOptions options, string name, RateLimitRule rule, ExternalAuthenticationRat |
| | | 33 | | { |
| | 5 | 34 | | options.AddPolicy(name, context => RateLimitPartition.GetFixedWindowLimiter( |
| | 5 | 35 | | GetPartitionKey(context, partitionStrategy), |
| | 5 | 36 | | _ => new FixedWindowRateLimiterOptions |
| | 5 | 37 | | { |
| | 5 | 38 | | PermitLimit = rule.PermitLimit, |
| | 5 | 39 | | Window = rule.Window, |
| | 5 | 40 | | QueueLimit = 0, |
| | 5 | 41 | | QueueProcessingOrder = QueueProcessingOrder.OldestFirst, |
| | 5 | 42 | | AutoReplenishment = true |
| | 5 | 43 | | })); |
| | 5 | 44 | | } |
| | | 45 | | |
| | | 46 | | private static string GetPartitionKey(HttpContext context, ExternalAuthenticationRateLimitPartitionStrategy partitio |
| | | 47 | | { |
| | 0 | 48 | | var remoteIp = context.Connection.RemoteIpAddress?.ToString() ?? "unknown"; |
| | 0 | 49 | | if (partitionStrategy != ExternalAuthenticationRateLimitPartitionStrategy.ClientIdAndRemoteIp) |
| | 0 | 50 | | return remoteIp; |
| | | 51 | | |
| | 0 | 52 | | var clientId = context.Request.Query["client_id"].FirstOrDefault(); |
| | 0 | 53 | | return string.IsNullOrWhiteSpace(clientId) ? remoteIp : $"{remoteIp}:{clientId}"; |
| | | 54 | | } |
| | | 55 | | } |