admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
53 lines
1.7 KiB
TypeScript
53 lines
1.7 KiB
TypeScript
import type { SupabaseClient } from '@supabase/supabase-js'
|
|
|
|
/**
|
|
* Per-company rate limiter for document-inbox ingestion. Backed by the
|
|
* `check_and_increment_inbox_quota` Postgres RPC (atomic check + increment),
|
|
* not Upstash: keeps the limiter on the same shared distributed store the
|
|
* rest of the app already hits, and works without extra env vars on Vercel
|
|
* and Docker self-hosters alike.
|
|
*
|
|
* Both windows are per-company:
|
|
* - MINUTE_MAX: a real user could only ever hit this with a script or by
|
|
* holding the upload button. The defense is against burst floods.
|
|
* - DAY_MAX: the backstop against slow drip abuse. A legitimate end-of-
|
|
* month batch is well under this number.
|
|
*/
|
|
export interface InboxLimitResult {
|
|
ok: boolean
|
|
retryAfterSec?: number
|
|
scope?: 'minute' | 'day'
|
|
}
|
|
|
|
const MINUTE_MAX = 30
|
|
const DAY_MAX = 500
|
|
|
|
export async function checkInboxUploadRateLimit(
|
|
supabase: SupabaseClient,
|
|
companyId: string,
|
|
): Promise<InboxLimitResult> {
|
|
const { data, error } = await supabase.rpc('check_and_increment_inbox_quota', {
|
|
p_company_id: companyId,
|
|
p_minute_max: MINUTE_MAX,
|
|
p_day_max: DAY_MAX,
|
|
})
|
|
if (error) {
|
|
// Fail open on infra error. The limiter is defense-in-depth: per-file
|
|
// size + MIME checks still apply on the upload route. Better to accept
|
|
// an upload than 500 a real user because Postgres blipped.
|
|
console.error('[inbox-rate-limit] RPC failed:', error)
|
|
return { ok: true }
|
|
}
|
|
// RPC returns jsonb_build_object payload. The JS client decodes as object.
|
|
const result = (data ?? { ok: true }) as {
|
|
ok: boolean
|
|
scope?: 'minute' | 'day'
|
|
retry_after_sec?: number
|
|
}
|
|
return {
|
|
ok: result.ok,
|
|
scope: result.scope,
|
|
retryAfterSec: result.retry_after_sec,
|
|
}
|
|
}
|