freefire
b9ba8cb8c9
补齐问答采纳/重开、投票匿名与有票禁编、悬赏过期退回、抽奖回帖开奖，并接入积分账本与发帖附件可见性。 Co-authored-by: Cursor <cursoragent@cursor.com>
39 lines
1013 B
Go
39 lines
1013 B
Go
package middleware
|
||
|
||
import (
|
||
"net/http"
|
||
"strconv"
|
||
|
||
"github.com/freefire/jiang13-bbs/service"
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// RateLimitMiddleware 速率限制中间件（按 IP）
|
||
func RateLimitMiddleware(rl *service.RateLimiter, rateType string) gin.HandlerFunc {
|
||
return func(c *gin.Context) {
|
||
key := rateType + ":" + c.ClientIP()
|
||
if !rl.Allow(key) {
|
||
c.AbortWithStatusJSON(http.StatusTooManyRequests, gin.H{"error": "请求过于频繁，请稍后再试"})
|
||
return
|
||
}
|
||
c.Next()
|
||
}
|
||
}
|
||
|
||
// RateLimitUserMiddleware 按登录用户限流（需挂在 RequireAuth 之后）
|
||
func RateLimitUserMiddleware(rl *service.RateLimiter, rateType string) gin.HandlerFunc {
|
||
return func(c *gin.Context) {
|
||
claims := CurrentUser(c)
|
||
id := "anon"
|
||
if claims != nil {
|
||
id = strconv.FormatUint(uint64(claims.ID), 10)
|
||
}
|
||
key := rateType + ":u:" + id
|
||
if !rl.Allow(key) {
|
||
c.AbortWithStatusJSON(http.StatusTooManyRequests, gin.H{"error": "操作过于频繁，请稍后再试"})
|
||
return
|
||
}
|
||
c.Next()
|
||
}
|
||
}
|