DeveloperandClaude Opus 4.6
335f0fb8dc
- Add express-rate-limit with tiered rate limits per endpoint - Add express-validator for input validation on all API routes - Add winston + morgan for structured logging - Add node-cache for lottery result caching (5min TTL, 1000 max keys) - Convert OCR to async task queue with max 2 concurrent jobs - Add global error handler middleware - Add React ErrorBoundary for client-side error handling - Fix memory leaks in OCR task queue and lottery cache - Add per-item error handling in batch ticket updates - Fix SQL UPDATE to include user_id in WHERE clause Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
40 lines
1.0 KiB
JavaScript
40 lines
1.0 KiB
JavaScript
const rateLimit = require('express-rate-limit');
|
|
|
|
// 通用限流器 - 100请求/分钟
|
|
const standardLimiter = rateLimit({
|
|
windowMs: 60 * 1000,
|
|
max: 100,
|
|
message: { error: '请求过于频繁，请稍后再试' },
|
|
standardHeaders: true,
|
|
legacyHeaders: false,
|
|
});
|
|
|
|
// 认证限流器 - 10请求/分钟 (防止暴力攻击)
|
|
const authLimiter = rateLimit({
|
|
windowMs: 60 * 1000,
|
|
max: 10,
|
|
message: { error: '登录尝试过于频繁，请稍后再试' },
|
|
standardHeaders: true,
|
|
legacyHeaders: false,
|
|
});
|
|
|
|
// OCR限流器 - 5请求/分钟 (OCR是重操作)
|
|
const ocrLimiter = rateLimit({
|
|
windowMs: 60 * 1000,
|
|
max: 5,
|
|
message: { error: 'OCR处理请求过于频繁，请稍后再试' },
|
|
standardHeaders: true,
|
|
legacyHeaders: false,
|
|
});
|
|
|
|
// 彩票刷新限流器 - 10请求/分钟
|
|
const refreshLimiter = rateLimit({
|
|
windowMs: 60 * 1000,
|
|
max: 10,
|
|
message: { error: '刷新请求过于频繁，请稍后再试' },
|
|
standardHeaders: true,
|
|
legacyHeaders: false,
|
|
});
|
|
|
|
module.exports = { standardLimiter, authLimiter, ocrLimiter, refreshLimiter };
|