2018-10-11 20:12:21 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2017-02-06 12:48:46 +00:00
|
|
|
module Gitlab
|
|
|
|
module Auth
|
|
|
|
class UniqueIpsLimiter
|
2017-02-28 10:12:11 +00:00
|
|
|
USER_UNIQUE_IPS_PREFIX = 'user_unique_ips'.freeze
|
2017-02-06 12:48:46 +00:00
|
|
|
|
|
|
|
class << self
|
|
|
|
def limit_user_id!(user_id)
|
|
|
|
if config.unique_ips_limit_enabled
|
|
|
|
ip = RequestContext.client_ip
|
2017-02-20 14:09:05 +00:00
|
|
|
unique_ips = update_and_return_ips_count(user_id, ip)
|
2017-03-03 17:10:22 +00:00
|
|
|
|
2017-02-06 12:48:46 +00:00
|
|
|
raise TooManyIps.new(user_id, ip, unique_ips) if unique_ips > config.unique_ips_limit_per_user
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def limit_user!(user = nil)
|
2017-03-03 17:10:22 +00:00
|
|
|
user ||= yield if block_given?
|
2017-02-06 12:48:46 +00:00
|
|
|
limit_user_id!(user.id) unless user.nil?
|
|
|
|
user
|
|
|
|
end
|
|
|
|
|
|
|
|
def config
|
|
|
|
Gitlab::CurrentSettings.current_application_settings
|
|
|
|
end
|
|
|
|
|
2017-02-20 14:09:05 +00:00
|
|
|
def update_and_return_ips_count(user_id, ip)
|
|
|
|
time = Time.now.utc.to_i
|
2017-02-06 12:48:46 +00:00
|
|
|
key = "#{USER_UNIQUE_IPS_PREFIX}:#{user_id}"
|
|
|
|
|
2017-07-11 03:35:47 +00:00
|
|
|
Gitlab::Redis::SharedState.with do |redis|
|
2017-02-06 12:48:46 +00:00
|
|
|
unique_ips_count = nil
|
|
|
|
redis.multi do |r|
|
|
|
|
r.zadd(key, time, ip)
|
|
|
|
r.zremrangebyscore(key, 0, time - config.unique_ips_limit_time_window)
|
|
|
|
unique_ips_count = r.zcard(key)
|
|
|
|
end
|
|
|
|
unique_ips_count.value
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|