You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 

213 lines
5.8 KiB

<?php
/**
* CodeIgniter
*
* An open source application development framework for PHP
*
* This content is released under the MIT License (MIT)
*
* Copyright (c) 2014-2019 British Columbia Institute of Technology
* Copyright (c) 2019 CodeIgniter Foundation
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
* THE SOFTWARE.
*
* @package CodeIgniter
* @author CodeIgniter Dev Team
* @copyright 2019 CodeIgniter Foundation
* @license https://opensource.org/licenses/MIT MIT License
* @link https://codeigniter.com
* @since Version 4.0.0
* @filesource
*/
namespace CodeIgniter\Throttle;
use CodeIgniter\Cache\CacheInterface;
/**
* Class Throttler
*
* Uses an implementation of the Token Bucket algorithm to implement a
* "rolling window" type of throttling that can be used for rate limiting
* an API or any other request.
*
* Each "token" in the "bucket" is equivalent to a single request
* for the purposes of this implementation.
*
* @see https://en.wikipedia.org/wiki/Token_bucket
*
* @package CodeIgniter\Throttle
*/
class Throttler implements ThrottlerInterface
{
/**
* Container for throttle counters.
*
* @var \CodeIgniter\Cache\CacheInterface
*/
protected $cache;
/**
* The number of seconds until the next token is available.
*
* @var integer
*/
protected $tokenTime = 0;
/**
* The prefix applied to all keys to
* minimize potential conflicts.
*
* @var string
*/
protected $prefix = 'throttler_';
/**
* Timestamp to use (during testing)
*
* @var integer
*/
protected $testTime;
//--------------------------------------------------------------------
/**
* Constructor.
*
* @param type $cache
* @throws type
*/
public function __construct(CacheInterface $cache)
{
$this->cache = $cache;
}
//--------------------------------------------------------------------
/**
* Returns the number of seconds until the next available token will
* be released for usage.
*
* @return integer
*/
public function getTokenTime(): int
{
return $this->tokenTime;
}
//--------------------------------------------------------------------
/**
* Restricts the number of requests made by a single IP address within
* a set number of seconds.
*
* Example:
*
* if (! $throttler->check($request->ipAddress(), 60, MINUTE))
* {
* die('You submitted over 60 requests within a minute.');
* }
*
* @param string $key The name to use as the "bucket" name.
* @param integer $capacity The number of requests the "bucket" can hold
* @param integer $seconds The time it takes the "bucket" to completely refill
* @param integer $cost The number of tokens this action uses.
*
* @return boolean
* @internal param int $maxRequests
*/
public function check(string $key, int $capacity, int $seconds, int $cost = 1): bool
{
$tokenName = $this->prefix . $key;
// Check to see if the bucket has even been created yet.
if (($tokens = $this->cache->get($tokenName)) === null)
{
// If it hasn't been created, then we'll set it to the maximum
// capacity - 1, and save it to the cache.
$this->cache->save($tokenName, $capacity - $cost, $seconds);
$this->cache->save($tokenName . 'Time', time(), $seconds);
return true;
}
// If $tokens > 0, then we need to replenish the bucket
// based on how long it's been since the last update.
$throttleTime = $this->cache->get($tokenName . 'Time');
$elapsed = $this->time() - $throttleTime;
// Number of tokens to add back per second
$rate = $capacity / $seconds;
// How many seconds till a new token is available.
// We must have a minimum wait of 1 second for a new token.
// Primarily stored to allow devs to report back to users.
$newTokenAvailable = (1 / $rate) - $elapsed;
$this->tokenTime = max(1, $newTokenAvailable);
// Add tokens based up on number per second that
// should be refilled, then checked against capacity
// to be sure the bucket didn't overflow.
$tokens += $rate * $elapsed;
$tokens = $tokens > $capacity ? $capacity : $tokens;
// If $tokens > 0, then we are safe to perform the action, but
// we need to decrement the number of available tokens.
if ($tokens > 0)
{
$this->cache->save($tokenName, $tokens - $cost, $seconds);
$this->cache->save($tokenName . 'Time', time(), $seconds);
return true;
}
return false;
}
//--------------------------------------------------------------------
/**
* Used during testing to set the current timestamp to use.
*
* @param integer $time
*
* @return $this
*/
public function setTestTime(int $time)
{
$this->testTime = $time;
return $this;
}
//--------------------------------------------------------------------
/**
* Return the test time, defaulting to current.
*
* @return integer
*/
public function time(): int
{
return $this->testTime ?? time();
}
}