40 lines
1.4 KiB
TypeScript
40 lines
1.4 KiB
TypeScript
import { Hono } from '@api/utils/hono';
|
|
import { handleError } from '@api/utils/errors';
|
|
import { getPublishedWidgetPayload } from '@api/services/widget';
|
|
import { ZWidgetPublicKeyParams } from '@cio/utils/validation/widget';
|
|
import { zValidator } from '@hono/zod-validator';
|
|
import { createRateLimiter } from '@api/middlewares/rate-limiter';
|
|
import { DEFAULT_WINDOW_MS } from '@api/constants/rate-limiter';
|
|
|
|
const widgetPayloadIpLimiter = createRateLimiter({
|
|
maxRequests: 100,
|
|
windowMs: DEFAULT_WINDOW_MS,
|
|
keyGenerator: (c) =>
|
|
`widget_payload_ip:${c.req.header('cf-connecting-ip') || c.req.header('x-forwarded-for') || 'unknown'}`
|
|
});
|
|
|
|
const widgetPayloadKeyLimiter = createRateLimiter({
|
|
maxRequests: 1000,
|
|
windowMs: DEFAULT_WINDOW_MS,
|
|
keyGenerator: (c) => `widget_payload_key:${c.req.param('publicKey')}`
|
|
});
|
|
|
|
export const publicWidgetsRouter = new Hono().get(
|
|
'/:publicKey/payload',
|
|
zValidator('param', ZWidgetPublicKeyParams),
|
|
widgetPayloadIpLimiter,
|
|
widgetPayloadKeyLimiter,
|
|
async (c) => {
|
|
try {
|
|
const { publicKey } = c.req.valid('param');
|
|
const payload = await getPublishedWidgetPayload(publicKey);
|
|
|
|
c.header('Cache-Control', 'public, max-age=60, stale-while-revalidate=300');
|
|
|
|
return c.json({ success: true, data: payload });
|
|
} catch (error) {
|
|
return handleError(c, error, 'Failed to fetch widget payload');
|
|
}
|
|
}
|
|
);
|