risk-management.js 2.05 KB
/**
 * 控制路由请求次数
 * @date: 2018/03/05
 */
'use strict';

const _ = require('lodash');
const md5 = require('yoho-md5');
const cache = global.yoho.cache.master;
const helpers = global.yoho.helpers;
const pathToRegexp = require('path-to-regexp');

module.exports = () => {
    return (req, res, next) => {
        let path = req.path || '';
        let router = {};
        let risks = _.get(req.app.locals.wap, 'json.risk', []);

        _.isArray(risks) && risks.some(item => {
            item.regRoute = item.regRoute || pathToRegexp(item.route);
            if (item.regRoute.test(path)) {
                router = item;
                return true;
            }
            return false;
        });

        if (_.isEmpty(router) || _.isEmpty(path)) {
            return next();
        }

        let ip = _.get(req.yoho, 'clientIp', '');
        let key = md5(`${_.trim(path, '/')}${ip}`);
        let checkUrl = helpers.urlFormat('/3party/check', {
            pid: key
        });

        return cache.getAsync(key).then(inter => {
            if (typeof inter === 'undefined') {
                return cache.setAsync(key, 1, router.interval || 300);
            }

            inter = parseInt(`0${inter}`, 10);

            if (inter <= router.requests) {
                return cache.incrAsync(key, 1);
            }

            return inter;
        }).then(inter => {
            if (inter === true) { // cache set OR incr
                return next();
            }

            if (inter > router.requests) {
                if (req.xhr) {
                    return res.status(403).json({
                        code: 4403,
                        date: {url: checkUrl},
                        message: '亲,您的访问次数过多,请稍后再试哦...'
                    });
                }

                return res.redirect(`${checkUrl}&refer=${req.originalUrl}`);
            }

            return next();
        }).catch((e) => {
            console.log(`risk => path: ${path}, err: ${e.message}`);
            return next();
        });
    };
};