npm install --save mylimiter
mysql -u root -p exampledb < node_modules/mylimiter/mylimiter.sql
The bucket analogy is used heavily. A bucket holds drips. Drips represent
requests. New drips are added each time the middleware function is called
and expired drips are purged. When a bucket is full (i.e. the number of
drips equals the bucket size), no new drips are added and an error is
returned via next(err)
. The error will have the appropriate status
: 429
when the bucket is full (i.e. too many requests) and 500
when something
went wrong (e.g. couldn't connect to MySQL). Buckets are dynamic and
are automatically created and destroyed as needed. Bucket names, sizes, and
drip expiration are dynamic and can change on the fly. For example, there
could be a bucket per user and during periods of low activity, the size could
be larger and the drips could expiry more quickly.
Parameters:
poolOrConfig
- existing MySQL connection pool or a configuration object that can be passed to node-mysql to create a connection pool.bucketOrFunction
- String containing the name of the bucket (up to 64 characters) or a function which accepts(req, res)
and returns a String containing the name of the bucket.bucketSizeOrFunction
- integer number of drips that can fit in each bucket or a function which accepts(req, res)
and returns an integer number of drips.periodInSecondsOrFunction
- integer number of seconds corresponding to the drip time-to-live or a function which accepts(req, res)
and returns an integer number of seconds.
Returns:
- express middleware function:
- middleware function accepts
(req, res, next)
. it also accepts(callback)
. - calls the
drip()
procedure in the database. - calls
next()
upon success, andnext(err)
upon failure.
- middleware function accepts
"use strict";
var mylimiter = require('mylimiter');
var express = require('express');
var app = express();
app.get('/', function (req, res) {
res.redirect('/api');
});
app.use('/api', mylimiter({ // MySQL Config
"user": "mylimiter",
"password": "mylimiter",
"database": "example",
"host": "localhost"
},
function (req, res) { return req.ip; }, // dynamic bucket name
5, // bucket can hold 5 drips per time period
60 // time period is 60 seconds
), function (req, res) {
res.json({ hello: 'world' });
});
app.listen(3000);
For added security, create a separate user that only can call the drip()
procedure:
GRANT EXECUTE ON PROCEDURE example.drip TO 'mylimiter'@'localhost' IDENTIFIED BY 'mylimiter';
FLUSH PRIVILEGES;
See LICENSE.md