Files
UNIT3D/app/Providers/RouteServiceProvider.php

111 lines
4.0 KiB
PHP

<?php
declare(strict_types=1);
/**
* NOTICE OF LICENSE.
*
* UNIT3D Community Edition is open-sourced software licensed under the GNU Affero General Public License v3.0
* The details is bundled with this project in the file LICENSE.txt.
*
* @project UNIT3D Community Edition
*
* @author HDVinnie <hdinnovations@protonmail.com>
* @license https://www.gnu.org/licenses/agpl-3.0.en.html/ GNU Affero General Public License v3.0
*/
namespace App\Providers;
use App\Enums\GlobalRateLimit;
use App\Enums\MiddlewareGroup;
use Illuminate\Auth\Middleware\RedirectIfAuthenticated;
use Illuminate\Cache\RateLimiting\Limit;
use Illuminate\Foundation\Support\Providers\RouteServiceProvider as ServiceProvider;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\RateLimiter;
use Illuminate\Support\Facades\Route;
class RouteServiceProvider extends ServiceProvider
{
/**
* The path to the "home" route for your application.
*
* This is used by Laravel authentication to redirect users after login.
*
* @var string
*/
final public const HOME = '/';
/**
* Define your route model bindings, pattern filters, etc.
*/
public function boot(): void
{
$this->configureRateLimiting();
$this->removeIndexPhpFromUrl();
$this->routes(function (): void {
Route::prefix('api')
->middleware(MiddlewareGroup::CHAT->value)
->group(base_path('routes/vue.php'));
Route::middleware(MiddlewareGroup::WEB->value)
->group(base_path('routes/web.php'));
Route::prefix('api')
->middleware(MiddlewareGroup::API->value)
->group(base_path('routes/api.php'));
Route::prefix('announce')
->middleware(MiddlewareGroup::ANNOUNCE->value)
->group(base_path('routes/announce.php'));
Route::middleware(MiddlewareGroup::RSS->value)
->group(base_path('routes/rss.php'));
});
RedirectIfAuthenticated::redirectUsing(fn () => self::HOME);
}
/**
* Configure the rate limiters for the application.
*/
protected function configureRateLimiting(): void
{
RateLimiter::for(GlobalRateLimit::WEB, fn (Request $request): Limit => $request->user()
? Limit::perMinute(
cache()->remember(
'group:'.$request->user()->group_id.':is_modo',
5,
fn () => $request->user()->group()->value('is_modo')
)
? 60
: 30
)
->by('web'.$request->user()->id)
: Limit::perMinute(8)->by('web'.$request->ip()));
RateLimiter::for(GlobalRateLimit::API, fn (Request $request) => Limit::perMinute(30)->by('api'.$request->ip()));
RateLimiter::for(GlobalRateLimit::ANNOUNCE, fn (Request $request) => Limit::perMinute(500)->by('announce'.$request->ip()));
RateLimiter::for(GlobalRateLimit::CHAT, fn (Request $request) => Limit::perMinute(60)->by('chat'.($request->user()?->id ?? $request->ip())));
RateLimiter::for(GlobalRateLimit::RSS, fn (Request $request) => Limit::perMinute(30)->by('rss'.$request->ip()));
RateLimiter::for(GlobalRateLimit::AUTHENTICATED_IMAGES, fn (Request $request): Limit => Limit::perMinute(200)->by('authenticated-images:'.$request->user()->id));
RateLimiter::for(GlobalRateLimit::SEARCH, fn (Request $request): Limit => Limit::perMinute(100)->by('search:'.$request->user()->id));
RateLimiter::for(GlobalRateLimit::TMDB, fn (): Limit => Limit::perSecond(2));
RateLimiter::for(GlobalRateLimit::IGDB, fn (): Limit => Limit::perSecond(2));
}
protected function removeIndexPhpFromUrl(): void
{
if (str_contains(request()->getRequestUri(), '/index.php/')) {
$url = str_replace('index.php/', '', request()->getRequestUri());
if ($url !== '') {
header("Location: {$url}", true, 301);
exit;
}
}
}
}