unique_ips_limiter.rb 1.25 KB
Newer Older
1 2
# frozen_string_literal: true

3 4 5
module Gitlab
  module Auth
    class UniqueIpsLimiter
6
      USER_UNIQUE_IPS_PREFIX = 'user_unique_ips'
7 8 9 10

      class << self
        def limit_user_id!(user_id)
          if config.unique_ips_limit_enabled
11
            ip = RequestContext.instance.client_ip
12
            unique_ips = update_and_return_ips_count(user_id, ip)
13

14 15 16 17 18
            raise TooManyIps.new(user_id, ip, unique_ips) if unique_ips > config.unique_ips_limit_per_user
          end
        end

        def limit_user!(user = nil)
19
          user ||= yield if block_given?
20 21 22 23 24 25 26 27
          limit_user_id!(user.id) unless user.nil?
          user
        end

        def config
          Gitlab::CurrentSettings.current_application_settings
        end

28 29
        def update_and_return_ips_count(user_id, ip)
          time = Time.now.utc.to_i
30 31
          key = "#{USER_UNIQUE_IPS_PREFIX}:#{user_id}"

32
          Gitlab::Redis::SharedState.with do |redis|
33 34 35 36 37 38 39 40 41 42 43 44 45
            unique_ips_count = nil
            redis.multi do |r|
              r.zadd(key, time, ip)
              r.zremrangebyscore(key, 0, time - config.unique_ips_limit_time_window)
              unique_ips_count = r.zcard(key)
            end
            unique_ips_count.value
          end
        end
      end
    end
  end
end