rate limit hooks

authentication.hooks.js

const RateLimiterMongo = require('rate-limiter-flexible/lib/RateLimiterMongo');
const { rateLimit } = require('feathers-fletching');
const { iff, isProvider } = require('feathers-hooks-common');
const mongoose = require('mongoose');

const maxWrongAttemptsByIPperDay = 100;
const maxConsecutiveFailsByUsernameAndIP = 5;

const limiterSlowBruteByIP = new RateLimiterMongo({
  storeClient: mongoose.connection,
  points: maxWrongAttemptsByIPperDay,
  duration: 60 * 60 * 24,
  blockDuration: 60 * 60 * 24, // Block for 1 day, if 100 wrong attempts per day
});

const limiterConsecutiveFailsByUsernameAndIP = new RateLimiterMongo({
  storeClient: mongoose.connection,
  points: maxConsecutiveFailsByUsernameAndIP,
  duration: 60 * 60 * 24 * 90, // Store number for 90 days since first fail
  blockDuration: 60 * 60, // Block for 1 hour
});

const makeKeyIp = (ctx) => {
  return ctx.params.ip;
};
const makeKeyUserIp = (ctx) => {
  if (ctx.data) {
    return (ctx.data.phoneNumber || '') + ctx.params.ip;
  }
  return ctx.params.ip;
};

const makePoints = (ctx) => {
  if (ctx.params.user && ctx.method !== 'create') {
    return 0;
  }
  return 1;
};

module.exports = {
  before: {
    all: [
      iff(
        isProvider('external'),
        rateLimit(limiterSlowBruteByIP, { makeKey: makeKeyIp, makePoints }),
        rateLimit(limiterConsecutiveFailsByUsernameAndIP, {
          makeKey: makeKeyUserIp,
          makePoints,
        }),
      ),
    ],
    find: [],
    get: [],
    create: [],
    update: [],
    patch: [],
    remove: [],
  },
  after: {
    create: [
      iff(isProvider('external'), (ctx) => {
        if (ctx.result.accessToken) {
          limiterConsecutiveFailsByUsernameAndIP.delete(makeKeyUserIp(ctx));
        }
      }),
    ],
  },
};