authmaker-verify/lib/mongo/rateLimited.js

AccessToken verification for Authmaker

var _ = require("lodash");
var moment = require('moment');

var getModel = require('authmaker-common').getModel;

var checkAccessToken = require('../common/checkAccessToken');

module.exports = function mongoRateLimited(access_token, tag, defaultScope) {


    return checkAccessToken(access_token)

    .then(function(session) {
        if (!tag) {
            throw new Error("Incorrect parameter: Missing tag in arguments passed");
        }

        var scope = _.find(session.scopes, function(scope) {
            if (scope === tag) {
                throw new Error("Incorrect parameter: Only tag name required to be passed from " + scope);
            }
            return scope.indexOf(tag) === 0;
        });

        if (!scope && defaultScope) {
            scope = defaultScope;
        }

        if (!scope) {
            throw new Error("Not Authorized: No scope associated with " + tag);
        }

        var scopeParts = scope.split('_');

        if (scopeParts.length !== 4) {
            throw new Error("Malformed Scope: " + scope + " is not a rate limited scope. e.g. tagname_limit_10_day");
        }

        var limit = scopeParts[2].trim();
        var period = scopeParts[3].trim();

        return getModel('auditTrail').then(function(auditTrail) {
            return auditTrail.find({
                tag: tag,
                userId: session.userId,
                date: {
                    $gt: moment().subtract(1, period).toDate()
                }
            }).count().exec().then(function(count) {
                if (count >= limit) {
                    throw new Error("Too Many Requests: Rate limit exceeded for " + scope);
                }

                return auditTrail.create({
                    access_token: access_token,
                    tag: tag,
                    userId: session.userId,
                    date: new Date()
                }).then(function() {
                    return session;
                });
            });
        });
    });
};