Mirror of forum.nim-lang.org

9319 :: Implement api rate limiting with jester

• Cnerd (orginal) [2022-07-23T21:12:01+02:00] view original

  Hello i am attempting to implement rate limiting on my jester server application and to do that i created a variable of type OrderedTable which would keep track of the ip address of all computers requesting from the server and would stop serving to theses computers if they exceed a certain limit. Now my question is does jester provides a way to run a proc (that would check for rate limit violations) on all api endpoints without having to call the function on every single endpoint. all answers are welcome.

---

• exelotl (orginal) [2022-07-23T21:28:30+02:00] view original

  iirc what you're after is what many web frameworks call "middleware", which is not something that Jester has. However, there's a fork from a couple of years ago which adds it. It was covered in NimConf 2020 and it seemed really cool to me.

  I think it would be nice if this functionality made it into upstream Jester!

---

• Cnerd (orginal) [2022-07-23T22:11:58+02:00] view original

  Thanks I think I will switch my project's server to prologue

---

• dom96 (orginal) [2022-07-25T12:32:19+02:00] view original

  You don't need middleware for this.

  You can create a route that runs before all requests (or all requests under a specific sub-path), for example: https://github.com/dom96/jester/blob/master/tests/alltest.nim#L49.

  So the following should work for you:

  before re"/*?":
    if rateLimited(request): halt Http502, "Rate Limited"
  Run

---

• Cnerd (orginal) [2022-07-25T13:53:59+02:00] view original

  Ok, thanks. For some reason Nim doc failed to generate proper docs on the routes macro in general it doesn't usually generate proper docs for macros so I couldn't find this in the jester docs.

---

• Cnerd (orginal) [2022-07-25T13:55:30+02:00] view original

  Also it'll be nice if we could get a full documentation of the jester routes macros without having to read the code

---

• DeletedUser (orginal) [2022-07-25T14:38:49+02:00] view original

  Because "before" is not a proc or template or macro, it is a special name reserved for the untyped routes macros=> https://github.com/dom96/jester/blob/072ef26699a867f6af5e630024a430fc38dfb38d/jester.nim#L1097

---

• dom96 (orginal) [2022-07-25T18:47:43+02:00] view original

  Yeah, we need manual docs for this stuff.

---

• Cnerd (orginal) [2022-09-03T17:45:58+02:00] view original

  For anyone trying to implement rate limiting with jester, I just created a jester plugin library clown_limiter which can be used to implement rate limiting. I have published the library to nimble just waiting for the pull request to be merged and the library will be available on nimble

---