1 files changed, 77 insertions, 0 deletions
diff --git a/lib/gitlab/rack_attack/request.rb b/lib/gitlab/rack_attack/request.rb
new file mode 100644
index 00000000000..67e3a5de223
--- /dev/null
+++ b/lib/gitlab/rack_attack/request.rb
@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module RackAttack
+    module Request
+      def unauthenticated?
+        !(authenticated_user_id([:api, :rss, :ics]) || authenticated_runner_id)
+      end
+
+      def throttled_user_id(request_formats)
+        user_id = authenticated_user_id(request_formats)
+
+        if Gitlab::RackAttack.user_allowlist.include?(user_id)
+          Gitlab::Instrumentation::Throttle.safelist = 'throttle_user_allowlist'
+          return
+        end
+
+        user_id
+      end
+
+      def authenticated_runner_id
+        request_authenticator.runner&.id
+      end
+
+      def api_request?
+        path.start_with?('/api')
+      end
+
+      def api_internal_request?
+        path =~ %r{^/api/v\d+/internal/}
+      end
+
+      def health_check_request?
+        path =~ %r{^/-/(health|liveness|readiness|metrics)}
+      end
+
+      def product_analytics_collector_request?
+        path.start_with?('/-/collector/i')
+      end
+
+      def should_be_skipped?
+        api_internal_request? || health_check_request?
+      end
+
+      def web_request?
+        !api_request? && !health_check_request?
+      end
+
+      def protected_path?
+        !protected_path_regex.nil?
+      end
+
+      def protected_path_regex
+        path =~ protected_paths_regex
+      end
+
+      private
+
+      def authenticated_user_id(request_formats)
+        request_authenticator.user(request_formats)&.id
+      end
+
+      def request_authenticator
+        @request_authenticator ||= Gitlab::Auth::RequestAuthenticator.new(self)
+      end
+
+      def protected_paths
+        Gitlab::CurrentSettings.current_application_settings.protected_paths
+      end
+
+      def protected_paths_regex
+        Regexp.union(protected_paths.map { |path| /\A#{Regexp.escape(path)}/ })
+      end
+    end
+  end
+end
+::Gitlab::RackAttack::Request.prepend_if_ee('::EE::Gitlab::RackAttack::Request')