blob: e4a1b022c32ceb377e8b3e944b231b9c650b1980 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
# frozen_string_literal: true
module Gitlab
module RackAttack
class Store
InvalidAmount = Class.new(StandardError)
# The increment method gets called very often. The implementation below
# aims to minimize the number of Redis calls we make.
def increment(key, amount = 1, options = {})
# Our code below that prevents calling EXPIRE after every INCR assumes
# we always increment by 1. This is true in Rack::Attack as of v6.6.1.
# This guard should alert us if Rack::Attack changes its behavior in a
# future version.
raise InvalidAmount unless amount == 1
with do |redis|
key = namespace(key)
new_value = redis.incr(key)
expires_in = options[:expires_in]
redis.expire(key, expires_in) if new_value == 1 && expires_in
new_value
end
end
def read(key, _options = {})
with { |redis| redis.get(namespace(key)) }
end
def write(key, value, options = {})
with { |redis| redis.set(namespace(key), value, ex: options[:expires_in]) }
end
def delete(key, _options = {})
with { |redis| redis.del(namespace(key)) }
end
private
def with(&block)
# rubocop: disable CodeReuse/ActiveRecord
Gitlab::Redis::RateLimiting.with(&block)
# rubocop: enable CodeReuse/ActiveRecord
rescue ::Redis::BaseConnectionError
# Following the example of
# https://github.com/rack/rack-attack/blob/v6.6.1/lib/rack/attack/store_proxy/redis_proxy.rb#L61-L65,
# do not raise an error if we cannot connect to Redis. If
# Redis::RateLimiting is unavailable it should not take the site down.
nil
end
def namespace(key)
"#{Gitlab::Redis::Cache::CACHE_NAMESPACE}:#{key}"
end
end
end
end
|
