c9-core/node_modules/c9/ratelimit.js

var error = require("http-error");
var _ = require("lodash");

/**
 * In memory rate limiter as connect middleware
 */
module.exports = ratelimit;

function ratelimit(key, duration, max) {
    var requests = Object.create(null); // in case there handles like 'constructor'
    setInterval(function() {
        Object.keys(requests).forEach(expireRequests);
    }, duration * 0.75);
    
    function expireRequests(handle)  {
        var requestsForHandle = requests[handle]; 
        var totalToSplice = 0;
        var expireTime = Date.now() - duration;  
        /* Requests are already sorted by date as they are appended, so we just loop 
            until we find one that shouldn't have expired and splice them from the list */
        for (var i = 0; i < requestsForHandle.length; i++)  {
            if (requestsForHandle[i] >= expireTime) break;
            totalToSplice++;
        }
        requests[handle].splice(0, totalToSplice);
        if (requests[handle].length == 0) {
            delete requests[handle];
        }
        
        return true;
    }
    
    return function(req, res, next) {
        var handle = req.params[key];

        requests[handle] = requests[handle] || [];
        if (requests[handle].length >= max) {
            if (expireRequests(handle) && requests[handle].length >= max) {
                var err = new error.TooManyRequests("Rate limit exceeded");
                err.retryIn = Math.min(duration, 5000);
                return next(err);
            }
        }
        
        requests[handle].push(Date.now());
        return next();
    };
}