ratelimit

type Key ¶

type Key struct {
	Operation Operation
	IP        string
	Email     string
	UserID    string
	Provider  string
}

Key identifies one rate-limited attempt. Fields are set when relevant.

type Limiter ¶

type Limiter interface {
	Allow(ctx context.Context, key Key) (bool, error)
}

Limiter decides whether one attempt can proceed.

type LimiterFunc ¶

type LimiterFunc func(ctx context.Context, key Key) (bool, error)

LimiterFunc adapts a function to the Limiter interface.

func (f LimiterFunc) Allow(ctx context.Context, k Key) (bool, error)

type Memory ¶

type Memory struct {
	// contains filtered or unexported fields
}

Memory is an in-process fixed-window limiter.

Memory is for local development and tests only. It is not sufficient for a distributed production deployment because each process keeps its own counters.

func NewMemory(limit int, window time.Duration) *Memory

func (m *Memory) Allow(_ context.Context, k Key) (bool, error)

type Operation ¶

type Operation string

Operation names a sensitive flow.

const (
	OpSignIn           Operation = "sign-in"
	OpSignUp           Operation = "sign-up"
	OpPasswordForgot   Operation = "password-forgot"
	OpEmailVerify      Operation = "email-verification-send"
	OpMagicLinkRequest Operation = "magic-link-request"
	OpPasswordChange   Operation = "password-change"
	OpEmailChange      Operation = "email-change"
	OpUserDelete       Operation = "user-delete"
	OpTOTP             Operation = "totp"
)