如何通过定价方案限制快速API请求

Question

我正在建立一个具有定价计划的公共API。我希望将API请求限制到每个帐户及其计划。我使用NodeJS和ExpressJS

这些代码无法正常运行，我无法在返回数据后执行next()。如何解决这个中间件？

​

const rateLimit = require("express-rate-limit");

const freePlan = rateLimit({
    windowMs: 1 * 60 * 1000,
    max: 5,
    message: {
        error: "Try again after 1 minute"
    }
})

const premiumPlan = rateLimit({
    windowMs: 1 * 60 * 1000,
    max: 30,
    message: {
        error: "Try again after 1 minute"
    }
})

function limiter(req, res, next ) {
    switch (req.body.plan) {
        case "free":
            return freePlan
            break;
    
        case "big":
            return premiumPlan
            break;
    
        default:
            break;
    }
    next();
}

module.exports = limiter;

​

​

const express = require('express');
const limiter = require("../middlewares/limiter");
const router = express.Router();

router.get('/', limiter, async (req, res) => {
    res.send('OK');
})

module.exports = router;

​

Answer 1

这是我从github找到的答案，并在这里分享..

const rateLimit = require("express-rate-limit");

function isPremium(req) {
  //... your logic to return true false based on premium plan or not
}

const limiter = rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minutes
  // see https://github.com/nfriedly/express-rate-limit#max
  max: function(req, res) {
    if (isPremium(req)) {
      return 30;
    }
    return 5;
  }
});

//  apply to all requests
app.use(limiter);