Block Direct Requests

This commit is contained in:
2025-08-01 01:44:23 +01:00
parent db9c114bfe
commit dea3c68510
4 changed files with 85 additions and 58 deletions
+57 -57
View File
@@ -8,66 +8,66 @@ http://localhost:8080/v1
## Fantasy Name Endpoints
| Race/Type | Endpoint | Query Parameters |
|-------------------|----------------------------------|---------------------------|
| Elf | /fantasy/elf-names | gender=male|female|child |
| Dwarf | /fantasy/dwarf-names | gender=male|female |
| Arakocra | /fantasy/arakocra-names | - |
| Aasimar | /fantasy/aasimar-names | gender=male|female |
| Bugbear | /fantasy/bugbear-names | - |
| Centaur | /fantasy/centaur-names | gender=male|female |
| Changeling | /fantasy/changeling-names | - |
| Deep Gnome | /fantasy/deep-gnome-names | gender=male|female |
| Deva | /fantasy/deva-names | gender=male|female |
| Dragonborn | /fantasy/dragonborn-names | gender=male|female|surname|
| Drow | /fantasy/drow-names | gender=male|female|surname|
| Duergar | /fantasy/duergar-names | gender=male|female |
| Eladrin | /fantasy/eladrin-names | gender=male|female |
| Fairy | /fantasy/fairy-names | gender=male|female |
| Firbolg | /fantasy/firbolg-names | gender=male|female|child |
| Genasi | /fantasy/genasi-names | - |
| Githyanki | /fantasy/githyanki-names | gender=male|female |
| Githzerai | /fantasy/githzerai-names | gender=male|female |
| Gnome | /fantasy/gnome-names | gender=male|female |
| Goblin | /fantasy/goblin-names | gender=male|female |
| Goliath | /fantasy/goliath-names | gender=male|female |
| Grung | /fantasy/grung-names | - |
| Half-Elf | /fantasy/half-elf-names | gender=male|female |
| Half-Orc | /fantasy/half-orc-names | gender=male|female |
| Halfling | /fantasy/halfling-names | gender=male|female |
| Harengon | /fantasy/harengon-names | gender=male|female |
| Hobgoblin | /fantasy/hobgoblin-names | - |
| Human | /fantasy/human-names | gender=male|female |
| Kalashtar | /fantasy/kalashtar-names | - |
| Kenku | /fantasy/kenku-names | - |
| Kobold | /fantasy/kobold-names | - |
| Leonin | /fantasy/leonin-names | gender=male|female |
| Lizardfolk | /fantasy/lizardfolk-names | gender=male|female |
| Locathah | /fantasy/locathah-names | - |
| Loxodon | /fantasy/loxodon-names | gender=male|female |
| Minotaur | /fantasy/minotaur-names | gender=male|female |
| Orc | /fantasy/orc-names | gender=male|female |
| Satyr | /fantasy/satyr-names | gender=male|female|child |
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male|female |
| Shardmind | /fantasy/shardmind-names | - |
| Shifter | /fantasy/shifter-names | gender=male|female |
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male|female |
| Tabaxi | /fantasy/tabaxi-names | gender=male|female |
| Tiefling | /fantasy/tiefling-names | gender=male|female|virtue |
| Tortle | /fantasy/tortle-names | - |
| Triton | /fantasy/triton-names | gender=male|female |
| Vedalken | /fantasy/vedalken-names | gender=male|female |
| Verdan | /fantasy/verdan-names | - |
| Warforged | /fantasy/warforged-names | - |
| Wilden | /fantasy/wilden-names | gender=male|female |
| Yuan-Ti | /fantasy/yuan-ti-names | - |
| Race/Type | Endpoint | Query Parameters |
| ------------ | --------------------------- | ---------------- | ------ | ------- |
| Elf | /fantasy/elf-names | gender=male | female | child |
| Dwarf | /fantasy/dwarf-names | gender=male | female |
| Arakocra | /fantasy/arakocra-names | - |
| Aasimar | /fantasy/aasimar-names | gender=male | female |
| Bugbear | /fantasy/bugbear-names | - |
| Centaur | /fantasy/centaur-names | gender=male | female |
| Changeling | /fantasy/changeling-names | - |
| Deep Gnome | /fantasy/deep-gnome-names | gender=male | female |
| Deva | /fantasy/deva-names | gender=male | female |
| Dragonborn | /fantasy/dragonborn-names | gender=male | female | surname |
| Drow | /fantasy/drow-names | gender=male | female | surname |
| Duergar | /fantasy/duergar-names | gender=male | female |
| Eladrin | /fantasy/eladrin-names | gender=male | female |
| Fairy | /fantasy/fairy-names | gender=male | female |
| Firbolg | /fantasy/firbolg-names | gender=male | female | child |
| Genasi | /fantasy/genasi-names | - |
| Githyanki | /fantasy/githyanki-names | gender=male | female |
| Githzerai | /fantasy/githzerai-names | gender=male | female |
| Gnome | /fantasy/gnome-names | gender=male | female |
| Goblin | /fantasy/goblin-names | gender=male | female |
| Goliath | /fantasy/goliath-names | gender=male | female |
| Grung | /fantasy/grung-names | - |
| Half-Elf | /fantasy/half-elf-names | gender=male | female |
| Half-Orc | /fantasy/half-orc-names | gender=male | female |
| Halfling | /fantasy/halfling-names | gender=male | female |
| Harengon | /fantasy/harengon-names | gender=male | female |
| Hobgoblin | /fantasy/hobgoblin-names | - |
| Human | /fantasy/human-names | gender=male | female |
| Kalashtar | /fantasy/kalashtar-names | - |
| Kenku | /fantasy/kenku-names | - |
| Kobold | /fantasy/kobold-names | - |
| Leonin | /fantasy/leonin-names | gender=male | female |
| Lizardfolk | /fantasy/lizardfolk-names | gender=male | female |
| Locathah | /fantasy/locathah-names | - |
| Loxodon | /fantasy/loxodon-names | gender=male | female |
| Minotaur | /fantasy/minotaur-names | gender=male | female |
| Orc | /fantasy/orc-names | gender=male | female |
| Satyr | /fantasy/satyr-names | gender=male | female | child |
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male | female |
| Shardmind | /fantasy/shardmind-names | - |
| Shifter | /fantasy/shifter-names | gender=male | female |
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male | female |
| Tabaxi | /fantasy/tabaxi-names | gender=male | female |
| Tiefling | /fantasy/tiefling-names | gender=male | female | virtue |
| Tortle | /fantasy/tortle-names | - |
| Triton | /fantasy/triton-names | gender=male | female |
| Vedalken | /fantasy/vedalken-names | gender=male | female |
| Verdan | /fantasy/verdan-names | - |
| Warforged | /fantasy/warforged-names | - |
| Wilden | /fantasy/wilden-names | gender=male | female |
| Yuan-Ti | /fantasy/yuan-ti-names | - |
## Modern Name Endpoints
| Language/Type | Endpoint | Query Parameters |
|----------------------|-----------------------------|---------------------------|
| Modern English | /modern/english | gender=male|female|unisex |
| Modern Portuguese (EU)| /modern/portuguese | gender=male|female|unisex |
| Language/Type | Endpoint | Query Parameters |
| ---------------------- | ------------------ | ---------------- | ------ | ------ |
| Modern English | /modern/english | gender=male | female | unisex |
| Modern Portuguese (EU) | /modern/portuguese | gender=male | female | unisex |
## How to Query the API
View File
+2 -1
View File
@@ -23,13 +23,14 @@ func main() {
r.Use(cors.Handler(cors.Options{
//AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://lk-api-temp.onrender.com"}), //* Use this for production
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"}), //* Use this for production
AllowedMethods: []string{"GET"},
AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"},
ExposedHeaders: []string{"Link"},
AllowCredentials: false,
MaxAge: 300,
}))
r.Use(RefererCheck(GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"})))
r.Use(RateLimiter(rps, burst))
r.Route("/v1", func(r chi.Router) {
+26
View File
@@ -2,6 +2,7 @@ package main
import (
"net/http"
"strings"
"golang.org/x/time/rate"
)
@@ -19,3 +20,28 @@ func RateLimiter(rps float64, burst int) func(http.Handler) http.Handler {
})
}
}
func RefererCheck(allowedDomains []string) func(http.Handler) http.Handler {
return func(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
referer := r.Header.Get("Referer")
// Allow requests with no referer (direct API calls, Postman, etc.)
if referer == "" {
next.ServeHTTP(w, r)
return
}
// Check if referer matches allowed domains
for _, domain := range allowedDomains {
if strings.HasPrefix(referer, domain) {
next.ServeHTTP(w, r)
return
}
}
// Block if referer doesn't match
http.Error(w, "Forbidden", http.StatusForbidden)
})
}
}