diff --git a/API_DOCS.md b/API_DOCS.md index ebf02f2..d62a980 100644 --- a/API_DOCS.md +++ b/API_DOCS.md @@ -8,66 +8,66 @@ http://localhost:8080/v1 ## Fantasy Name Endpoints -| Race/Type | Endpoint | Query Parameters | -|-------------------|----------------------------------|---------------------------| -| Elf | /fantasy/elf-names | gender=male|female|child | -| Dwarf | /fantasy/dwarf-names | gender=male|female | -| Arakocra | /fantasy/arakocra-names | - | -| Aasimar | /fantasy/aasimar-names | gender=male|female | -| Bugbear | /fantasy/bugbear-names | - | -| Centaur | /fantasy/centaur-names | gender=male|female | -| Changeling | /fantasy/changeling-names | - | -| Deep Gnome | /fantasy/deep-gnome-names | gender=male|female | -| Deva | /fantasy/deva-names | gender=male|female | -| Dragonborn | /fantasy/dragonborn-names | gender=male|female|surname| -| Drow | /fantasy/drow-names | gender=male|female|surname| -| Duergar | /fantasy/duergar-names | gender=male|female | -| Eladrin | /fantasy/eladrin-names | gender=male|female | -| Fairy | /fantasy/fairy-names | gender=male|female | -| Firbolg | /fantasy/firbolg-names | gender=male|female|child | -| Genasi | /fantasy/genasi-names | - | -| Githyanki | /fantasy/githyanki-names | gender=male|female | -| Githzerai | /fantasy/githzerai-names | gender=male|female | -| Gnome | /fantasy/gnome-names | gender=male|female | -| Goblin | /fantasy/goblin-names | gender=male|female | -| Goliath | /fantasy/goliath-names | gender=male|female | -| Grung | /fantasy/grung-names | - | -| Half-Elf | /fantasy/half-elf-names | gender=male|female | -| Half-Orc | /fantasy/half-orc-names | gender=male|female | -| Halfling | /fantasy/halfling-names | gender=male|female | -| Harengon | /fantasy/harengon-names | gender=male|female | -| Hobgoblin | /fantasy/hobgoblin-names | - | -| Human | /fantasy/human-names | gender=male|female | -| Kalashtar | /fantasy/kalashtar-names | - | -| Kenku | /fantasy/kenku-names | - | -| Kobold | /fantasy/kobold-names | - | -| Leonin | /fantasy/leonin-names | gender=male|female | -| Lizardfolk | /fantasy/lizardfolk-names | gender=male|female | -| Locathah | /fantasy/locathah-names | - | -| Loxodon | /fantasy/loxodon-names | gender=male|female | -| Minotaur | /fantasy/minotaur-names | gender=male|female | -| Orc | /fantasy/orc-names | gender=male|female | -| Satyr | /fantasy/satyr-names | gender=male|female|child | -| Shadar-Kai | /fantasy/shadar-kai-names | gender=male|female | -| Shardmind | /fantasy/shardmind-names | - | -| Shifter | /fantasy/shifter-names | gender=male|female | -| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male|female | -| Tabaxi | /fantasy/tabaxi-names | gender=male|female | -| Tiefling | /fantasy/tiefling-names | gender=male|female|virtue | -| Tortle | /fantasy/tortle-names | - | -| Triton | /fantasy/triton-names | gender=male|female | -| Vedalken | /fantasy/vedalken-names | gender=male|female | -| Verdan | /fantasy/verdan-names | - | -| Warforged | /fantasy/warforged-names | - | -| Wilden | /fantasy/wilden-names | gender=male|female | -| Yuan-Ti | /fantasy/yuan-ti-names | - | +| Race/Type | Endpoint | Query Parameters | +| ------------ | --------------------------- | ---------------- | ------ | ------- | +| Elf | /fantasy/elf-names | gender=male | female | child | +| Dwarf | /fantasy/dwarf-names | gender=male | female | +| Arakocra | /fantasy/arakocra-names | - | +| Aasimar | /fantasy/aasimar-names | gender=male | female | +| Bugbear | /fantasy/bugbear-names | - | +| Centaur | /fantasy/centaur-names | gender=male | female | +| Changeling | /fantasy/changeling-names | - | +| Deep Gnome | /fantasy/deep-gnome-names | gender=male | female | +| Deva | /fantasy/deva-names | gender=male | female | +| Dragonborn | /fantasy/dragonborn-names | gender=male | female | surname | +| Drow | /fantasy/drow-names | gender=male | female | surname | +| Duergar | /fantasy/duergar-names | gender=male | female | +| Eladrin | /fantasy/eladrin-names | gender=male | female | +| Fairy | /fantasy/fairy-names | gender=male | female | +| Firbolg | /fantasy/firbolg-names | gender=male | female | child | +| Genasi | /fantasy/genasi-names | - | +| Githyanki | /fantasy/githyanki-names | gender=male | female | +| Githzerai | /fantasy/githzerai-names | gender=male | female | +| Gnome | /fantasy/gnome-names | gender=male | female | +| Goblin | /fantasy/goblin-names | gender=male | female | +| Goliath | /fantasy/goliath-names | gender=male | female | +| Grung | /fantasy/grung-names | - | +| Half-Elf | /fantasy/half-elf-names | gender=male | female | +| Half-Orc | /fantasy/half-orc-names | gender=male | female | +| Halfling | /fantasy/halfling-names | gender=male | female | +| Harengon | /fantasy/harengon-names | gender=male | female | +| Hobgoblin | /fantasy/hobgoblin-names | - | +| Human | /fantasy/human-names | gender=male | female | +| Kalashtar | /fantasy/kalashtar-names | - | +| Kenku | /fantasy/kenku-names | - | +| Kobold | /fantasy/kobold-names | - | +| Leonin | /fantasy/leonin-names | gender=male | female | +| Lizardfolk | /fantasy/lizardfolk-names | gender=male | female | +| Locathah | /fantasy/locathah-names | - | +| Loxodon | /fantasy/loxodon-names | gender=male | female | +| Minotaur | /fantasy/minotaur-names | gender=male | female | +| Orc | /fantasy/orc-names | gender=male | female | +| Satyr | /fantasy/satyr-names | gender=male | female | child | +| Shadar-Kai | /fantasy/shadar-kai-names | gender=male | female | +| Shardmind | /fantasy/shardmind-names | - | +| Shifter | /fantasy/shifter-names | gender=male | female | +| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male | female | +| Tabaxi | /fantasy/tabaxi-names | gender=male | female | +| Tiefling | /fantasy/tiefling-names | gender=male | female | virtue | +| Tortle | /fantasy/tortle-names | - | +| Triton | /fantasy/triton-names | gender=male | female | +| Vedalken | /fantasy/vedalken-names | gender=male | female | +| Verdan | /fantasy/verdan-names | - | +| Warforged | /fantasy/warforged-names | - | +| Wilden | /fantasy/wilden-names | gender=male | female | +| Yuan-Ti | /fantasy/yuan-ti-names | - | ## Modern Name Endpoints -| Language/Type | Endpoint | Query Parameters | -|----------------------|-----------------------------|---------------------------| -| Modern English | /modern/english | gender=male|female|unisex | -| Modern Portuguese (EU)| /modern/portuguese | gender=male|female|unisex | +| Language/Type | Endpoint | Query Parameters | +| ---------------------- | ------------------ | ---------------- | ------ | ------ | +| Modern English | /modern/english | gender=male | female | unisex | +| Modern Portuguese (EU) | /modern/portuguese | gender=male | female | unisex | ## How to Query the API diff --git a/arrays.json b/arrays.json new file mode 100644 index 0000000..e69de29 diff --git a/main.go b/main.go index 26301df..4869827 100644 --- a/main.go +++ b/main.go @@ -23,13 +23,14 @@ func main() { r.Use(cors.Handler(cors.Options{ //AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development - AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://lk-api-temp.onrender.com"}), //* Use this for production + AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"}), //* Use this for production AllowedMethods: []string{"GET"}, AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"}, ExposedHeaders: []string{"Link"}, AllowCredentials: false, MaxAge: 300, })) + r.Use(RefererCheck(GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"}))) r.Use(RateLimiter(rps, burst)) r.Route("/v1", func(r chi.Router) { diff --git a/middleware.go b/middleware.go index cefc5a9..fe6d091 100644 --- a/middleware.go +++ b/middleware.go @@ -2,6 +2,7 @@ package main import ( "net/http" + "strings" "golang.org/x/time/rate" ) @@ -19,3 +20,28 @@ func RateLimiter(rps float64, burst int) func(http.Handler) http.Handler { }) } } + +func RefererCheck(allowedDomains []string) func(http.Handler) http.Handler { + return func(next http.Handler) http.Handler { + return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + referer := r.Header.Get("Referer") + + // Allow requests with no referer (direct API calls, Postman, etc.) + if referer == "" { + next.ServeHTTP(w, r) + return + } + + // Check if referer matches allowed domains + for _, domain := range allowedDomains { + if strings.HasPrefix(referer, domain) { + next.ServeHTTP(w, r) + return + } + } + + // Block if referer doesn't match + http.Error(w, "Forbidden", http.StatusForbidden) + }) + } +}