Block Direct Requests

This commit is contained in:
2025-08-01 01:44:23 +01:00
parent db9c114bfe
commit dea3c68510
4 changed files with 85 additions and 58 deletions
+57 -57
View File
@@ -8,66 +8,66 @@ http://localhost:8080/v1
## Fantasy Name Endpoints ## Fantasy Name Endpoints
| Race/Type | Endpoint | Query Parameters | | Race/Type | Endpoint | Query Parameters |
|-------------------|----------------------------------|---------------------------| | ------------ | --------------------------- | ---------------- | ------ | ------- |
| Elf | /fantasy/elf-names | gender=male|female|child | | Elf | /fantasy/elf-names | gender=male | female | child |
| Dwarf | /fantasy/dwarf-names | gender=male|female | | Dwarf | /fantasy/dwarf-names | gender=male | female |
| Arakocra | /fantasy/arakocra-names | - | | Arakocra | /fantasy/arakocra-names | - |
| Aasimar | /fantasy/aasimar-names | gender=male|female | | Aasimar | /fantasy/aasimar-names | gender=male | female |
| Bugbear | /fantasy/bugbear-names | - | | Bugbear | /fantasy/bugbear-names | - |
| Centaur | /fantasy/centaur-names | gender=male|female | | Centaur | /fantasy/centaur-names | gender=male | female |
| Changeling | /fantasy/changeling-names | - | | Changeling | /fantasy/changeling-names | - |
| Deep Gnome | /fantasy/deep-gnome-names | gender=male|female | | Deep Gnome | /fantasy/deep-gnome-names | gender=male | female |
| Deva | /fantasy/deva-names | gender=male|female | | Deva | /fantasy/deva-names | gender=male | female |
| Dragonborn | /fantasy/dragonborn-names | gender=male|female|surname| | Dragonborn | /fantasy/dragonborn-names | gender=male | female | surname |
| Drow | /fantasy/drow-names | gender=male|female|surname| | Drow | /fantasy/drow-names | gender=male | female | surname |
| Duergar | /fantasy/duergar-names | gender=male|female | | Duergar | /fantasy/duergar-names | gender=male | female |
| Eladrin | /fantasy/eladrin-names | gender=male|female | | Eladrin | /fantasy/eladrin-names | gender=male | female |
| Fairy | /fantasy/fairy-names | gender=male|female | | Fairy | /fantasy/fairy-names | gender=male | female |
| Firbolg | /fantasy/firbolg-names | gender=male|female|child | | Firbolg | /fantasy/firbolg-names | gender=male | female | child |
| Genasi | /fantasy/genasi-names | - | | Genasi | /fantasy/genasi-names | - |
| Githyanki | /fantasy/githyanki-names | gender=male|female | | Githyanki | /fantasy/githyanki-names | gender=male | female |
| Githzerai | /fantasy/githzerai-names | gender=male|female | | Githzerai | /fantasy/githzerai-names | gender=male | female |
| Gnome | /fantasy/gnome-names | gender=male|female | | Gnome | /fantasy/gnome-names | gender=male | female |
| Goblin | /fantasy/goblin-names | gender=male|female | | Goblin | /fantasy/goblin-names | gender=male | female |
| Goliath | /fantasy/goliath-names | gender=male|female | | Goliath | /fantasy/goliath-names | gender=male | female |
| Grung | /fantasy/grung-names | - | | Grung | /fantasy/grung-names | - |
| Half-Elf | /fantasy/half-elf-names | gender=male|female | | Half-Elf | /fantasy/half-elf-names | gender=male | female |
| Half-Orc | /fantasy/half-orc-names | gender=male|female | | Half-Orc | /fantasy/half-orc-names | gender=male | female |
| Halfling | /fantasy/halfling-names | gender=male|female | | Halfling | /fantasy/halfling-names | gender=male | female |
| Harengon | /fantasy/harengon-names | gender=male|female | | Harengon | /fantasy/harengon-names | gender=male | female |
| Hobgoblin | /fantasy/hobgoblin-names | - | | Hobgoblin | /fantasy/hobgoblin-names | - |
| Human | /fantasy/human-names | gender=male|female | | Human | /fantasy/human-names | gender=male | female |
| Kalashtar | /fantasy/kalashtar-names | - | | Kalashtar | /fantasy/kalashtar-names | - |
| Kenku | /fantasy/kenku-names | - | | Kenku | /fantasy/kenku-names | - |
| Kobold | /fantasy/kobold-names | - | | Kobold | /fantasy/kobold-names | - |
| Leonin | /fantasy/leonin-names | gender=male|female | | Leonin | /fantasy/leonin-names | gender=male | female |
| Lizardfolk | /fantasy/lizardfolk-names | gender=male|female | | Lizardfolk | /fantasy/lizardfolk-names | gender=male | female |
| Locathah | /fantasy/locathah-names | - | | Locathah | /fantasy/locathah-names | - |
| Loxodon | /fantasy/loxodon-names | gender=male|female | | Loxodon | /fantasy/loxodon-names | gender=male | female |
| Minotaur | /fantasy/minotaur-names | gender=male|female | | Minotaur | /fantasy/minotaur-names | gender=male | female |
| Orc | /fantasy/orc-names | gender=male|female | | Orc | /fantasy/orc-names | gender=male | female |
| Satyr | /fantasy/satyr-names | gender=male|female|child | | Satyr | /fantasy/satyr-names | gender=male | female | child |
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male|female | | Shadar-Kai | /fantasy/shadar-kai-names | gender=male | female |
| Shardmind | /fantasy/shardmind-names | - | | Shardmind | /fantasy/shardmind-names | - |
| Shifter | /fantasy/shifter-names | gender=male|female | | Shifter | /fantasy/shifter-names | gender=male | female |
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male|female | | Simic Hybrid | /fantasy/simic-hybrid-names | gender=male | female |
| Tabaxi | /fantasy/tabaxi-names | gender=male|female | | Tabaxi | /fantasy/tabaxi-names | gender=male | female |
| Tiefling | /fantasy/tiefling-names | gender=male|female|virtue | | Tiefling | /fantasy/tiefling-names | gender=male | female | virtue |
| Tortle | /fantasy/tortle-names | - | | Tortle | /fantasy/tortle-names | - |
| Triton | /fantasy/triton-names | gender=male|female | | Triton | /fantasy/triton-names | gender=male | female |
| Vedalken | /fantasy/vedalken-names | gender=male|female | | Vedalken | /fantasy/vedalken-names | gender=male | female |
| Verdan | /fantasy/verdan-names | - | | Verdan | /fantasy/verdan-names | - |
| Warforged | /fantasy/warforged-names | - | | Warforged | /fantasy/warforged-names | - |
| Wilden | /fantasy/wilden-names | gender=male|female | | Wilden | /fantasy/wilden-names | gender=male | female |
| Yuan-Ti | /fantasy/yuan-ti-names | - | | Yuan-Ti | /fantasy/yuan-ti-names | - |
## Modern Name Endpoints ## Modern Name Endpoints
| Language/Type | Endpoint | Query Parameters | | Language/Type | Endpoint | Query Parameters |
|----------------------|-----------------------------|---------------------------| | ---------------------- | ------------------ | ---------------- | ------ | ------ |
| Modern English | /modern/english | gender=male|female|unisex | | Modern English | /modern/english | gender=male | female | unisex |
| Modern Portuguese (EU)| /modern/portuguese | gender=male|female|unisex | | Modern Portuguese (EU) | /modern/portuguese | gender=male | female | unisex |
## How to Query the API ## How to Query the API
View File
+2 -1
View File
@@ -23,13 +23,14 @@ func main() {
r.Use(cors.Handler(cors.Options{ r.Use(cors.Handler(cors.Options{
//AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development //AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://lk-api-temp.onrender.com"}), //* Use this for production AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"}), //* Use this for production
AllowedMethods: []string{"GET"}, AllowedMethods: []string{"GET"},
AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"}, AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"},
ExposedHeaders: []string{"Link"}, ExposedHeaders: []string{"Link"},
AllowCredentials: false, AllowCredentials: false,
MaxAge: 300, MaxAge: 300,
})) }))
r.Use(RefererCheck(GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"})))
r.Use(RateLimiter(rps, burst)) r.Use(RateLimiter(rps, burst))
r.Route("/v1", func(r chi.Router) { r.Route("/v1", func(r chi.Router) {
+26
View File
@@ -2,6 +2,7 @@ package main
import ( import (
"net/http" "net/http"
"strings"
"golang.org/x/time/rate" "golang.org/x/time/rate"
) )
@@ -19,3 +20,28 @@ func RateLimiter(rps float64, burst int) func(http.Handler) http.Handler {
}) })
} }
} }
func RefererCheck(allowedDomains []string) func(http.Handler) http.Handler {
return func(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
referer := r.Header.Get("Referer")
// Allow requests with no referer (direct API calls, Postman, etc.)
if referer == "" {
next.ServeHTTP(w, r)
return
}
// Check if referer matches allowed domains
for _, domain := range allowedDomains {
if strings.HasPrefix(referer, domain) {
next.ServeHTTP(w, r)
return
}
}
// Block if referer doesn't match
http.Error(w, "Forbidden", http.StatusForbidden)
})
}
}