Block Direct Requests
This commit is contained in:
+57
-57
@@ -8,66 +8,66 @@ http://localhost:8080/v1
|
|||||||
|
|
||||||
## Fantasy Name Endpoints
|
## Fantasy Name Endpoints
|
||||||
|
|
||||||
| Race/Type | Endpoint | Query Parameters |
|
| Race/Type | Endpoint | Query Parameters |
|
||||||
|-------------------|----------------------------------|---------------------------|
|
| ------------ | --------------------------- | ---------------- | ------ | ------- |
|
||||||
| Elf | /fantasy/elf-names | gender=male|female|child |
|
| Elf | /fantasy/elf-names | gender=male | female | child |
|
||||||
| Dwarf | /fantasy/dwarf-names | gender=male|female |
|
| Dwarf | /fantasy/dwarf-names | gender=male | female |
|
||||||
| Arakocra | /fantasy/arakocra-names | - |
|
| Arakocra | /fantasy/arakocra-names | - |
|
||||||
| Aasimar | /fantasy/aasimar-names | gender=male|female |
|
| Aasimar | /fantasy/aasimar-names | gender=male | female |
|
||||||
| Bugbear | /fantasy/bugbear-names | - |
|
| Bugbear | /fantasy/bugbear-names | - |
|
||||||
| Centaur | /fantasy/centaur-names | gender=male|female |
|
| Centaur | /fantasy/centaur-names | gender=male | female |
|
||||||
| Changeling | /fantasy/changeling-names | - |
|
| Changeling | /fantasy/changeling-names | - |
|
||||||
| Deep Gnome | /fantasy/deep-gnome-names | gender=male|female |
|
| Deep Gnome | /fantasy/deep-gnome-names | gender=male | female |
|
||||||
| Deva | /fantasy/deva-names | gender=male|female |
|
| Deva | /fantasy/deva-names | gender=male | female |
|
||||||
| Dragonborn | /fantasy/dragonborn-names | gender=male|female|surname|
|
| Dragonborn | /fantasy/dragonborn-names | gender=male | female | surname |
|
||||||
| Drow | /fantasy/drow-names | gender=male|female|surname|
|
| Drow | /fantasy/drow-names | gender=male | female | surname |
|
||||||
| Duergar | /fantasy/duergar-names | gender=male|female |
|
| Duergar | /fantasy/duergar-names | gender=male | female |
|
||||||
| Eladrin | /fantasy/eladrin-names | gender=male|female |
|
| Eladrin | /fantasy/eladrin-names | gender=male | female |
|
||||||
| Fairy | /fantasy/fairy-names | gender=male|female |
|
| Fairy | /fantasy/fairy-names | gender=male | female |
|
||||||
| Firbolg | /fantasy/firbolg-names | gender=male|female|child |
|
| Firbolg | /fantasy/firbolg-names | gender=male | female | child |
|
||||||
| Genasi | /fantasy/genasi-names | - |
|
| Genasi | /fantasy/genasi-names | - |
|
||||||
| Githyanki | /fantasy/githyanki-names | gender=male|female |
|
| Githyanki | /fantasy/githyanki-names | gender=male | female |
|
||||||
| Githzerai | /fantasy/githzerai-names | gender=male|female |
|
| Githzerai | /fantasy/githzerai-names | gender=male | female |
|
||||||
| Gnome | /fantasy/gnome-names | gender=male|female |
|
| Gnome | /fantasy/gnome-names | gender=male | female |
|
||||||
| Goblin | /fantasy/goblin-names | gender=male|female |
|
| Goblin | /fantasy/goblin-names | gender=male | female |
|
||||||
| Goliath | /fantasy/goliath-names | gender=male|female |
|
| Goliath | /fantasy/goliath-names | gender=male | female |
|
||||||
| Grung | /fantasy/grung-names | - |
|
| Grung | /fantasy/grung-names | - |
|
||||||
| Half-Elf | /fantasy/half-elf-names | gender=male|female |
|
| Half-Elf | /fantasy/half-elf-names | gender=male | female |
|
||||||
| Half-Orc | /fantasy/half-orc-names | gender=male|female |
|
| Half-Orc | /fantasy/half-orc-names | gender=male | female |
|
||||||
| Halfling | /fantasy/halfling-names | gender=male|female |
|
| Halfling | /fantasy/halfling-names | gender=male | female |
|
||||||
| Harengon | /fantasy/harengon-names | gender=male|female |
|
| Harengon | /fantasy/harengon-names | gender=male | female |
|
||||||
| Hobgoblin | /fantasy/hobgoblin-names | - |
|
| Hobgoblin | /fantasy/hobgoblin-names | - |
|
||||||
| Human | /fantasy/human-names | gender=male|female |
|
| Human | /fantasy/human-names | gender=male | female |
|
||||||
| Kalashtar | /fantasy/kalashtar-names | - |
|
| Kalashtar | /fantasy/kalashtar-names | - |
|
||||||
| Kenku | /fantasy/kenku-names | - |
|
| Kenku | /fantasy/kenku-names | - |
|
||||||
| Kobold | /fantasy/kobold-names | - |
|
| Kobold | /fantasy/kobold-names | - |
|
||||||
| Leonin | /fantasy/leonin-names | gender=male|female |
|
| Leonin | /fantasy/leonin-names | gender=male | female |
|
||||||
| Lizardfolk | /fantasy/lizardfolk-names | gender=male|female |
|
| Lizardfolk | /fantasy/lizardfolk-names | gender=male | female |
|
||||||
| Locathah | /fantasy/locathah-names | - |
|
| Locathah | /fantasy/locathah-names | - |
|
||||||
| Loxodon | /fantasy/loxodon-names | gender=male|female |
|
| Loxodon | /fantasy/loxodon-names | gender=male | female |
|
||||||
| Minotaur | /fantasy/minotaur-names | gender=male|female |
|
| Minotaur | /fantasy/minotaur-names | gender=male | female |
|
||||||
| Orc | /fantasy/orc-names | gender=male|female |
|
| Orc | /fantasy/orc-names | gender=male | female |
|
||||||
| Satyr | /fantasy/satyr-names | gender=male|female|child |
|
| Satyr | /fantasy/satyr-names | gender=male | female | child |
|
||||||
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male|female |
|
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male | female |
|
||||||
| Shardmind | /fantasy/shardmind-names | - |
|
| Shardmind | /fantasy/shardmind-names | - |
|
||||||
| Shifter | /fantasy/shifter-names | gender=male|female |
|
| Shifter | /fantasy/shifter-names | gender=male | female |
|
||||||
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male|female |
|
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male | female |
|
||||||
| Tabaxi | /fantasy/tabaxi-names | gender=male|female |
|
| Tabaxi | /fantasy/tabaxi-names | gender=male | female |
|
||||||
| Tiefling | /fantasy/tiefling-names | gender=male|female|virtue |
|
| Tiefling | /fantasy/tiefling-names | gender=male | female | virtue |
|
||||||
| Tortle | /fantasy/tortle-names | - |
|
| Tortle | /fantasy/tortle-names | - |
|
||||||
| Triton | /fantasy/triton-names | gender=male|female |
|
| Triton | /fantasy/triton-names | gender=male | female |
|
||||||
| Vedalken | /fantasy/vedalken-names | gender=male|female |
|
| Vedalken | /fantasy/vedalken-names | gender=male | female |
|
||||||
| Verdan | /fantasy/verdan-names | - |
|
| Verdan | /fantasy/verdan-names | - |
|
||||||
| Warforged | /fantasy/warforged-names | - |
|
| Warforged | /fantasy/warforged-names | - |
|
||||||
| Wilden | /fantasy/wilden-names | gender=male|female |
|
| Wilden | /fantasy/wilden-names | gender=male | female |
|
||||||
| Yuan-Ti | /fantasy/yuan-ti-names | - |
|
| Yuan-Ti | /fantasy/yuan-ti-names | - |
|
||||||
|
|
||||||
## Modern Name Endpoints
|
## Modern Name Endpoints
|
||||||
|
|
||||||
| Language/Type | Endpoint | Query Parameters |
|
| Language/Type | Endpoint | Query Parameters |
|
||||||
|----------------------|-----------------------------|---------------------------|
|
| ---------------------- | ------------------ | ---------------- | ------ | ------ |
|
||||||
| Modern English | /modern/english | gender=male|female|unisex |
|
| Modern English | /modern/english | gender=male | female | unisex |
|
||||||
| Modern Portuguese (EU)| /modern/portuguese | gender=male|female|unisex |
|
| Modern Portuguese (EU) | /modern/portuguese | gender=male | female | unisex |
|
||||||
|
|
||||||
## How to Query the API
|
## How to Query the API
|
||||||
|
|
||||||
|
|||||||
@@ -23,13 +23,14 @@ func main() {
|
|||||||
|
|
||||||
r.Use(cors.Handler(cors.Options{
|
r.Use(cors.Handler(cors.Options{
|
||||||
//AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development
|
//AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development
|
||||||
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://lk-api-temp.onrender.com"}), //* Use this for production
|
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"}), //* Use this for production
|
||||||
AllowedMethods: []string{"GET"},
|
AllowedMethods: []string{"GET"},
|
||||||
AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"},
|
AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"},
|
||||||
ExposedHeaders: []string{"Link"},
|
ExposedHeaders: []string{"Link"},
|
||||||
AllowCredentials: false,
|
AllowCredentials: false,
|
||||||
MaxAge: 300,
|
MaxAge: 300,
|
||||||
}))
|
}))
|
||||||
|
r.Use(RefererCheck(GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"})))
|
||||||
r.Use(RateLimiter(rps, burst))
|
r.Use(RateLimiter(rps, burst))
|
||||||
|
|
||||||
r.Route("/v1", func(r chi.Router) {
|
r.Route("/v1", func(r chi.Router) {
|
||||||
|
|||||||
@@ -2,6 +2,7 @@ package main
|
|||||||
|
|
||||||
import (
|
import (
|
||||||
"net/http"
|
"net/http"
|
||||||
|
"strings"
|
||||||
|
|
||||||
"golang.org/x/time/rate"
|
"golang.org/x/time/rate"
|
||||||
)
|
)
|
||||||
@@ -19,3 +20,28 @@ func RateLimiter(rps float64, burst int) func(http.Handler) http.Handler {
|
|||||||
})
|
})
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func RefererCheck(allowedDomains []string) func(http.Handler) http.Handler {
|
||||||
|
return func(next http.Handler) http.Handler {
|
||||||
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||||||
|
referer := r.Header.Get("Referer")
|
||||||
|
|
||||||
|
// Allow requests with no referer (direct API calls, Postman, etc.)
|
||||||
|
if referer == "" {
|
||||||
|
next.ServeHTTP(w, r)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check if referer matches allowed domains
|
||||||
|
for _, domain := range allowedDomains {
|
||||||
|
if strings.HasPrefix(referer, domain) {
|
||||||
|
next.ServeHTTP(w, r)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Block if referer doesn't match
|
||||||
|
http.Error(w, "Forbidden", http.StatusForbidden)
|
||||||
|
})
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user