Block Direct Requests
This commit is contained in:
+40
-40
@@ -9,65 +9,65 @@ http://localhost:8080/v1
|
||||
## Fantasy Name Endpoints
|
||||
|
||||
| Race/Type | Endpoint | Query Parameters |
|
||||
|-------------------|----------------------------------|---------------------------|
|
||||
| Elf | /fantasy/elf-names | gender=male|female|child |
|
||||
| Dwarf | /fantasy/dwarf-names | gender=male|female |
|
||||
| ------------ | --------------------------- | ---------------- | ------ | ------- |
|
||||
| Elf | /fantasy/elf-names | gender=male | female | child |
|
||||
| Dwarf | /fantasy/dwarf-names | gender=male | female |
|
||||
| Arakocra | /fantasy/arakocra-names | - |
|
||||
| Aasimar | /fantasy/aasimar-names | gender=male|female |
|
||||
| Aasimar | /fantasy/aasimar-names | gender=male | female |
|
||||
| Bugbear | /fantasy/bugbear-names | - |
|
||||
| Centaur | /fantasy/centaur-names | gender=male|female |
|
||||
| Centaur | /fantasy/centaur-names | gender=male | female |
|
||||
| Changeling | /fantasy/changeling-names | - |
|
||||
| Deep Gnome | /fantasy/deep-gnome-names | gender=male|female |
|
||||
| Deva | /fantasy/deva-names | gender=male|female |
|
||||
| Dragonborn | /fantasy/dragonborn-names | gender=male|female|surname|
|
||||
| Drow | /fantasy/drow-names | gender=male|female|surname|
|
||||
| Duergar | /fantasy/duergar-names | gender=male|female |
|
||||
| Eladrin | /fantasy/eladrin-names | gender=male|female |
|
||||
| Fairy | /fantasy/fairy-names | gender=male|female |
|
||||
| Firbolg | /fantasy/firbolg-names | gender=male|female|child |
|
||||
| Deep Gnome | /fantasy/deep-gnome-names | gender=male | female |
|
||||
| Deva | /fantasy/deva-names | gender=male | female |
|
||||
| Dragonborn | /fantasy/dragonborn-names | gender=male | female | surname |
|
||||
| Drow | /fantasy/drow-names | gender=male | female | surname |
|
||||
| Duergar | /fantasy/duergar-names | gender=male | female |
|
||||
| Eladrin | /fantasy/eladrin-names | gender=male | female |
|
||||
| Fairy | /fantasy/fairy-names | gender=male | female |
|
||||
| Firbolg | /fantasy/firbolg-names | gender=male | female | child |
|
||||
| Genasi | /fantasy/genasi-names | - |
|
||||
| Githyanki | /fantasy/githyanki-names | gender=male|female |
|
||||
| Githzerai | /fantasy/githzerai-names | gender=male|female |
|
||||
| Gnome | /fantasy/gnome-names | gender=male|female |
|
||||
| Goblin | /fantasy/goblin-names | gender=male|female |
|
||||
| Goliath | /fantasy/goliath-names | gender=male|female |
|
||||
| Githyanki | /fantasy/githyanki-names | gender=male | female |
|
||||
| Githzerai | /fantasy/githzerai-names | gender=male | female |
|
||||
| Gnome | /fantasy/gnome-names | gender=male | female |
|
||||
| Goblin | /fantasy/goblin-names | gender=male | female |
|
||||
| Goliath | /fantasy/goliath-names | gender=male | female |
|
||||
| Grung | /fantasy/grung-names | - |
|
||||
| Half-Elf | /fantasy/half-elf-names | gender=male|female |
|
||||
| Half-Orc | /fantasy/half-orc-names | gender=male|female |
|
||||
| Halfling | /fantasy/halfling-names | gender=male|female |
|
||||
| Harengon | /fantasy/harengon-names | gender=male|female |
|
||||
| Half-Elf | /fantasy/half-elf-names | gender=male | female |
|
||||
| Half-Orc | /fantasy/half-orc-names | gender=male | female |
|
||||
| Halfling | /fantasy/halfling-names | gender=male | female |
|
||||
| Harengon | /fantasy/harengon-names | gender=male | female |
|
||||
| Hobgoblin | /fantasy/hobgoblin-names | - |
|
||||
| Human | /fantasy/human-names | gender=male|female |
|
||||
| Human | /fantasy/human-names | gender=male | female |
|
||||
| Kalashtar | /fantasy/kalashtar-names | - |
|
||||
| Kenku | /fantasy/kenku-names | - |
|
||||
| Kobold | /fantasy/kobold-names | - |
|
||||
| Leonin | /fantasy/leonin-names | gender=male|female |
|
||||
| Lizardfolk | /fantasy/lizardfolk-names | gender=male|female |
|
||||
| Leonin | /fantasy/leonin-names | gender=male | female |
|
||||
| Lizardfolk | /fantasy/lizardfolk-names | gender=male | female |
|
||||
| Locathah | /fantasy/locathah-names | - |
|
||||
| Loxodon | /fantasy/loxodon-names | gender=male|female |
|
||||
| Minotaur | /fantasy/minotaur-names | gender=male|female |
|
||||
| Orc | /fantasy/orc-names | gender=male|female |
|
||||
| Satyr | /fantasy/satyr-names | gender=male|female|child |
|
||||
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male|female |
|
||||
| Loxodon | /fantasy/loxodon-names | gender=male | female |
|
||||
| Minotaur | /fantasy/minotaur-names | gender=male | female |
|
||||
| Orc | /fantasy/orc-names | gender=male | female |
|
||||
| Satyr | /fantasy/satyr-names | gender=male | female | child |
|
||||
| Shadar-Kai | /fantasy/shadar-kai-names | gender=male | female |
|
||||
| Shardmind | /fantasy/shardmind-names | - |
|
||||
| Shifter | /fantasy/shifter-names | gender=male|female |
|
||||
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male|female |
|
||||
| Tabaxi | /fantasy/tabaxi-names | gender=male|female |
|
||||
| Tiefling | /fantasy/tiefling-names | gender=male|female|virtue |
|
||||
| Shifter | /fantasy/shifter-names | gender=male | female |
|
||||
| Simic Hybrid | /fantasy/simic-hybrid-names | gender=male | female |
|
||||
| Tabaxi | /fantasy/tabaxi-names | gender=male | female |
|
||||
| Tiefling | /fantasy/tiefling-names | gender=male | female | virtue |
|
||||
| Tortle | /fantasy/tortle-names | - |
|
||||
| Triton | /fantasy/triton-names | gender=male|female |
|
||||
| Vedalken | /fantasy/vedalken-names | gender=male|female |
|
||||
| Triton | /fantasy/triton-names | gender=male | female |
|
||||
| Vedalken | /fantasy/vedalken-names | gender=male | female |
|
||||
| Verdan | /fantasy/verdan-names | - |
|
||||
| Warforged | /fantasy/warforged-names | - |
|
||||
| Wilden | /fantasy/wilden-names | gender=male|female |
|
||||
| Wilden | /fantasy/wilden-names | gender=male | female |
|
||||
| Yuan-Ti | /fantasy/yuan-ti-names | - |
|
||||
|
||||
## Modern Name Endpoints
|
||||
|
||||
| Language/Type | Endpoint | Query Parameters |
|
||||
|----------------------|-----------------------------|---------------------------|
|
||||
| Modern English | /modern/english | gender=male|female|unisex |
|
||||
| Modern Portuguese (EU)| /modern/portuguese | gender=male|female|unisex |
|
||||
| ---------------------- | ------------------ | ---------------- | ------ | ------ |
|
||||
| Modern English | /modern/english | gender=male | female | unisex |
|
||||
| Modern Portuguese (EU) | /modern/portuguese | gender=male | female | unisex |
|
||||
|
||||
## How to Query the API
|
||||
|
||||
|
||||
@@ -23,13 +23,14 @@ func main() {
|
||||
|
||||
r.Use(cors.Handler(cors.Options{
|
||||
//AllowedOrigins: []string{"https://*", "http://*"}, //* Use this for development
|
||||
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://lk-api-temp.onrender.com"}), //* Use this for production
|
||||
AllowedOrigins: GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"}), //* Use this for production
|
||||
AllowedMethods: []string{"GET"},
|
||||
AllowedHeaders: []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"},
|
||||
ExposedHeaders: []string{"Link"},
|
||||
AllowCredentials: false,
|
||||
MaxAge: 300,
|
||||
}))
|
||||
r.Use(RefererCheck(GetEnvList("ALLOWED_ORIGINS", []string{"https://utils.fernandovideira.com"})))
|
||||
r.Use(RateLimiter(rps, burst))
|
||||
|
||||
r.Route("/v1", func(r chi.Router) {
|
||||
|
||||
@@ -2,6 +2,7 @@ package main
|
||||
|
||||
import (
|
||||
"net/http"
|
||||
"strings"
|
||||
|
||||
"golang.org/x/time/rate"
|
||||
)
|
||||
@@ -19,3 +20,28 @@ func RateLimiter(rps float64, burst int) func(http.Handler) http.Handler {
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
func RefererCheck(allowedDomains []string) func(http.Handler) http.Handler {
|
||||
return func(next http.Handler) http.Handler {
|
||||
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||||
referer := r.Header.Get("Referer")
|
||||
|
||||
// Allow requests with no referer (direct API calls, Postman, etc.)
|
||||
if referer == "" {
|
||||
next.ServeHTTP(w, r)
|
||||
return
|
||||
}
|
||||
|
||||
// Check if referer matches allowed domains
|
||||
for _, domain := range allowedDomains {
|
||||
if strings.HasPrefix(referer, domain) {
|
||||
next.ServeHTTP(w, r)
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
// Block if referer doesn't match
|
||||
http.Error(w, "Forbidden", http.StatusForbidden)
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user