52ae0c5802
Some checks failed
cache-seeder / prune (push) Has been skipped
cache-seeder / frontend (push) Failing after 3s
cache-seeder / python (push) Failing after 3s
cache-seeder / gobuild (push) Failing after 4s
cache-seeder / lint (bindata, lint-backend) (push) Failing after 3s
giteabot backport / giteabot (push) Has been skipped
giteabot / giteabot (push) Has been skipped
cache-prune / prune (push) Has been skipped
release-nightly-snapcraft / build-and-publish (ubuntu-24.04) (push) Has been cancelled
release-nightly-snapcraft / build-and-publish (ubuntu-24.04-arm) (push) Has been cancelled
release-nightly / nightly-binary (push) Has been cancelled
release-nightly / nightly-container (push) Has been cancelled
cron-renovate / cron-renovate (push) Has been skipped
90 lines
2.3 KiB
Go
90 lines
2.3 KiB
Go
// Copyright 2025 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package common
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
|
|
user_model "gitea.dev/models/user"
|
|
"gitea.dev/modules/reqctx"
|
|
"gitea.dev/modules/setting"
|
|
"gitea.dev/modules/web/middleware"
|
|
"gitea.dev/modules/web/routing"
|
|
|
|
"github.com/go-chi/chi/v5"
|
|
)
|
|
|
|
func BlockExpensive() func(next http.Handler) http.Handler {
|
|
if !setting.Service.BlockAnonymousAccessExpensive {
|
|
return nil
|
|
}
|
|
return func(next http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
|
|
ret := determineRequestPriority(reqctx.FromContext(req.Context()))
|
|
if !ret.SignedIn {
|
|
if ret.Expensive || ret.LongPolling {
|
|
http.Redirect(w, req, middleware.RedirectLinkUserLogin(req), http.StatusSeeOther)
|
|
return
|
|
}
|
|
}
|
|
next.ServeHTTP(w, req)
|
|
})
|
|
}
|
|
}
|
|
|
|
func isRoutePathExpensive(routePattern string) bool {
|
|
if strings.HasPrefix(routePattern, "/user/") || strings.HasPrefix(routePattern, "/login/") {
|
|
return false
|
|
}
|
|
|
|
expensivePaths := []string{
|
|
// code related
|
|
"/{username}/{reponame}/archive/",
|
|
"/{username}/{reponame}/blame/",
|
|
"/{username}/{reponame}/commit/",
|
|
"/{username}/{reponame}/commits/",
|
|
"/{username}/{reponame}/compare/",
|
|
"/{username}/{reponame}/graph",
|
|
"/{username}/{reponame}/media/",
|
|
"/{username}/{reponame}/raw/",
|
|
"/{username}/{reponame}/rss/branch/",
|
|
"/{username}/{reponame}/src/",
|
|
|
|
// issue & PR related (no trailing slash)
|
|
"/{username}/{reponame}/issues",
|
|
"/{username}/{reponame}/{type:issues}",
|
|
"/{username}/{reponame}/pulls",
|
|
"/{username}/{reponame}/{type:pulls}",
|
|
|
|
// wiki
|
|
"/{username}/{reponame}/wiki/",
|
|
|
|
// activity
|
|
"/{username}/{reponame}/activity/",
|
|
}
|
|
for _, path := range expensivePaths {
|
|
if strings.HasPrefix(routePattern, path) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func determineRequestPriority(reqCtx reqctx.RequestContext) (ret struct {
|
|
SignedIn bool
|
|
Expensive bool
|
|
LongPolling bool
|
|
},
|
|
) {
|
|
chiRoutePath := chi.RouteContext(reqCtx).RoutePattern()
|
|
if _, ok := reqCtx.GetData()[middleware.ContextDataKeySignedUser].(*user_model.User); ok {
|
|
ret.SignedIn = true
|
|
} else {
|
|
ret.Expensive = isRoutePathExpensive(chiRoutePath)
|
|
ret.LongPolling = routing.GetRequestRecordInfo(reqCtx).IsLongPolling
|
|
}
|
|
return ret
|
|
}
|