Skip to content

Instantly share code, notes, and snippets.

@zrosenbauer

zrosenbauer/ATOStopper-rc1.js

Created August 13, 2019 14:53
Show Gist options
  • Save zrosenbauer/157717218d0371bfa6ea76b0bbe6d527 to your computer and use it in GitHub Desktop.
Save zrosenbauer/157717218d0371bfa6ea76b0bbe6d527 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. zrosenbauer created this gist Aug 13, 2019.
    61 changes: 61 additions & 0 deletions ATOStopper-rc1.js
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,61 @@
    'use strict';

    const Redis = require('ioredis');
    const redis = new Redis('cache:6379');

    const blockList = [
    '[email protected]'
    ];

    const badEmailDomains = [
    'hacker.com'
    ];

    const badEmailHandles = [
    'iamahacker'
    ];

    const MINUTES_15 = 60 * 15;

    async function assertSafe ({ email, ipAddress }) {
    const [handle, domain] = email.split('@');
    if (blockList.includes(email)) {
    throw new Error('ATOStopper: Blocked email');
    }

    if (badEmailHandles.includes(handle)) {
    throw new Error('ATOStopper: Blocked email handle');
    }

    if (badEmailDomains.includes(domain)) {
    throw new Error('ATOStopper: Blocked email domain');
    }

    const [ipResult] = await redis
    .pipeline()
    .incr(`ipAddress:${ipAddress}`)
    .expire(`ipAddress:${ipAddress}`, MINUTES_15)
    .get(`ipAddress:${ipAddress}`)
    .exec();
    const [, ipAddressCount] = ipResult;

    if (ipAddressCount > 20) {
    throw new Error('ATOStopper: IP Address Velocity Exceeded');
    }

    const [emailResult] = await redis
    .pipeline()
    .incr(`email:${email}`)
    .expire(`email:${email}`, MINUTES_15)
    .get(`email:${email}`)
    .exec();
    const [, emailCount] = emailResult;

    if (emailCount > 7) {
    throw new Error('ATOStopper: Email Velocity Exceeded');
    }
    }

    module.exports = {
    assertSafe
    };