Admission check endpoint

src/controllers/invoices/get-invoice-pubkey-check-controller.ts

@@ -0,0 +1,72 @@
+import { Request, Response } from 'express'
+import { createLogger } from '../../factories/logger-factory'
+import { getRemoteAddress } from '../../utils/http'
+import { IController } from '../../@types/controllers'
+import { IRateLimiter } from '../../@types/utils'
+import { IUserRepository } from '../../@types/repositories'
+import { path } from 'ramda'
+import { Settings } from '../../@types/settings'
+
+const debug = createLogger('get-invoice-pubkey-check-controller')
+
+export class GetInvoicePubkeyCheckController implements IController {
+  public constructor(
+    private readonly userRepository: IUserRepository,
+    private readonly settings: () => Settings,
+    private readonly rateLimiter: () => IRateLimiter,
+  ){}
+
+  public async handleRequest(request: Request, response: Response): Promise<void> {
+    const currentSettings = this.settings()
+
+    const limited = await this.isRateLimited(request, currentSettings)
+    if (limited) {
+      response
+        .status(429)
+        .setHeader('content-type', 'text/plain; charset=utf8')
+        .send('Too many requests')
+      return
+    }
+
+    const pubkey = request.params.pubkey
+    const user = await this.userRepository.findByPubkey(pubkey)
+
+    console.log('user', user)
+
+    let userAdmitted = false
+
+    const minBalance = currentSettings.limits?.event?.pubkey?.minBalance
+    if (user && user.isAdmitted && (!minBalance || user.balance >= minBalance)) {
+      userAdmitted = true
+    }
+
+    response
+      .status(200)
+      .setHeader('content-type', 'application/json; charset=utf8')
+      .send({ userAdmitted })
+
+    return
+  }
+
+  public async isRateLimited(request: Request, settings: Settings) {
+    const rateLimits = path(['limits', 'invoice', 'rateLimits'], settings)
+    if (!Array.isArray(rateLimits) || !rateLimits.length) {
+      return false
+    }
+
+    const ipWhitelist = path(['limits', 'invoice', 'ipWhitelist'], settings)
+    const remoteAddress = getRemoteAddress(request, settings)
+
+    let limited = false
+    if (Array.isArray(ipWhitelist) && !ipWhitelist.includes(remoteAddress)) {
+      const rateLimiter = this.rateLimiter()
+      for (const { rate, period } of rateLimits) {
+        if (await rateLimiter.hit(`${remoteAddress}:invoice:${period}`, 1, { period, rate })) {
+          debug('rate limited %s: %d in %d milliseconds', remoteAddress, rate, period)
+          limited = true
+        }
+      }
+    }
+    return limited
+  }
+}

src/factories/controllers/get-invoice-pubkey-check-controller-factory.ts

@@ -0,0 +1,16 @@
+import { createSettings } from '../settings-factory'
+import { GetInvoicePubkeyCheckController } from '../../controllers/invoices/get-invoice-pubkey-check-controller'
+import { getMasterDbClient } from '../../database/client'
+import { slidingWindowRateLimiterFactory } from '../rate-limiter-factory'
+import { UserRepository } from '../../repositories/user-repository'
+
+export const createGetInvoicePubkeyCheckController = () => {
+  const dbClient = getMasterDbClient()
+  const userRepository = new UserRepository(dbClient)
+
+  return new GetInvoicePubkeyCheckController(
+    userRepository,
+    createSettings,
+    slidingWindowRateLimiterFactory
+  )
+}

src/routes/invoices/index.ts

@@ -1,6 +1,7 @@
 import { Router, urlencoded } from 'express'
 
 import { createGetInvoiceController } from '../../factories/controllers/get-invoice-controller-factory'
+import { createGetInvoicePubkeyCheckController } from '../../factories/controllers/get-invoice-pubkey-check-controller-factory'
 import { createGetInvoiceStatusController } from '../../factories/controllers/get-invoice-status-controller-factory'
 import { createPostInvoiceController } from '../../factories/controllers/post-invoice-controller-factory'
 import { withController } from '../../handlers/request-handlers/with-controller-request-handler'
@@ -10,6 +11,7 @@ const invoiceRouter = Router()
 invoiceRouter
   .get('/', withController(createGetInvoiceController))
   .get('/:invoiceId/status', withController(createGetInvoiceStatusController))
+  .get('/check/:pubkey', withController(createGetInvoicePubkeyCheckController))
   .post('/', urlencoded({ extended: true }), withController(createPostInvoiceController))
 
-export default invoiceRouter
+export default invoiceRouter