ahmadk953/tasko
1
0
Fork 0
mirror of https://github.com/ahmadk953/tasko.git synced 2025-05-01 11:19:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added Arcjet Security and Updated Caching on Cards

Browse source
This commit is contained in:
Ahmad 2024-12-27 18:00:27 -05:00
parent 06aac8524a
commit 611adcddff
No known key found for this signature in database
GPG key ID: 8FD8A93530D182BF
9 changed files with 261 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/api/cards/[cardId]/logs/route.ts
View file

@ -37,8 +37,8 @@ export async function GET(
status: 200,
headers: {
'Cache-Control': 'public, s-maxage=1',
'CDN-Cache-Control': 'public, s-maxage=60',
'Vercel-CDN-Cache-Control': 'public, s-maxage=120',
'CDN-Cache-Control': 'public, s-maxage=30',
'Vercel-CDN-Cache-Control': 'public, s-maxage=60',
},
});
} catch (error) {

4
app/api/cards/[cardId]/route.ts
View file

@ -42,8 +42,8 @@ export async function GET(
status: 200,
headers: {
'Cache-Control': 'public, s-maxage=1',
'CDN-Cache-Control': 'public, s-maxage=60',
'Vercel-CDN-Cache-Control': 'public, s-maxage=120',
'CDN-Cache-Control': 'public, s-maxage=30',
'Vercel-CDN-Cache-Control': 'public, s-maxage=60',
},
});
} catch (error) {

25
app/api/unsplash/route.ts
View file

@ -1,8 +1,31 @@
import arcjet, { fixedWindow } from '@/lib/arcjet';
import { unsplash } from '@/lib/unsplash';
import { auth } from '@clerk/nextjs/server';
import { NextResponse } from 'next/server';
export async function GET() {
const aj = arcjet.withRule(
fixedWindow({
mode: 'LIVE',
max: 10,
window: '60s',
})
);
export async function GET(req: Request) {
try {
const { orgId, userId } = await auth();
if (!orgId || !userId)
return new NextResponse(JSON.stringify({ error: 'Unauthorized' }), {
status: 401,
});
const decision = await aj.protect(req);
if (decision.isDenied())
return new NextResponse(
JSON.stringify({ error: 'Too many requests', reason: decision.reason }),
{ status: 429 }
);
const result = await unsplash.photos.getRandom({
collectionIds: ['317099'],
count: 9,

16
app/api/webhook/route.ts
View file

@ -4,8 +4,24 @@ import { NextResponse } from 'next/server';
import { db } from '@/lib/db';
import { stripe } from '@/lib/stripe';
import arcjet, { fixedWindow } from '@/lib/arcjet';
const aj = arcjet.withRule(
fixedWindow({
mode: 'LIVE',
max: 10,
window: '60s',
})
);
export async function POST(req: Request) {
const decision = await aj.protect(req);
if (decision.isDenied())
return new NextResponse(
JSON.stringify({ error: 'Too many requests', reason: decision.reason }),
{ status: 429 }
);
const body = await req.text();
const signature = (await headers()).get('Stripe-Signature') as string;