Added rate limiting

config/config-sample.yaml

@@ -19,8 +19,6 @@ signal_number: '+12345689' # Your signal number / account
 
 web_server: false # Enable/disable web server
 web_server_port: 8080 # Port for web server
-web_server_ssl_cert: '../src/web/ssl.crt' # Path for SSL cert
-web_server_ssl_key: '../src/web/ssl.key' # Path for SSL key
 
 dev_mode: true # Enable/disable dev mode
 

package.json

@@ -28,6 +28,7 @@
         "chalk": "^5.0.1",
         "debug": "^4.3.4",
         "express": "^4.18.1",
+        "express-rate-limit": "^6.4.0",
         "grammy": "^1.9.0",
         "node-fetch": "^3.2.6",
         "node-gyp": "^9.0.0",

src/addons/web.ts

@@ -2,13 +2,22 @@ import fakectx from './fakectx';
 import {ticketHandler} from '../text';
 import cache from '../cache';
 import TelegramAddon from './telegram';
+import rateLimit from 'express-rate-limit';
 
 /* include script
 <script id="chatScript" src="localhost:8080/chat.js"></script>
 */
 const init = function(bot: TelegramAddon) {
   // Enable web server with socketio
   if (cache.config.web_server) {
+    // Set up rate limiter
+    const limiter = rateLimit({
+      windowMs: 15 * 60 * 1000,
+      max: 100,
+      standardHeaders: true,
+      legacyHeaders: false,
+    });
+
     const express = require('express');
     const http = require('http');
     const app = express();
@@ -18,17 +27,19 @@ const init = function(bot: TelegramAddon) {
     const {Server} = require('socket.io');
     const io = new Server(server);
     cache.io = io;
+    app.use(limiter);
+
+    // app.get('/', (req, res) => {
+    //   res.writeHead(200, {'Content-Type': 'text/html'});
+    // });
 
-    app.get('/', (_req: any, res: { sendFile: (arg0: string) => void }) => {
+    app.get('/', (_req: any, res: any) => {
       res.sendFile(__dirname + '/web/index.html');
     });
 
-    app.get(
-        '/chat.js',
-        (_req: any, res: { sendFile: (arg0: string) => void }) => {
-          res.sendFile(__dirname + '/web/chat.js');
-        },
-    );
+    app.get('/chat.js', (_req: any, res: any) => {
+      res.sendFile(__dirname + '/web/chat.js');
+    });
 
     io.on(
         'connection',
@@ -48,7 +59,7 @@ const init = function(bot: TelegramAddon) {
         },
     );
 
-    server.listen(port, () => console.log(`Server started on port ${port}`));
+    server.listen(8080, () => console.log(`Server started on port ${port}`));
   }
 };