Leahnaya/website
1
0
Fork 0
mirror of https://github.com/PretendoNetwork/website.git synced 2026-09-27 02:56:45 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: handle errors, add lenient ratelimin

Browse Source
This commit is contained in:
limes
2026-08-20 21:02:39 +02:00
parent a649f9686f
commit 711bf3f578
3 changed files with 63 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
server/api/account/update.patch.ts
View File

@@ -1,16 +1,48 @@
import { ClientError } from 'nice-grpc';
import { AccountUpdateSchema } from '~~/shared/api-types';
import type { ApiErrorCodes } from '~~/shared/errors';
const bucket = createRatelimitBucket({
id: 'account-update',
points: 100,
durationSec: 5 * 60, // 5 minutes
blockDurationSec: 1 * 60 * 60 // 1 hour
});
const errors: Record<string, ApiErrorCodes> = {
'INVALID_ARGUMENT: Must be one of: prod, test, dev': 'INVALID_ACCESS_LEVEL',
'PERMISSION_DENIED: Banned': 'BANNED',
'INVALID_ARGUMENT: Do not have permission to enter this environment': 'INSUFFICIENT_ACCESS_LEVEL',
'INVALID_ARGUMENT: Must be a valid date formatted as: YYYY-MM-DD': 'INVALID_DATE',
'INVALID_ARGUMENT: Must be one of: F, M': 'INVALID_GENDER',
'INVALID_ARGUMENT: Invalid region': 'INVALID_REGION',
'INVALID_ARGUMENT: Invalid timezone': 'INVALID_TIMEZONE',
'INVALID_ARGUMENT: Invalid mii data': 'INVALID_MII_DATA'
};
export default defineEventHandler(async (event): Promise<void> => {
await enforceRatelimit(event, bucket);
const body = await readZodBody(event, AccountUpdateSchema);
const auth = enforceLoggedIn(event);
const grpc = useApiGrpcWithToken(event, auth.token);
await grpc.updateUserData({
gender: body.gender,
birthday: body.birthday,
region: body.region,
timezone: body.timezone,
mii: body.mii,
serverAccessLevel: body.serverAccessLevel
});
try {
await grpc.updateUserData({
gender: body.gender,
birthday: body.birthday,
region: body.region,
timezone: body.timezone,
mii: body.mii,
serverAccessLevel: body.serverAccessLevel
});
} catch (error: unknown) {
if (error instanceof ClientError) {
const errorCode = errors[error.details];
if (errorCode) {
throw createApiError(errorCode);
}
}
throw error;
}
});