openhands
5c638cd6bc
- Add DB index on bans.user_id to speed up per-request ban lookups (migration 0008) - Replace in-process rate limiter with Redis-backed implementation with in-memory fallback - Add Redis caching layer for site settings with TTL invalidation (migration 0009) - Add rate limiting to resetPassword to prevent token brute-force attacks - Update all rateLimit callers to await the now-async function - Flesh out RadioContests and RadioGiveaways models with title, description, prize, date, and winner columns - Update radio contest/giveaway pages to display new fields - Add tests for rate limiter (4 tests) and password-reset actions (3 tests) - Add REDIS_URL environment variable (optional, falls back to in-memory)
81 lines
2.1 KiB
TypeScript
81 lines
2.1 KiB
TypeScript
import { prisma } from "@/lib/prisma";
|
|
import { redis } from "@/lib/redis";
|
|
|
|
const DEFAULTS: Record<string, string> = {
|
|
hotel_name: "Atom",
|
|
habbo_imaging_url: "https://www.habbo.com/habbo-imaging/avatarimage",
|
|
logo_url: "",
|
|
nitro_client_url: "",
|
|
};
|
|
|
|
const CACHE_TTL_MS = 300_000;
|
|
const REDIS_CACHE_KEY = "site_settings";
|
|
|
|
class SiteSettings {
|
|
private cache: Map<string, string> | null = null;
|
|
|
|
private async loadFromDb(): Promise<Map<string, string>> {
|
|
try {
|
|
const rows = await prisma.websiteSetting.findMany({
|
|
select: { key: true, value: true },
|
|
});
|
|
return new Map(rows.map((r) => [r.key, r.value]));
|
|
} catch {
|
|
return new Map(Object.entries(DEFAULTS));
|
|
}
|
|
}
|
|
|
|
private async load(): Promise<Map<string, string>> {
|
|
if (redis) {
|
|
try {
|
|
const cached = await redis.get(REDIS_CACHE_KEY);
|
|
if (cached) {
|
|
const parsed = JSON.parse(cached) as Record<string, string>;
|
|
return new Map(Object.entries(parsed));
|
|
}
|
|
} catch {
|
|
// Redis unavailable — fall through
|
|
}
|
|
}
|
|
|
|
if (this.cache !== null) return this.cache;
|
|
|
|
const map = await this.loadFromDb();
|
|
this.cache = map;
|
|
|
|
if (redis) {
|
|
try {
|
|
const obj = Object.fromEntries(map.entries());
|
|
await redis.setex(REDIS_CACHE_KEY, Math.ceil(CACHE_TTL_MS / 1000), JSON.stringify(obj));
|
|
} catch {
|
|
// non-critical
|
|
}
|
|
}
|
|
|
|
return map;
|
|
}
|
|
|
|
async get(key: string, fallback: string | null = null): Promise<string | null> {
|
|
const map = await this.load();
|
|
if (map.has(key)) return map.get(key) as string;
|
|
if (key in DEFAULTS) return DEFAULTS[key] as string;
|
|
return fallback;
|
|
}
|
|
|
|
async getBool(key: string, fallback = false): Promise<boolean> {
|
|
const v = await this.get(key, null);
|
|
if (v === null) return fallback;
|
|
const s = v.toLowerCase();
|
|
return s === "1" || s === "true";
|
|
}
|
|
|
|
reload(): void {
|
|
this.cache = null;
|
|
if (redis) {
|
|
redis.del(REDIS_CACHE_KEY).catch(() => {});
|
|
}
|
|
}
|
|
}
|
|
|
|
export const siteSettings = new SiteSettings();
|