Class CacheClientCredentialsRateLimiter

java.lang.Object

io.leandev.appfuse.security.auth.CacheClientCredentialsRateLimiter

All Implemented Interfaces:

ClientCredentialsRateLimiter

public final class CacheClientCredentialsRateLimiter
extends Object
implements ClientCredentialsRateLimiter

以具 TTI/TTL 的整數 Cache 實作 M2M token 端點限流。

視窗策略由注入 cache 的 expiry 決定；本類只承擔容易重複寫錯的計數與 key 正規化機制。 應用若需要 Redis、gateway 或分散式原子計數，直接提供其他 ClientCredentialsRateLimiter bean 即可。

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_ANONYMOUS_KEY
static final String	DEFAULT_KEY_PREFIX
static final int	DEFAULT_LIMIT

Constructor Summary

Constructors

Constructor	Description
CacheClientCredentialsRateLimiter(Cache<String,Integer> cache)
CacheClientCredentialsRateLimiter(Cache<String,Integer> cache, int limit, String keyPrefix, String anonymousKey)

Method Summary

Modifier and Type	Method	Description
boolean	allow(String clientId)	是否允許本次請求

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_LIMIT

public static final int DEFAULT_LIMIT

See Also:

• Constant Field Values

DEFAULT_KEY_PREFIX

public static final String DEFAULT_KEY_PREFIX

See Also:

• Constant Field Values

DEFAULT_ANONYMOUS_KEY

public static final String DEFAULT_ANONYMOUS_KEY

See Also:

• Constant Field Values

Constructor Details

CacheClientCredentialsRateLimiter

public CacheClientCredentialsRateLimiter(Cache<String,Integer> cache)

CacheClientCredentialsRateLimiter

public CacheClientCredentialsRateLimiter(Cache<String,Integer> cache,
 int limit,
 String keyPrefix,
 String anonymousKey)

Method Details

allow

public boolean allow(String clientId)

Description copied from interface: ClientCredentialsRateLimiter

是否允許本次請求

Specified by:

allow in interface ClientCredentialsRateLimiter

Parameters:

clientId - 請求宣稱的 client_id；未提供時由呼叫端以來源位址等替代鍵帶入

Returns:

true 放行；false → OAuth2TokenException.rateLimited()（HTTP 429）