mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-17 08:50:15 +01:00
cbba914290
* feat: Implement Redis-based rate limiting, initially import limits * feat: Enhance rate limiters with Redis support and custom prefixes * chore: import orders * chore: update JSDoc for next middleware parameter type in ban and limiter middleware * feat: add logHeaders middleware to log forwarded headers in requests * refactor: change log level from info to debug for Redis rate limiters * feat: increase Redis max listeners and refactor session storage to use Keyv
70 lines
1.9 KiB
JavaScript
70 lines
1.9 KiB
JavaScript
const express = require('express');
|
|
const {
|
|
refreshController,
|
|
registrationController,
|
|
resetPasswordController,
|
|
resetPasswordRequestController,
|
|
} = require('~/server/controllers/AuthController');
|
|
const { loginController } = require('~/server/controllers/auth/LoginController');
|
|
const { logoutController } = require('~/server/controllers/auth/LogoutController');
|
|
const { verify2FAWithTempToken } = require('~/server/controllers/auth/TwoFactorAuthController');
|
|
const {
|
|
enable2FA,
|
|
verify2FA,
|
|
disable2FA,
|
|
regenerateBackupCodes,
|
|
confirm2FA,
|
|
} = require('~/server/controllers/TwoFactorController');
|
|
const {
|
|
checkBan,
|
|
logHeaders,
|
|
loginLimiter,
|
|
requireJwtAuth,
|
|
checkInviteUser,
|
|
registerLimiter,
|
|
requireLdapAuth,
|
|
requireLocalAuth,
|
|
resetPasswordLimiter,
|
|
validateRegistration,
|
|
validatePasswordReset,
|
|
} = require('~/server/middleware');
|
|
|
|
const router = express.Router();
|
|
|
|
const ldapAuth = !!process.env.LDAP_URL && !!process.env.LDAP_USER_SEARCH_BASE;
|
|
//Local
|
|
router.post('/logout', requireJwtAuth, logoutController);
|
|
router.post(
|
|
'/login',
|
|
logHeaders,
|
|
loginLimiter,
|
|
checkBan,
|
|
ldapAuth ? requireLdapAuth : requireLocalAuth,
|
|
loginController,
|
|
);
|
|
router.post('/refresh', refreshController);
|
|
router.post(
|
|
'/register',
|
|
registerLimiter,
|
|
checkBan,
|
|
checkInviteUser,
|
|
validateRegistration,
|
|
registrationController,
|
|
);
|
|
router.post(
|
|
'/requestPasswordReset',
|
|
resetPasswordLimiter,
|
|
checkBan,
|
|
validatePasswordReset,
|
|
resetPasswordRequestController,
|
|
);
|
|
router.post('/resetPassword', checkBan, validatePasswordReset, resetPasswordController);
|
|
|
|
router.get('/2fa/enable', requireJwtAuth, enable2FA);
|
|
router.post('/2fa/verify', requireJwtAuth, verify2FA);
|
|
router.post('/2fa/verify-temp', checkBan, verify2FAWithTempToken);
|
|
router.post('/2fa/confirm', requireJwtAuth, confirm2FA);
|
|
router.post('/2fa/disable', requireJwtAuth, disable2FA);
|
|
router.post('/2fa/backup/regenerate', requireJwtAuth, regenerateBackupCodes);
|
|
|
|
module.exports = router;
|