src/AppBundle/Component/RateLimit/LoginFailRateLimiter.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php

namespace AppBundle\Component\RateLimit;

use Biz\Common\CommonException;
use Codeages\Biz\Framework\Context\Biz;
use Codeages\RateLimiter\RateLimiter;
use Symfony\Component\HttpFoundation\Request;

class LoginFailRateLimiter implements RateLimiterInterface
{
    /**
     * @var Biz
     */
    private $biz;

    /**
     * @var \Codeages\RateLimiter\RateLimiter
     */
    private $loginFailRateLimiter;

    const MAX_LOGIN_FAIL_ATTEMPT_ONE_HOUR = 120;

    public function __construct(Biz $biz)
    {
        $this->biz = $biz;
        $factory = $biz['ratelimiter.factory'];

        $this->loginFailRateLimiter = $factory('login_fail_limiter', self::MAX_LOGIN_FAIL_ATTEMPT_ONE_HOUR, 60 * 60);
    }

    public function handle(Request $request)
    {
        $username = $request->request->get('username');
        $password = $request->request->get('password');

        if (!$username || !$password) {
            throw CommonException::ERROR_PARAMETER_MISSING();
        }

        $user = $this->getUserService()->getUserByLoginField($username);

        if (!$user) {
            $remaind = $this->loginFailRateLimiter->check($request->getClientIp());
        } else {
            $isFail = !$this->getUserService()->verifyPassword($user['id'], $password);

            if ($isFail) {
                $remaind = $this->loginFailRateLimiter->check($username);
            } else {
                $remaind = 1;
            }
        }

        if ($remaind <= 0) {
            throw CommonException::FORBIDDEN_FREQUENT_OPERATION();
        }
    }

    public function setRateLimiter(RateLimiter $rateLimiter)