lib/hammer.ex

defmodule Hammer do
  @moduledoc """
  Documentation for Hammer module.

  This is the main API for the Hammer rate-limiter. This module assumes a
  backend pool has been started, most likely by the Hammer application.
  """

  alias Hammer.Utils

  @spec check_rate(id :: String.t(), scale_ms :: integer, limit :: integer) ::
          {:allow, count :: integer}
          | {:deny, limit :: integer}
          | {:error, reason :: any}
  @doc """
  Check if the action you wish to perform is within the bounds of the rate-limit.

  Args:
  - `id`: String name of the bucket. Usually the bucket name is comprised of
  some fixed prefix, with some dynamic string appended, such as an IP address or
  user id.
  - `scale_ms`: Integer indicating size of bucket in milliseconds
  - `limit`: Integer maximum count of actions within the bucket

  Returns either `{:allow,  count}`, `{:deny,   limit}` or `{:error,  reason}`

  Example:

      user_id = 42076
      case check_rate("file_upload:\#{user_id}", 60_000, 5) do
        {:allow, _count} ->
          # do the file upload
        {:deny, _limit} ->
          # render an error page or something
      end
  """
  def check_rate(id, scale_ms, limit) do
    check_rate(:single, id, scale_ms, limit)
  end

  @spec check_rate(backend :: atom, id :: String.t(), scale_ms :: integer, limit :: integer) ::
          {:allow, count :: integer}
          | {:deny, limit :: integer}
          | {:error, reason :: any}
  @doc """
  Same as `check_rate/3`, but allows specifying a backend.
  """
  def check_rate(backend, id, scale_ms, limit) do
    {stamp, key} = Utils.stamp_key(id, scale_ms)

    case call_backend(backend, :count_hit, [key, stamp]) do
      {:ok, count} ->
        if count > limit do
          {:deny, limit}
        else
          {:allow, count}
        end

      {:error, reason} ->
        {:error, reason}
    end
  end

  @spec check_rate_inc(
          id :: String.t(),
          scale_ms :: integer,
          limit :: integer,
          increment :: integer
        ) ::
          {:allow, count :: integer}
          | {:deny, limit :: integer}
          | {:error, reason :: any}
  @doc """
  Same as check_rate/3, but allows the increment number to be specified.
  This is useful for limiting apis which have some idea of 'cost', where the cost
  of each hit can be specified.
  """
  def check_rate_inc(id, scale_ms, limit, increment) do
    check_rate_inc(:single, id, scale_ms, limit, increment)
  end

  @spec check_rate_inc(
          backend :: atom,
          id :: String.t(),
          scale_ms :: integer,
          limit :: integer,
          increment :: integer
        ) ::
          {:allow, count :: integer}
          | {:deny, limit :: integer}
          | {:error, reason :: any}
  @doc """
  Same as check_rate_inc/4, but allows specifying a backend.
  """
  def check_rate_inc(backend, id, scale_ms, limit, increment) do
    {stamp, key} = Utils.stamp_key(id, scale_ms)

    case call_backend(backend, :count_hit, [key, stamp, increment]) do
      {:ok, count} ->
        if count > limit do
          {:deny, limit}
        else
          {:allow, count}
        end

      {:error, reason} ->
        {:error, reason}
    end
  end

  @spec inspect_bucket(id :: String.t(), scale_ms :: integer, limit :: integer) ::
          {:ok,
           {count :: integer, count_remaining :: integer, ms_to_next_bucket :: integer,
            created_at :: integer | nil, updated_at :: integer | nil}}
          | {:error, reason :: any}
  @doc """
  Inspect bucket to get count, count_remaining, ms_to_next_bucket, created_at,
  updated_at. This function is free of side-effects and should be called with
  the same arguments you would use for `check_rate` if you intended to increment
  and check the bucket counter.

  Arguments:

  - `id`: String name of the bucket. Usually the bucket name is comprised of
    some fixed prefix,with some dynamic string appended, such as an IP address
    or user id.
  - `scale_ms`: Integer indicating size of bucket in milliseconds
  - `limit`: Integer maximum count of actions within the bucket

  Returns either
  `{:ok, {count, count_remaining, ms_to_next_bucket, created_at, updated_at}`,
  or `{:error, reason}`.

  Example:

      inspect_bucket("file_upload:2042", 60_000, 5)
      {:ok, {1, 2499, 29381612, 1450281014468, 1450281014468}}

  """
  def inspect_bucket(id, scale_ms, limit) do
    inspect_bucket(:single, id, scale_ms, limit)
  end

  @spec inspect_bucket(backend :: atom, id :: String.t(), scale_ms :: integer, limit :: integer) ::
          {:ok,
           {count :: integer, count_remaining :: integer, ms_to_next_bucket :: integer,
            created_at :: integer | nil, updated_at :: integer | nil}}
          | {:error, reason :: any}
  @doc """
  Same as inspect_bucket/3, but allows specifying a backend
  """
  def inspect_bucket(backend, id, scale_ms, limit) do
    {stamp, key} = Utils.stamp_key(id, scale_ms)
    ms_to_next_bucket = elem(key, 0) * scale_ms + scale_ms - stamp

    case call_backend(backend, :get_bucket, [key]) do
      {:ok, nil} ->
        {:ok, {0, limit, ms_to_next_bucket, nil, nil}}

      {:ok, {_, count, created_at, updated_at}} ->
        count_remaining = if limit > count, do: limit - count, else: 0
        {:ok, {count, count_remaining, ms_to_next_bucket, created_at, updated_at}}

      {:error, reason} ->
        {:error, reason}
    end
  end

  @spec delete_buckets(id :: String.t()) ::
          {:ok, count :: integer}
          | {:error, reason :: any}
  @doc """
  Delete all buckets belonging to the provided id, including the current one.
  Effectively resets the rate-limit for the id.

  Arguments:

  - `id`: String name of the bucket

  Returns either `{:ok, count}` where count is the number of buckets deleted,
  or `{:error, reason}`.

  Example:

      user_id = 2406
      {:ok, _count} = delete_buckets("file_uploads:\#{user_id}")

  """
  def delete_buckets(id) do
    delete_buckets(:single, id)
  end

  @spec delete_buckets(backend :: atom, id :: String.t()) ::
          {:ok, count :: integer}
          | {:error, reason :: any}
  @doc """
  Same as delete_buckets/1, but allows specifying a backend
  """
  def delete_buckets(backend, id) do
    call_backend(backend, :delete_buckets, [id])
  end

  @spec make_rate_checker(id_prefix :: String.t(), scale_ms :: integer, limit :: integer) ::
          (id :: String.t() ->
             {:allow, count :: integer}
             | {:deny, limit :: integer}
             | {:error, reason :: any})
  @doc """
  Make a rate-checker function, with the given `id` prefix, scale_ms and limit.

  Arguments:

  - `id_prefix`: String prefix to the `id`
  - `scale_ms`: Integer indicating size of bucket in milliseconds
  - `limit`: Integer maximum count of actions within the bucket

  Returns a function which accepts an `id` suffix, which will be combined with
  the `id_prefix`. Calling this returned function is equivalent to:
  `Hammer.check_rate("\#{id_prefix}\#{id}", scale_ms, limit)`

  Example:

      chat_rate_limiter = make_rate_checker("send_chat_message:", 60_000, 20)
      user_id = 203517
      case chat_rate_limiter.(user_id) do
        {:allow, _count} ->
          # allow chat message
        {:deny, _limit} ->
          # deny
      end
  """
  def make_rate_checker(id_prefix, scale_ms, limit) do
    make_rate_checker(:single, id_prefix, scale_ms, limit)
  end

  @spec make_rate_checker(
          backend :: atom,
          id_prefix :: String.t(),
          scale_ms :: integer,
          limit :: integer
        ) ::
          (id :: String.t() ->
             {:allow, count :: integer}
             | {:deny, limit :: integer}
             | {:error, reason :: any})
  @doc """
  """
  def make_rate_checker(backend, id_prefix, scale_ms, limit) do
    fn id ->
      check_rate(backend, "#{id_prefix}#{id}", scale_ms, limit)
    end
  end

  defp call_backend(which, function, args) do
    pool = Utils.pool_name(which)
    backend = Utils.get_backend_module(which)

    :poolboy.transaction(
      pool,
      fn pid -> apply(backend, function, [pid | args]) end,
      # TODO: make timeout configurable
      60000
    )
  end
end