mirror of
https://github.com/bilawalsidhu/gods-eye-view.git
synced 2026-11-04 10:24:02 +00:00
German KhokhlovandClaude Fable 5.1
361f1c0fb8
Review of #974 (asturksever): - After a 429 the other tiles of the view, and the fetches queued behind the first, still went to Mapillary. The proxy now answers 429 itself until the wait is over, scoped to the token that was refused. - A Retry-After sent as an HTTP date read as 60 s; it is now the seconds left, with the same 10-minute cap. - A body that failed to trim (up to the 48 MiB cap) could fill the 120-entry cache; anything over 4 MiB is served but not kept. Co-Authored-By: Claude Fable 5.1 <[email protected]>
107 lines
3.7 KiB
JavaScript
107 lines
3.7 KiB
JavaScript
import { sameSiteGated } from './common/same-site.js';
|
||
import { makeRateLimiter, clientKey } from './common/rate-limit.js';
|
||
import {
|
||
fetchTile,
|
||
mapillaryToken,
|
||
parseTilePath,
|
||
retryAfterWait,
|
||
TileUpstreamError,
|
||
} from './mapillary/tiles.js';
|
||
|
||
/**
|
||
* Tile requests per client IP per minute, cache hits included: over 60 new
|
||
* 9-tile views a minute, more than a person flying the camera reaches.
|
||
*/
|
||
export const TILE_ROUTE_MAX_PER_MIN = 600;
|
||
|
||
function sendJson(res, status, payload) {
|
||
res.statusCode = status;
|
||
res.setHeader('Content-Type', 'application/json; charset=utf-8');
|
||
res.setHeader('Cache-Control', 'no-store');
|
||
res.end(JSON.stringify(payload));
|
||
}
|
||
|
||
/** GET /api/mapillary/status — whether a token is configured, never its value. */
|
||
function handleStatus(req, res) {
|
||
if (req.method !== 'GET')
|
||
return sendJson(res, 405, { error: 'Method not allowed' });
|
||
sendJson(res, 200, { configured: Boolean(mapillaryToken()) });
|
||
}
|
||
|
||
/** GET /api/mapillary/tiles/coverage/{z}/{x}/{y} — trimmed protobuf tile. */
|
||
async function handleTile(req, res, allow) {
|
||
if (req.method !== 'GET')
|
||
return sendJson(res, 405, { error: 'Method not allowed' });
|
||
if (!allow(clientKey(req))) {
|
||
res.setHeader('Retry-After', '5');
|
||
return sendJson(res, 429, {
|
||
error: 'Too many tile requests',
|
||
retryAfter: 5,
|
||
});
|
||
}
|
||
const address = parseTilePath((req.url || '').split('?')[0]);
|
||
if (!address)
|
||
return sendJson(res, 400, {
|
||
error: 'Tile path must be /coverage/{z}/{x}/{y} with z 11–14',
|
||
});
|
||
if (!mapillaryToken())
|
||
return sendJson(res, 503, { error: 'no_key', keyRequired: true });
|
||
// A client that leaves (a tile the camera moved past) cancels its fetch.
|
||
const left = new AbortController();
|
||
res.on?.('close', () => {
|
||
if (!res.writableEnded) left.abort();
|
||
});
|
||
try {
|
||
const { bytes, source } = await fetchTile(address, { signal: left.signal });
|
||
res.statusCode = bytes.length ? 200 : 204;
|
||
res.setHeader('Content-Type', 'application/x-protobuf');
|
||
res.setHeader('Cache-Control', 'public, max-age=3600');
|
||
res.setHeader('X-Gev-Cache', source);
|
||
res.end(bytes.length ? bytes : undefined);
|
||
} catch (error) {
|
||
if (left.signal.aborted) return;
|
||
const status = error instanceof TileUpstreamError ? error.status : 0;
|
||
// A rejected token is a key problem the panel can name, not a fault.
|
||
if (status === 401 || status === 403)
|
||
return sendJson(res, 403, {
|
||
error: 'Mapillary rejected the access token',
|
||
keyRejected: true,
|
||
});
|
||
if (status === 429) {
|
||
const retryAfter = retryAfterWait(error.retryAfter);
|
||
res.setHeader('Retry-After', String(retryAfter));
|
||
return sendJson(res, 429, {
|
||
error: 'Mapillary is rate-limiting tile requests',
|
||
retryAfter,
|
||
});
|
||
}
|
||
// An upstream 400 must not read as a malformed request to this proxy.
|
||
sendJson(res, 502, { error: error?.message || 'Tile fetch failed' });
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Vite plugin: Mapillary coverage tiles with the token added server-side, and
|
||
* a status route. Both refuse cross-site requests so another page cannot
|
||
* spend the token.
|
||
*/
|
||
export function mapillaryProxy() {
|
||
const install = (middlewares) => {
|
||
const allow = makeRateLimiter({
|
||
windowMs: 60_000,
|
||
max: TILE_ROUTE_MAX_PER_MIN,
|
||
globalMax: TILE_ROUTE_MAX_PER_MIN * 4,
|
||
});
|
||
middlewares.use('/api/mapillary/status', sameSiteGated(handleStatus));
|
||
middlewares.use(
|
||
'/api/mapillary/tiles',
|
||
sameSiteGated((req, res) => handleTile(req, res, allow)),
|
||
);
|
||
};
|
||
return {
|
||
name: 'mapillary-proxy',
|
||
configureServer: (server) => install(server.middlewares),
|
||
configurePreviewServer: (server) => install(server.middlewares),
|
||
};
|
||
}
|