Function checkRateLimit

src/middleware.ts:78–105

(
  ip: string,
  tier: keyof typeof rateMaps
)

}

function checkRateLimit(
  ip: string,
  tier: keyof typeof rateMaps
): { allowed: boolean; retryAfter: number; limit: number; remaining: number; resetAt: number } {
  cleanup();

  const { max, windowMs } = RATE_LIMITS[tier];
  const map = rateMaps[tier];
  const now = Date.now();

  let bucket = map.get(ip);
  if (!bucket || now >= bucket.resetAt) {
    bucket = { count: 0, resetAt: now + windowMs };
    map.set(ip, bucket);
  }

  bucket.count++;
  const remaining = Math.max(0, max - bucket.count);
  const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);

  return {
    allowed: bucket.count <= max,
    retryAfter,
    limit: max,
    remaining,
    resetAt: bucket.resetAt,
  };
}

// ---------------------------------------------------------------------------
// Security Headers