mirror of
https://github.com/screentinker/screentinker.git
synced 2026-08-13 22:03:13 -06:00
d4b2532c9a
resolveIdentity runs on every register (block + flap gates). It already returned on device_id before any DB access; memoized the device_fingerprints statement (prepared once, lazily) and documented the invariant. Test asserts a device_id-present resolve prepares/runs ZERO device_fingerprints queries; a device_id-absent resolve does. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
59 lines
2.5 KiB
JavaScript
59 lines
2.5 KiB
JavaScript
'use strict';
|
|
// #146 hardening — SNAT-safe identity resolution for any per-device keying (flap
|
|
// limiter, operator block, throttles). The whole fleet egresses as ONE IP
|
|
// (10.10.10.1, Sophos SNAT), so keying on IP collapses the fleet into one bucket —
|
|
// FORBIDDEN. Resolve identity from the device:register payload via the fallback chain:
|
|
//
|
|
// device_id
|
|
// -> fingerprint (map via device_fingerprints -> device_id when it resolves,
|
|
// else the raw fingerprint string)
|
|
// -> device_token
|
|
// -> a single BOUNDED GLOBAL anon bucket (final backstop)
|
|
//
|
|
// An unidentifiable client is STILL bucketed (collectively, via the anon bucket) so an
|
|
// anonymous flood is capped, never unthrottled. Mirrors lib/ota-breaker's
|
|
// device_id-or-version fallback. `fingerprint` is present in the register payload;
|
|
// device_fingerprints maps fingerprint -> device_id. NEVER keys on IP.
|
|
|
|
const { db } = require('../db/database');
|
|
|
|
const ANON_KEY = 'anon:global';
|
|
|
|
// Memoized statement — prepared once, lazily (safe on a partially-migrated DB).
|
|
let _fpStmt = null;
|
|
function fpStmt() {
|
|
if (!_fpStmt) { try { _fpStmt = db.prepare('SELECT device_id FROM device_fingerprints WHERE fingerprint = ?'); } catch (_) { return null; } }
|
|
return _fpStmt;
|
|
}
|
|
|
|
// Returns { key, kind, deviceId } — `key` is stable for keying; `deviceId` is the
|
|
// resolved device id when the chain produced one (device_id directly or via
|
|
// fingerprint), else null.
|
|
//
|
|
// #146 P1: SHORT-CIRCUITS on device_id — the common case (a device that sends its
|
|
// device_id) returns immediately with ZERO DB lookups. The device_fingerprints SELECT
|
|
// runs ONLY when device_id is absent. Called on every register (block + flap gates), so
|
|
// the hot path must stay lookup-free.
|
|
function resolveIdentity(payload = {}) {
|
|
const { device_id, fingerprint, device_token } = payload;
|
|
|
|
if (device_id) return { key: 'd:' + device_id, kind: 'device_id', deviceId: device_id };
|
|
|
|
if (fingerprint) {
|
|
let mapped = null;
|
|
try {
|
|
const st = fpStmt();
|
|
const row = st && st.get(fingerprint);
|
|
mapped = row && row.device_id ? row.device_id : null;
|
|
} catch (_) { /* table may not exist on a partially-migrated DB */ }
|
|
if (mapped) return { key: 'd:' + mapped, kind: 'fingerprint->device_id', deviceId: mapped };
|
|
return { key: 'f:' + fingerprint, kind: 'fingerprint', deviceId: null };
|
|
}
|
|
|
|
if (device_token) return { key: 't:' + device_token, kind: 'device_token', deviceId: null };
|
|
|
|
return { key: ANON_KEY, kind: 'anon', deviceId: null };
|
|
}
|
|
|
|
module.exports = { resolveIdentity, ANON_KEY };
|