refactor(server): rate limit and permission (#4198)

Co-authored-by: LongYinan <lynweklm@gmail.com>

apps/server/src/tests/utils.ts

@@ -386,6 +386,27 @@ async function collectAllBlobSizes(
   return res.body.data.collectAllBlobSizes.size;
 }
 
+async function checkBlobSize(
+  app: INestApplication,
+  token: string,
+  workspaceId: string,
+  size: number
+): Promise<number> {
+  const res = await request(app.getHttpServer())
+    .post(gql)
+    .auth(token, { type: 'bearer' })
+    .send({
+      query: `query checkBlobSize($workspaceId: String!, $size: Float!) {
+        checkBlobSize(workspaceId: $workspaceId, size: $size) {
+          size
+        }
+      }`,
+      variables: { workspaceId, size },
+    })
+    .expect(200);
+  return res.body.data.checkBlobSize.size;
+}
+
 async function setBlob(
   app: INestApplication,
   token: string,
@@ -480,6 +501,7 @@ async function getInviteInfo(
 export {
   acceptInvite,
   acceptInviteById,
+  checkBlobSize,
   collectAllBlobSizes,
   collectBlobSizes,
   createTestApp,

apps/server/src/tests/workspace-blobs.spec.ts

@@ -8,6 +8,7 @@ import request from 'supertest';
 
 import { AppModule } from '../app';
 import {
+  checkBlobSize,
   collectAllBlobSizes,
   collectBlobSizes,
   createWorkspace,
@@ -126,4 +127,20 @@ test('should calc all blobs size', async t => {
 
   const size = await collectAllBlobSizes(app, u1.token.token);
   t.is(size, 8, 'failed to collect all blob sizes');
+
+  const size1 = await checkBlobSize(
+    app,
+    u1.token.token,
+    workspace1.id,
+    10 * 1024 * 1024 * 1024 - 8
+  );
+  t.is(size1, 0, 'failed to check blob size');
+
+  const size2 = await checkBlobSize(
+    app,
+    u1.token.token,
+    workspace1.id,
+    10 * 1024 * 1024 * 1024 - 7
+  );
+  t.is(size2, -1, 'failed to check blob size');
 });