Merge pull request #365 from lidofinance/feature/si-1446-stake-widget…

…-add-httpmethodguard-for-api-endpoints Add httpMethodGuard middleware for api endpoints
lidofinance · Jun 19, 2024 · c349089 · c349089
2 parents 1bbb649 + 69ea21d
commit c349089
Show file tree

Hide file tree

Showing 8 changed files with 24 additions and 0 deletions.
diff --git a/pages/api/eth-apr.ts b/pages/api/eth-apr.ts
@@ -9,6 +9,8 @@ import {
   errorAndCacheDefaultWrappers,
   responseTimeMetric,
   rateLimit,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 
@@ -31,6 +33,7 @@ const ethApr: API = async (_, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.ETH_APR),
   ...errorAndCacheDefaultWrappers,

diff --git a/pages/api/eth-price.ts b/pages/api/eth-price.ts
@@ -11,6 +11,8 @@ import {
   defaultErrorHandler,
   responseTimeMetric,
   rateLimit,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 import { API } from 'types';
@@ -36,6 +38,7 @@ const ethPrice: API = async (req, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.ETH_PRICE),
   cacheControl({ headers: config.CACHE_ETH_PRICE_HEADERS }),

diff --git a/pages/api/ldo-stats.ts b/pages/api/ldo-stats.ts
@@ -9,6 +9,8 @@ import {
   errorAndCacheDefaultWrappers,
   responseTimeMetric,
   rateLimit,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 import { API } from 'types';
@@ -37,6 +39,7 @@ const ldoStats: API = async (req, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.LDO_STATS),
   ...errorAndCacheDefaultWrappers,

diff --git a/pages/api/lido-stats.ts b/pages/api/lido-stats.ts
@@ -8,6 +8,8 @@ import {
   errorAndCacheDefaultWrappers,
   responseTimeMetric,
   rateLimit,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 import { API } from 'types';
@@ -35,6 +37,7 @@ const lidoStats: API = async (req, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.LIDO_STATS),
   ...errorAndCacheDefaultWrappers,

diff --git a/pages/api/lidostats.ts b/pages/api/lidostats.ts
@@ -8,6 +8,8 @@ import {
   responseTimeMetric,
   errorAndCacheDefaultWrappers,
   rateLimit,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 import { API } from 'types';
@@ -36,6 +38,7 @@ const lidoStats: API = async (req, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.LIDOSTATS),
   ...errorAndCacheDefaultWrappers,

diff --git a/pages/api/rpc.ts b/pages/api/rpc.ts
@@ -10,6 +10,8 @@ import {
   responseTimeMetric,
   defaultErrorHandler,
   requestAddressMetric,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 import { rpcUrls } from 'utilsApi/rpcUrls';
@@ -44,6 +46,7 @@ const rpc = rpcFactory({
 });
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.POST]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.RPC),
   requestAddressMetric(Metrics.request.ethCallToAddress),

diff --git a/pages/api/sma-steth-apr.ts b/pages/api/sma-steth-apr.ts
@@ -9,6 +9,8 @@ import {
   errorAndCacheDefaultWrappers,
   rateLimit,
   getSmaStethApr,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 
@@ -33,6 +35,7 @@ const smaStethApr: API = async (_, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.SMA_STETH_APR),
   ...errorAndCacheDefaultWrappers,

diff --git a/pages/api/totalsupply.ts b/pages/api/totalsupply.ts
@@ -11,6 +11,8 @@ import {
   defaultErrorHandler,
   responseTimeMetric,
   rateLimit,
+  httpMethodGuard,
+  HttpMethod,
 } from 'utilsApi';
 import Metrics from 'utilsApi/metrics';
 import { API } from 'types';
@@ -36,6 +38,7 @@ const totalSupply: API = async (req, res) => {
 };
 
 export default wrapNextRequest([
+  httpMethodGuard([HttpMethod.GET]),
   rateLimit,
   responseTimeMetric(Metrics.request.apiTimings, API_ROUTES.TOTALSUPPLY),
   cacheControl({ headers: config.CACHE_TOTAL_SUPPLY_HEADERS }),