WebSvc.RateLimitAdmin 1.1.0

WebSvc.RateLimitAdmin

Standalone rate-limiting admin UI for CrudApi-based platforms.

• Guards all CRUD traffic per database, scoped per credential (API key, Basic Auth, or JWT) via {AuthType}:{SubjectId} — a JWT holder gets the same protection as an API-key holder.
• Own SQLite/MySQL storage (Scripts/) — no dependency on WebSvc.CrudAdmin's assembly.
• Independent login at /ratelimitadmin/login, plus a signed, short-lived, single-use auto-login handoff from apps you're already signed into (CrudAdmin's Databases page, the Tenant Portal).
• Global Admin view (all tenants/databases) and Tenant Admin view (own databases only) — a Global Admin sets a per-tenant ceiling; the tenant tunes their own databases freely underneath it.
• A database's limit row is created automatically (enabled, default ceiling) the first time real traffic is seen for it — nothing to provision ahead of time.
• Fails open if the counter store is unreachable — protection is a bonus layer, never a gate the platform depends on staying up.
• A retention job purges old usage history on a UI-configurable schedule (usage.retention_days, default 30).

Setup

builder.Services.AddRateLimitAdmin(builder.Configuration);
// ...
app.UseRateLimitAdmin();
// ...
app.MapRateLimitAdmin();

Configuration (appsettings.json, section RateLimitAdmin): RootPath (default /ratelimitadmin), DbEngine (Sqlite default, or MySql — also settable via RATELIMITADMIN_DB_ENGINE/RATELIMITADMIN_MYSQL_CONNECTION_STRING env vars, mirroring CrudAdmin's own convention), ConnectionString, DataDirectory (default RateLimitData/ under the app's base directory — deliberately separate from CrudAdmin's Data/ folder; mount/persist it separately in any container deployment), Username/PasswordHash (the Global-Admin break-glass manual-login credential — tenant admins only ever arrive via the signed handoff, so there's no per-tenant account to provision), SessionHours, DefaultRequestsPerMinute (300).

To bridge caller identity from CrudAdmin (so the traffic gate knows who's calling) and to enable the auto-login handoff, also call AddCrudAdmin(...) in the same host:

• RateLimitAdmin reads a small set of well-known ctx.Items string keys (CrudAdmin.Identity.AuthType/SubjectId/TenantId/DatabaseKey) that CrudAdmin's CrudAuthMiddleware stamps after a successful authentication — no compiled dependency either direction, just a documented naming convention.
• RateLimitAdmin injects whatever IDataProtectionProvider is already registered (CrudAdmin's AddCrudAdmin() configures one, persisted to disk) rather than configuring its own, so the two packages share a key ring automatically with zero extra wiring.

Deliberately out of scope for v1

The design leaves room for these; the code doesn't implement them yet:

• Redis-backed counter store — ICounterStore is a small interface (SqlCounterStore is the default, MemoryCounterStore is single-instance/dev-only); a RedisCounterStore can be added without touching the rest of the package, and would ship as a separate companion package so the core never takes a hard Redis dependency.
• requests_per_hour enforcement — the schema column exists (ratelimit_database_limits, ratelimit_tenant_ceilings); only the per-minute fixed window is actually checked today.

Versions

• 1.0.0 — initial release.

© Narender Kumar