Ratelimit by user-identifier

[didip]

Ratelimit by user-identifier

[rvdwijngaard]

this is exactly what I need

[didip]

The tricky part about this feature is that middleware is loaded once on-boot when HTTP routes are defined the 1st time.

To support this, the library needs to provide a channel for updating Headers in a thread-safe way. It's doable, but it will require refactoring quite a bit. And once Headers behaves this way, other attributes will have to behave this way as well (for consistency).

Unfortunately, I am currently very busy with work so it's hard to set aside time to work on this. I hope you understand.

[didip]

v2.0.0 is now able to support your use-case.

All of Tollbooth variables are now thread-safe. You can do this every time your app sees a new api token:

// 1. Create a limiter and pass it around your app wherever you need
lmt := tollbooth.NewLimiter(10, time.Second, nil)

// 2. Make sure you set expiration TTL to conserve memory.
lmt.SetHeaderEntryExpirationTTL(time.Hour)

// 3. Add header entries as you keep seeing new API tokens.
lmt.SetHeader("X-API-TOKEN", []string{"jon-snow-key", "sansa-key"})

// 4. And if you don't want to rate-limit a certain user
lmt.RemoveHeaderEntries("X-API-TOKEN", []string{"jon-snow-key"})

Hope it helps.