From ae83e3679c155f2471c7c4317ee1e96944b60e9d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E5=BE=B7=E5=AE=87?= <kvtodev@outlook.com>
Date: Wed, 2 Sep 2026 19:05:04 +0800
Subject: [PATCH] =?UTF-8?q?=E9=99=90=E5=88=B6=E9=94=99=E8=AF=AF=E6=8A=A5?=
 =?UTF-8?q?=E5=91=8A=E5=88=9B=E5=BB=BA=E8=BA=AB=E4=BB=BD=E4=B8=8E=E9=A2=91?=
 =?UTF-8?q?=E7=8E=87?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

创建 procedure 增加服务身份校验

增加单 identity 每小时 100 次提交配额并保留幂等重试
---
 .../spacetime-module/src/error_report.rs      | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/server-rs/crates/spacetime-module/src/error_report.rs b/server-rs/crates/spacetime-module/src/error_report.rs
index 29cad88c7..fff94a34e 100644
--- a/server-rs/crates/spacetime-module/src/error_report.rs
+++ b/server-rs/crates/spacetime-module/src/error_report.rs
@@ -2,6 +2,8 @@ use crate::*;
 
 const MAX_FIELD_CHARS: usize = 512;
 const MAX_NOTE_CHARS: usize = 2_000;
+const MAX_REPORTS_PER_IDENTITY_PER_HOUR: usize = 100;
+const REPORT_QUOTA_WINDOW_MICROS: i64 = 60 * 60 * 1_000_000;
 
 #[spacetimedb::table(
     accessor = error_report,
@@ -142,8 +144,12 @@ pub fn create_error_report_and_return(
     input: ErrorReportCreateInput,
 ) -> ErrorReportProcedureResult {
     let caller_user_id = ctx.sender().to_hex().to_string();
+    let caller = ctx.sender();
     let now = ctx.timestamp;
     match ctx.try_with_tx(|tx| {
+        crate::editor_project_storage::require_editor_generation_runtime_service_identity(
+            tx, caller,
+        )?;
         let batch_id = validate_text(&input.batch_id, "batch_id")?;
         let user_id = validate_text(&caller_user_id, "user_id")?;
         let submission_id = validate_text(&input.submission_id, "submission_id")?;
@@ -171,6 +177,21 @@ pub fn create_error_report_and_return(
         if tx.db.error_report().batch_id().find(&batch_id).is_some() {
             return Err("错误报告 batch_id 已存在".to_string());
         }
+        let cutoff_micros = now
+            .to_micros_since_unix_epoch()
+            .saturating_sub(REPORT_QUOTA_WINDOW_MICROS);
+        let recent_count = tx
+            .db
+            .error_report()
+            .iter()
+            .filter(|row| {
+                row.user_id == user_id
+                    && row.created_at.to_micros_since_unix_epoch() >= cutoff_micros
+            })
+            .count();
+        if recent_count >= MAX_REPORTS_PER_IDENTITY_PER_HOUR {
+            return Err("错误报告提交频率超出限制，请稍后再试".to_string());
+        }
         tx.db.error_report().insert(ErrorReport {
             batch_id: batch_id.clone(),
             user_id,