d824d16760
Implement @EndpointRateLimit() decorator and EndpointRateLimitGuard for granular per-endpoint rate limiting using a Redis sorted-set sliding window. This prevents brute force attacks on auth endpoints, replay attacks on payment callbacks, and scraping on search endpoints. Applied rate limits: - /auth/login: 5 req/min per IP - /auth/register: 3 req/min per IP - /listings POST: 10 req/min per user - /search: 30 req/min per user - /payments/callback/*: 100 req/min per IP Features: - True sliding window (sorted set) for accurate rate measurement - Configurable key strategy (IP or authenticated user) - Admin bypass support (enabled by default) - Fail-open on Redis errors - Proper 429 response with Retry-After header - Rate limit headers (X-RateLimit-Limit/Remaining/Reset) - 22 unit tests covering all scenarios Co-Authored-By: Paperclip <noreply@paperclip.ing>
32 lines
1.6 KiB
TypeScript
32 lines
1.6 KiB
TypeScript
export { Cacheable, type CacheableOptions } from './decorators/cacheable.decorator';
|
|
export { CircuitBreaker, CircuitOpenError, CircuitState, type CircuitBreakerOptions } from './circuit-breaker';
|
|
export { PrismaService } from './prisma.service';
|
|
export { RedisService } from './redis.service';
|
|
export { CacheService, CachePrefix, CacheTTL } from './cache.service';
|
|
export { LoggerService } from './logger.service';
|
|
export { EventBusService } from './event-bus.service';
|
|
export { GlobalExceptionFilter } from './filters/global-exception.filter';
|
|
export { CorrelationIdMiddleware } from './middleware/correlation-id.middleware';
|
|
export { RequestLoggingMiddleware } from './middleware/request-logging.middleware';
|
|
export { SanitizeInputMiddleware } from './middleware/sanitize-input.middleware';
|
|
export { CsrfMiddleware } from './middleware/csrf.middleware';
|
|
export { maskPii } from './pii-masker';
|
|
export { ThrottlerBehindProxyGuard } from './guards/throttler-behind-proxy.guard';
|
|
export {
|
|
UserRateLimitGuard,
|
|
DEFAULT_ROLE_LIMITS,
|
|
DEFAULT_WINDOW_SECONDS,
|
|
USER_RATE_LIMIT_KEY,
|
|
type UserRateLimitOptions,
|
|
} from './guards/user-rate-limit.guard';
|
|
export { UserRateLimit } from './decorators/user-rate-limit.decorator';
|
|
export {
|
|
EndpointRateLimit,
|
|
ENDPOINT_RATE_LIMIT_KEY,
|
|
type EndpointRateLimitOptions,
|
|
} from './decorators/endpoint-rate-limit.decorator';
|
|
export { EndpointRateLimitGuard } from './guards/endpoint-rate-limit.guard';
|
|
export { FileValidationPipe } from './pipes/file-validation.pipe';
|
|
export type { FileValidationOptions, UploadedFile } from './pipes/file-validation.pipe';
|
|
export { validateEnv, validateJwtSecret } from './env-validation';
|