@creator.co/wapi 1.8.4 → 1.8.5

package/README.md

@@ -44,6 +44,8 @@ AWS Lambda Functionality: Deploy your code as AWS Lambda functions with ease, pr
 
 Hybrid HTTP Servers: Create hybrid HTTP servers that seamlessly combine serverless and container-based architectures, allowing deployment in various environments.
 
+**Rate Limiting:** Built-in support for request rate limiting to prevent API abuse and protect downstream services. Supports both in-memory and Redis-backed stores for distributed deployments.
+
 Crypto Utilities: WAPI provides utility classes for cryptographic operations, including encryption and decryption using AWS KMS. Securely manage sensitive data with ease.
 
 Email Sending: The Mailer class simplifies sending emails using AWS SES. Send both raw and templated emails with customizable parameters, enhancing communication capabilities.

package/dist/index.d.ts

@@ -10,14 +10,14 @@ import Crypto from './src/Crypto/Crypto.js';
 import JWT from './src/Crypto/JWT.js';
 import * as Database from './src/Database/index.js';
 import Mailer from './src/Mailer/Mailer.js';
-import Router, { Route } from './src/Server/Router.js';
+import Router, { Route, RateLimitConfig, GlobalRateLimitConfig, RouterConfig } from './src/Server/Router.js';
 import AsyncSingleton from './src/Util/AsyncSingleton.js';
 import Utils from './src/Util/Utils.js';
 /**
  * This module exports various classes and utilities for handling transactions, processes, events,
  * DynamoDB transactions, routing, mailing, cryptography, JWT, configuration, Redis, responses,
  * utilities, asynchronous singletons, routes, transaction configurations, response error types,
- * HTTP methods, and database operations.
+ * HTTP methods, database operations, and rate limiting configurations.
  *
  * Classes:
  * - Transaction
@@ -35,10 +35,15 @@ import Utils from './src/Util/Utils.js';
  * - AsyncSingleton
  * - Route
  * - TransactionConfig
+ * - RouterConfig
  * - Database
  *
+ * Types:
+ * - RateLimitConfig - Route-level rate limiting configuration
+ * - GlobalRateLimitConfig - Global rate limiting configuration
+ *
  * Enums:
  * - ResponseErrorType
- * -
+ * - HttpMethod
  */
-export { Transaction, Process, EventProcessor, DynamoTransaction, Router, Mailer, Crypto, JWT, Configuration, Redis, Response, Utils, AsyncSingleton, Route, TransactionConfig, ResponseErrorType, HttpMethod, Database, };
+export { Transaction, Process, EventProcessor, DynamoTransaction, Router, Mailer, Crypto, JWT, Configuration, Redis, Response, Utils, AsyncSingleton, Route, TransactionConfig, RouterConfig, RateLimitConfig, GlobalRateLimitConfig, ResponseErrorType, HttpMethod, Database, };

package/dist/index.js

@@ -17,7 +17,7 @@ import Utils from './src/Util/Utils.js';
  * This module exports various classes and utilities for handling transactions, processes, events,
  * DynamoDB transactions, routing, mailing, cryptography, JWT, configuration, Redis, responses,
  * utilities, asynchronous singletons, routes, transaction configurations, response error types,
- * HTTP methods, and database operations.
+ * HTTP methods, database operations, and rate limiting configurations.
  *
  * Classes:
  * - Transaction
@@ -35,11 +35,16 @@ import Utils from './src/Util/Utils.js';
  * - AsyncSingleton
  * - Route
  * - TransactionConfig
+ * - RouterConfig
  * - Database
  *
+ * Types:
+ * - RateLimitConfig - Route-level rate limiting configuration
+ * - GlobalRateLimitConfig - Global rate limiting configuration
+ *
  * Enums:
  * - ResponseErrorType
- * -
+ * - HttpMethod
  */
 export { 
 // Base Events

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,QAA+B,MAAM,uBAAuB,CAAA;AACnE,OAAO,iBAAiB,MAAM,sCAAsC,CAAA;AACpE,OAAO,cAAc,MAAM,mCAAmC,CAAA;AAC9D,OAAO,OAAO,MAAM,4BAA4B,CAAA;AAChD,OAAO,WAAkC,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,MAAM,sBAAsB,CAAA;AACxC,OAAO,aAAa,MAAM,+BAA+B,CAAA;AACzD,OAAO,MAAM,MAAM,wBAAwB,CAAA;AAC3C,OAAO,GAAG,MAAM,qBAAqB,CAAA;AACrC,OAAO,KAAK,QAAQ,MAAM,yBAAyB,CAAA;AACnD,OAAO,MAAM,MAAM,wBAAwB,CAAA;AAC3C,OAAO,MAAiB,MAAM,wBAAwB,CAAA;AACtD,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,MAAM,qBAAqB,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO;AACL,cAAc;AACd,WAAW,EACX,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,MAAM;AACN,iCAAiC;AACjC,MAAM,EACN,MAAM,EACN,GAAG,EACH,aAAa,EACb,KAAK;AACL,MAAM;AACN,QAAQ;AACR,UAAU;AACV,KAAK,EACL,cAAc,EAKd,UAAU,EACV,QAAQ,GACT,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,QAA+B,MAAM,uBAAuB,CAAA;AACnE,OAAO,iBAAiB,MAAM,sCAAsC,CAAA;AACpE,OAAO,cAAc,MAAM,mCAAmC,CAAA;AAC9D,OAAO,OAAO,MAAM,4BAA4B,CAAA;AAChD,OAAO,WAAkC,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,MAAM,sBAAsB,CAAA;AACxC,OAAO,aAAa,MAAM,+BAA+B,CAAA;AACzD,OAAO,MAAM,MAAM,wBAAwB,CAAA;AAC3C,OAAO,GAAG,MAAM,qBAAqB,CAAA;AACrC,OAAO,KAAK,QAAQ,MAAM,yBAAyB,CAAA;AACnD,OAAO,MAAM,MAAM,wBAAwB,CAAA;AAC3C,OAAO,MAKN,MAAM,wBAAwB,CAAA;AAC/B,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,MAAM,qBAAqB,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO;AACL,cAAc;AACd,WAAW,EACX,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,MAAM;AACN,iCAAiC;AACjC,MAAM,EACN,MAAM,EACN,GAAG,EACH,aAAa,EACb,KAAK;AACL,MAAM;AACN,QAAQ;AACR,UAAU;AACV,KAAK,EACL,cAAc,EASd,UAAU,EACV,QAAQ,GACT,CAAA"}

package/dist/package-lock.json

@@ -1,12 +1,12 @@
 {
     "name": "@creator.co/wapi",
-    "version": "1.8.4",
+    "version": "1.8.5",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@creator.co/wapi",
-            "version": "1.8.4",
+            "version": "1.8.5",
             "license": "ISC",
             "dependencies": {
                 "@aws-sdk/client-dynamodb": "^3.651.1",
@@ -27,6 +27,7 @@
                 "dotenv": "^16.4.1",
                 "email-templates": "^12.0.2",
                 "express": "^4.22.0",
+                "express-rate-limit": "^7.5.0",
                 "json-stringify-safe": "^5.0.1",
                 "jsonwebtoken": "^9.0.2",
                 "knex": "^3.0.1",
@@ -37,6 +38,7 @@
                 "parse-duration": "^2.1.3",
                 "path-to-regexp": "^8.1.0",
                 "pg": "^8.11.3",
+                "rate-limit-redis": "^4.2.0",
                 "redis": "^4.7.0",
                 "sha1": "^1.1.1",
                 "stack-trace": "0.0.10",
@@ -6619,6 +6621,21 @@
                 "url": "https://opencollective.com/express"
             }
         },
+        "node_modules/express-rate-limit": {
+            "version": "7.5.1",
+            "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.5.1.tgz",
+            "integrity": "sha512-7iN8iPMDzOMHPUYllBEsQdWVB6fPDMPqwjBaFrgr4Jgr/+okjvzAy+UHlYYL/Vs0OsOrMkwS6PJDkFlJwoxUnw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 16"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/express-rate-limit"
+            },
+            "peerDependencies": {
+                "express": ">= 4.11"
+            }
+        },
         "node_modules/express/node_modules/debug": {
             "version": "2.6.9",
             "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
@@ -11080,6 +11097,18 @@
                 "node": ">= 0.6"
             }
         },
+        "node_modules/rate-limit-redis": {
+            "version": "4.3.1",
+            "resolved": "https://registry.npmjs.org/rate-limit-redis/-/rate-limit-redis-4.3.1.tgz",
+            "integrity": "sha512-+a1zU8+D7L8siDK9jb14refQXz60vq427VuiplgnaLk9B2LnvGe/APLTfhwb4uNIL7eWVknh8GnRp/unCj+lMA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 16"
+            },
+            "peerDependencies": {
+                "express-rate-limit": ">= 6"
+            }
+        },
         "node_modules/raw-body": {
             "version": "2.5.2",
             "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@creator.co/wapi",
-    "version": "1.8.4",
+    "version": "1.8.5",
     "description": "",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
@@ -50,7 +50,9 @@
         "redis": "^4.7.0",
         "sha1": "^1.1.1",
         "stack-trace": "0.0.10",
-        "zod": "^3.23.4"
+        "zod": "^3.23.4",
+        "express-rate-limit": "^7.5.0",
+        "rate-limit-redis": "^4.2.0"
     },
     "devDependencies": {
         "@go-task/cli": "^3.39.0",

package/dist/src/Server/Router.d.ts

@@ -1,9 +1,48 @@
 import { Server as HTTPServer } from 'http';
 import express from 'express';
+import type { RedisClientType } from 'redis';
 import { z } from 'zod';
 import { HttpMethod } from '../API/Request.js';
 import { ResponseErrorType } from '../API/Response.js';
 import Transaction, { TransactionConfig, TransactionExecution, StringMap } from '../BaseEvent/Transaction.js';
+/**
+ * Configuration options for rate limiting on a specific route.
+ * @property {number} [windowMs] - Time window in milliseconds for rate limiting (default: 60000 - 1 minute)
+ * @property {number} [limit] - Maximum number of requests allowed per window (default: 60)
+ * @property {string} [message] - Custom error message for rate limit exceeded
+ * @property {'ip' | 'userId' | ((req: express.Request) => string)} [keyGenerator] - Strategy for generating rate limit keys
+ */
+export interface RateLimitConfig {
+    windowMs?: number;
+    limit?: number;
+    message?: string;
+    keyGenerator?: 'ip' | 'userId' | ((req: express.Request) => string);
+    skip?: (req: express.Request) => boolean;
+}
+/**
+ * Global rate limiting configuration for the router.
+ * @property {boolean} [enabled] - Whether rate limiting is enabled (default: true if config provided)
+ * @property {number} [windowMs] - Time window in milliseconds (default: 60000 - 1 minute)
+ * @property {number} [limit] - Maximum requests per window per key (default: 60)
+ * @property {(req: express.Request) => string} [keyGenerator] - Function to generate rate limit key (default: IP-based)
+ * @property {(req: express.Request, res: express.Response) => void} [handler] - Custom handler for rate limit exceeded
+ * @property {(req: express.Request) => boolean} [skip] - Function to skip rate limiting for certain requests
+ * @property {'memory' | 'redis'} [store] - Storage backend for rate limit data
+ * @property {object} [redis] - Redis configuration when using Redis store
+ */
+export interface GlobalRateLimitConfig {
+    enabled?: boolean;
+    windowMs?: number;
+    limit?: number;
+    keyGenerator?: (req: express.Request) => string;
+    handler?: (req: express.Request, res: express.Response) => void;
+    skip?: (req: express.Request) => boolean;
+    store?: 'memory' | 'redis';
+    redis?: {
+        client: RedisClientType;
+        prefix?: string;
+    };
+}
 /**
  * Represents a route in an API.
  * @template InputType - The type of the input data for the route.
@@ -64,6 +103,12 @@ export interface Route<InputType = never, OutputType = never, PathParamsType = S
             [key: string]: string[] | never[];
         }[];
     };
+    /**
+     * Optional rate limiting configuration for this specific route.
+     * Set to `false` to disable global rate limiting for this route.
+     * @type {RateLimitConfig | false}
+     */
+    rateLimit?: RateLimitConfig | false;
 }
 export type AnyRoute = Route<any | never, any | never, any | never, any | never>;
 /**
@@ -115,6 +160,12 @@ export type RouterConfig = TransactionConfig & {
      * @type {string | undefined}
      */
     healthCheckRoute?: string;
+    /**
+     * Global rate limiting configuration for all routes.
+     * Individual routes can override this with their own rateLimit config.
+     * @type {GlobalRateLimitConfig | undefined}
+     */
+    rateLimit?: GlobalRateLimitConfig;
     containerSetupHook?: (server: HTTPServer, app: express.Express) => Promise<void>;
 };
 /**

package/dist/src/Server/Router.js.map

@@ -1 +1 @@
-{"version":3,"file":"Router.js","sourceRoot":"","sources":["../../../src/Server/Router.ts"],"names":[],"mappings":"AAKA,OAAO,eAAe,MAAM,0BAA0B,CAAA;AACtD,OAAO,MAAM,MAAM,iBAAiB,CAAA;AAQpC,OAAO,KAAK,MAAM,kBAAkB,CAAA;AA0IpC;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,MAAM;IAUzB;;;;OAIG;IACH,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAA;IACrF,CAAC;IAED;;;OAGG;IACI,SAAS;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;IAChC,CAAC;IAED;;;OAGG;IACK,WAAW;QACjB,OAAO,KAAK,CAAC,qBAAqB,EAAE,CAAA;IACtC,CAAC;CACF"}
+{"version":3,"file":"Router.js","sourceRoot":"","sources":["../../../src/Server/Router.ts"],"names":[],"mappings":"AAMA,OAAO,eAAe,MAAM,0BAA0B,CAAA;AACtD,OAAO,MAAM,MAAM,iBAAiB,CAAA;AAQpC,OAAO,KAAK,MAAM,kBAAkB,CAAA;AA+LpC;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,MAAM;IAUzB;;;;OAIG;IACH,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAA;IACrF,CAAC;IAED;;;OAGG;IACI,SAAS;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;IAChC,CAAC;IAED;;;OAGG;IACK,WAAW;QACjB,OAAO,KAAK,CAAC,qBAAqB,EAAE,CAAA;IACtC,CAAC;CACF"}

package/dist/src/Server/lib/container/Proxy.d.ts

@@ -64,4 +64,18 @@ export default class Proxy {
      * @returns None
      */
     private installRoutes;
+    /**
+     * Creates rate limiting middleware based on the provided configuration.
+     * @param {GlobalRateLimitConfig} config - The rate limit configuration
+     * @returns {express.RequestHandler} Express middleware for rate limiting
+     * @private
+     */
+    private createRateLimitMiddleware;
+    /**
+     * Creates the appropriate store for rate limiting based on configuration.
+     * @param {GlobalRateLimitConfig} config - The rate limit configuration
+     * @returns {RedisStore | undefined} Redis store if configured, undefined for in-memory
+     * @private
+     */
+    private createRateLimitStore;
 }

package/dist/src/Server/lib/container/Proxy.js

@@ -11,6 +11,8 @@ import fs from 'fs';
 import { createServer } from 'http';
 import cors from 'cors';
 import express from 'express';
+import { rateLimit } from 'express-rate-limit';
+import { RedisStore } from 'rate-limit-redis';
 import GenericHandler from './GenericHandler.js';
 import HealthHandler from './HealthHandler.js';
 import Globals from '../../../Globals.js';
@@ -47,6 +49,12 @@ export default class Proxy {
                 credentials: !!corsConfig.allowCredentials,
             }
             : {}));
+        // Apply global rate limiting if configured
+        if (this.config.rateLimit && this.config.rateLimit.enabled !== false) {
+            console.log('[Proxy] - [RATE-LIMIT] - Global rate limiting enabled');
+            const rateLimitMiddleware = this.createRateLimitMiddleware(this.config.rateLimit);
+            this.app.use(rateLimitMiddleware);
+        }
         // //This supposedly fix some 502 codes where nodejs socket would hang during
         // //a request and if behind ALB, it would cause 502 codes. Had experiencied this
         // //and 502 codes reduced dramastically, but still some appearances. Maybe this
@@ -143,5 +151,67 @@ export default class Proxy {
         //load balancer and we just foward everything we have to the function.
         this.app.route(Globals.Listener_HTTP_ProxyRoute).all(GenericHandler(this.serverlessHandler));
     }
+    /**
+     * Creates rate limiting middleware based on the provided configuration.
+     * @param {GlobalRateLimitConfig} config - The rate limit configuration
+     * @returns {express.RequestHandler} Express middleware for rate limiting
+     * @private
+     */
+    createRateLimitMiddleware(config) {
+        const store = this.createRateLimitStore(config);
+        return rateLimit({
+            windowMs: config.windowMs || 60000, // Default: 1 minute
+            limit: config.limit || 60, // Default: 60 requests per windowMs
+            standardHeaders: true, // Return rate limit info in `RateLimit-*` headers
+            legacyHeaders: false, // Disable `X-RateLimit-*` headers
+            // Key generator - how to identify unique clients
+            keyGenerator: config.keyGenerator ||
+                ((req) => {
+                    var _a, _b;
+                    // Use IP address from proxy-aware sources
+                    return (req.ip ||
+                        ((_b = (_a = req.headers['x-forwarded-for']) === null || _a === void 0 ? void 0 : _a.split(',')[0]) === null || _b === void 0 ? void 0 : _b.trim()) ||
+                        req.socket.remoteAddress ||
+                        'unknown');
+                }),
+            // Custom handler when rate limit is exceeded
+            handler: config.handler ||
+                ((req, res) => {
+                    // Log rate limit violation
+                    console.warn('[Proxy] - [RATE-LIMIT] - Limit exceeded', {
+                        ip: req.ip,
+                        path: req.path,
+                        method: req.method,
+                        timestamp: new Date().toISOString(),
+                    });
+                    res.status(429).json({
+                        error: 'rate_limit_exceeded',
+                        message: 'Too many requests. Please try again later.',
+                    });
+                }),
+            // Skip function - allows bypassing rate limiting for certain requests
+            skip: config.skip,
+            // Store - use Redis if configured, otherwise in-memory
+            store: store,
+        });
+    }
+    /**
+     * Creates the appropriate store for rate limiting based on configuration.
+     * @param {GlobalRateLimitConfig} config - The rate limit configuration
+     * @returns {RedisStore | undefined} Redis store if configured, undefined for in-memory
+     * @private
+     */
+    createRateLimitStore(config) {
+        var _a;
+        if (config.store === 'redis' && ((_a = config.redis) === null || _a === void 0 ? void 0 : _a.client)) {
+            console.log('[Proxy] - [RATE-LIMIT] - Using Redis store');
+            return new RedisStore({
+                sendCommand: (...args) => config.redis.client.sendCommand(args),
+                prefix: config.redis.prefix || 'wapi:rl:',
+            });
+        }
+        console.log('[Proxy] - [RATE-LIMIT] - Using in-memory store');
+        return undefined; // express-rate-limit uses MemoryStore by default
+    }
 }
 //# sourceMappingURL=Proxy.js.map

package/dist/src/Server/lib/container/Proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"Proxy.js","sourceRoot":"","sources":["../../../../../src/Server/lib/container/Proxy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,EAAwB,YAAY,EAAE,MAAM,MAAM,CAAA;AAEzD,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,OAAO,MAAM,SAAS,CAAA;AAG7B,OAAO,cAAc,MAAM,qBAAqB,CAAA;AAChD,OAAO,aAAa,MAAM,oBAAoB,CAAA;AAC9C,OAAO,OAAO,MAAM,qBAAqB,CAAA;AACzC,OAAO,KAAK,MAAM,wBAAwB,CAAA;AAG1C,+CAA+C;AAC/C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;AAEtF;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,KAAK;IA4BxB;;;;;OAKG;IACH,YAAY,MAAoB,EAAE,iBAAkD;QAClF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;QAC1C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAA;QACpB,iCAAiC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG;gBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAA;YACtB,CAAC;SACF,CAAC,CACH,CAAA;QACD,oBAAoB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrF,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,IAAI,CACF,UAAU;YACR,CAAC,CAAC;gBACE,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc,EAAE,UAAU,CAAC,OAAO;gBAClC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,gBAAgB;aAC3C;YACH,CAAC,CAAC,EAAE,CACP,CACF,CAAA;QAED,6EAA6E;QAC7E,iFAAiF;QACjF,gFAAgF;QAChF,mFAAmF;QACnF,mBAAmB;QACnB,kDAAkD;QAClD,gDAAgD;IAClD,CAAC;IAED;;;OAGG;IACU,IAAI;;YACf,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;YAC3B,IAAI,CAAC,aAAa,EAAE,CAAA;QACtB,CAAC;KAAA;IAED;;;;OAIG;IACU,MAAM,CAAC,GAAS;;YAC3B,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;KAAA;IAED;;;OAGG;IACW,cAAc;;YAC1B,qDAAqD;YACrD,OAAO,IAAI,OAAO,CAAC,CAAM,OAAO,EAAC,EAAE;gBACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,yBAAyB,CAAA;gBAClE,OAAO,CAAC,GAAG,CAAC,4BAA4B,UAAU,OAAO,IAAI,EAAE,CAAC,CAAA;gBAChE,gBAAgB;gBAChB,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACtC,eAAe;gBACf,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,4BAA4B,CAAC,CAAA;gBACrF,0EAA0E;gBAC1E,8BAA8B;gBAC9B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAA;gBACtC,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAA;gBAEpC,yBAAyB;gBACzB,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBAChC,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC/D,eAAe;gBACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;oBAC9B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;oBAClC,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;YACJ,CAAC,CAAA,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACW,aAAa,CAAC,GAAS;;YACnC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAM;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;YACpB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACrC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;oBACzB,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAA;oBACxB,IAAI,IAAI;wBAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAA;oBACrD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;oBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;OAGG;IACK,aAAa;QACnB,+DAA+D;QAC/D,mDAAmD;QACnD,OAAO,CAAC,GAAG,CACT,8BACE,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,qCAC1C,EAAE,CACH,CAAA;QACD,IAAI,CAAC,GAAG;aACL,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,qCAAqC,CAAC;aACpF,GAAG,CAAC,aAAa,CAAC,CAAA;QACrB,yFAAyF;QACzF,sFAAsF;QACtF,sEAAsE;QACtE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC9F,CAAC;CACF"}
+{"version":3,"file":"Proxy.js","sourceRoot":"","sources":["../../../../../src/Server/lib/container/Proxy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,EAAwB,YAAY,EAAE,MAAM,MAAM,CAAA;AAEzD,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,OAAO,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG7C,OAAO,cAAc,MAAM,qBAAqB,CAAA;AAChD,OAAO,aAAa,MAAM,oBAAoB,CAAA;AAC9C,OAAO,OAAO,MAAM,qBAAqB,CAAA;AACzC,OAAO,KAAK,MAAM,wBAAwB,CAAA;AAG1C,+CAA+C;AAC/C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;AAEtF;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,KAAK;IA4BxB;;;;;OAKG;IACH,YAAY,MAAoB,EAAE,iBAAkD;QAClF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;QAC1C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAA;QACpB,iCAAiC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG;gBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAA;YACtB,CAAC;SACF,CAAC,CACH,CAAA;QACD,oBAAoB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrF,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,IAAI,CACF,UAAU;YACR,CAAC,CAAC;gBACE,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc,EAAE,UAAU,CAAC,OAAO;gBAClC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,gBAAgB;aAC3C;YACH,CAAC,CAAC,EAAE,CACP,CACF,CAAA;QAED,2CAA2C;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAA;YACpE,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACjF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QACnC,CAAC;QAED,6EAA6E;QAC7E,iFAAiF;QACjF,gFAAgF;QAChF,mFAAmF;QACnF,mBAAmB;QACnB,kDAAkD;QAClD,gDAAgD;IAClD,CAAC;IAED;;;OAGG;IACU,IAAI;;YACf,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;YAC3B,IAAI,CAAC,aAAa,EAAE,CAAA;QACtB,CAAC;KAAA;IAED;;;;OAIG;IACU,MAAM,CAAC,GAAS;;YAC3B,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;KAAA;IAED;;;OAGG;IACW,cAAc;;YAC1B,qDAAqD;YACrD,OAAO,IAAI,OAAO,CAAC,CAAM,OAAO,EAAC,EAAE;gBACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,yBAAyB,CAAA;gBAClE,OAAO,CAAC,GAAG,CAAC,4BAA4B,UAAU,OAAO,IAAI,EAAE,CAAC,CAAA;gBAChE,gBAAgB;gBAChB,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACtC,eAAe;gBACf,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,4BAA4B,CAAC,CAAA;gBACrF,0EAA0E;gBAC1E,8BAA8B;gBAC9B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAA;gBACtC,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAA;gBAEpC,yBAAyB;gBACzB,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBAChC,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC/D,eAAe;gBACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;oBAC9B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;oBAClC,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;YACJ,CAAC,CAAA,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACW,aAAa,CAAC,GAAS;;YACnC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAM;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;YACpB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACrC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;oBACzB,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAA;oBACxB,IAAI,IAAI;wBAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAA;oBACrD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;oBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;OAGG;IACK,aAAa;QACnB,+DAA+D;QAC/D,mDAAmD;QACnD,OAAO,CAAC,GAAG,CACT,8BACE,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,qCAC1C,EAAE,CACH,CAAA;QACD,IAAI,CAAC,GAAG;aACL,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,qCAAqC,CAAC;aACpF,GAAG,CAAC,aAAa,CAAC,CAAA;QACrB,yFAAyF;QACzF,sFAAsF;QACtF,sEAAsE;QACtE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC9F,CAAC;IAED;;;;;OAKG;IACK,yBAAyB,CAAC,MAA6B;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAE/C,OAAO,SAAS,CAAC;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,oBAAoB;YACxD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,oCAAoC;YAC/D,eAAe,EAAE,IAAI,EAAE,kDAAkD;YACzE,aAAa,EAAE,KAAK,EAAE,kCAAkC;YAExD,iDAAiD;YACjD,YAAY,EACV,MAAM,CAAC,YAAY;gBACnB,CAAC,CAAC,GAAoB,EAAE,EAAE;;oBACxB,0CAA0C;oBAC1C,OAAO,CACJ,GAAG,CAAC,EAAa;yBAClB,MAAA,MAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,0CAAE,IAAI,EAAE,CAAA;wBACjE,GAAG,CAAC,MAAM,CAAC,aAAa;wBACxB,SAAS,CACV,CAAA;gBACH,CAAC,CAAC;YAEJ,6CAA6C;YAC7C,OAAO,EACL,MAAM,CAAC,OAAO;gBACd,CAAC,CAAC,GAAoB,EAAE,GAAqB,EAAE,EAAE;oBAC/C,2BAA2B;oBAC3B,OAAO,CAAC,IAAI,CAAC,yCAAyC,EAAE;wBACtD,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC,CAAC,CAAA;oBAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,qBAAqB;wBAC5B,OAAO,EAAE,4CAA4C;qBACtD,CAAC,CAAA;gBACJ,CAAC,CAAC;YAEJ,sEAAsE;YACtE,IAAI,EAAE,MAAM,CAAC,IAAI;YAEjB,uDAAuD;YACvD,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACK,oBAAoB,CAAC,MAA6B;;QACxD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,KAAI,MAAA,MAAM,CAAC,KAAK,0CAAE,MAAM,CAAA,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAA;YACzD,OAAO,IAAI,UAAU,CAAC;gBACpB,WAAW,EAAE,CAAC,GAAG,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC1E,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU;aAC1C,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;QAC7D,OAAO,SAAS,CAAA,CAAC,iDAAiD;IACpE,CAAC;CACF"}

package/index.ts

@@ -10,7 +10,12 @@ import Crypto from './src/Crypto/Crypto.js'
 import JWT from './src/Crypto/JWT.js'
 import * as Database from './src/Database/index.js'
 import Mailer from './src/Mailer/Mailer.js'
-import Router, { Route } from './src/Server/Router.js'
+import Router, {
+  Route,
+  RateLimitConfig,
+  GlobalRateLimitConfig,
+  RouterConfig,
+} from './src/Server/Router.js'
 import AsyncSingleton from './src/Util/AsyncSingleton.js'
 import Utils from './src/Util/Utils.js'
 
@@ -18,7 +23,7 @@ import Utils from './src/Util/Utils.js'
  * This module exports various classes and utilities for handling transactions, processes, events,
  * DynamoDB transactions, routing, mailing, cryptography, JWT, configuration, Redis, responses,
  * utilities, asynchronous singletons, routes, transaction configurations, response error types,
- * HTTP methods, and database operations.
+ * HTTP methods, database operations, and rate limiting configurations.
  *
  * Classes:
  * - Transaction
@@ -36,11 +41,16 @@ import Utils from './src/Util/Utils.js'
  * - AsyncSingleton
  * - Route
  * - TransactionConfig
+ * - RouterConfig
  * - Database
  *
+ * Types:
+ * - RateLimitConfig - Route-level rate limiting configuration
+ * - GlobalRateLimitConfig - Global rate limiting configuration
+ *
  * Enums:
  * - ResponseErrorType
- * -
+ * - HttpMethod
  */
 export {
   // Base Events
@@ -62,6 +72,10 @@ export {
   AsyncSingleton,
   Route,
   TransactionConfig,
+  RouterConfig,
+  // Rate Limiting
+  RateLimitConfig,
+  GlobalRateLimitConfig,
   // Misc types
   ResponseErrorType,
   HttpMethod,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@creator.co/wapi",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -50,7 +50,9 @@
     "redis": "^4.7.0",
     "sha1": "^1.1.1",
     "stack-trace": "0.0.10",
-    "zod": "^3.23.4"
+    "zod": "^3.23.4",
+    "express-rate-limit": "^7.5.0",
+    "rate-limit-redis": "^4.2.0"
   },
   "devDependencies": {
     "@go-task/cli": "^3.39.0",

package/src/Server/Router.ts

@@ -1,6 +1,7 @@
 import { Server as HTTPServer } from 'http'
 
 import express from 'express'
+import type { RedisClientType } from 'redis'
 import { z } from 'zod'
 
 import ContainerServer from './lib/ContainerServer.js'
@@ -14,6 +15,46 @@ import Transaction, {
 } from '../BaseEvent/Transaction.js'
 import Utils from '../Util/Utils.js'
 
+/**
+ * Configuration options for rate limiting on a specific route.
+ * @property {number} [windowMs] - Time window in milliseconds for rate limiting (default: 60000 - 1 minute)
+ * @property {number} [limit] - Maximum number of requests allowed per window (default: 60)
+ * @property {string} [message] - Custom error message for rate limit exceeded
+ * @property {'ip' | 'userId' | ((req: express.Request) => string)} [keyGenerator] - Strategy for generating rate limit keys
+ */
+export interface RateLimitConfig {
+  windowMs?: number
+  limit?: number
+  message?: string
+  keyGenerator?: 'ip' | 'userId' | ((req: express.Request) => string)
+  skip?: (req: express.Request) => boolean
+}
+
+/**
+ * Global rate limiting configuration for the router.
+ * @property {boolean} [enabled] - Whether rate limiting is enabled (default: true if config provided)
+ * @property {number} [windowMs] - Time window in milliseconds (default: 60000 - 1 minute)
+ * @property {number} [limit] - Maximum requests per window per key (default: 60)
+ * @property {(req: express.Request) => string} [keyGenerator] - Function to generate rate limit key (default: IP-based)
+ * @property {(req: express.Request, res: express.Response) => void} [handler] - Custom handler for rate limit exceeded
+ * @property {(req: express.Request) => boolean} [skip] - Function to skip rate limiting for certain requests
+ * @property {'memory' | 'redis'} [store] - Storage backend for rate limit data
+ * @property {object} [redis] - Redis configuration when using Redis store
+ */
+export interface GlobalRateLimitConfig {
+  enabled?: boolean
+  windowMs?: number
+  limit?: number
+  keyGenerator?: (req: express.Request) => string
+  handler?: (req: express.Request, res: express.Response) => void
+  skip?: (req: express.Request) => boolean
+  store?: 'memory' | 'redis'
+  redis?: {
+    client: RedisClientType
+    prefix?: string
+  }
+}
+
 /**
  * Represents a route in an API.
  * @template InputType - The type of the input data for the route.
@@ -94,6 +135,13 @@ export interface Route<
       [key: string]: string[] | never[]
     }[]
   }
+
+  /**
+   * Optional rate limiting configuration for this specific route.
+   * Set to `false` to disable global rate limiting for this route.
+   * @type {RateLimitConfig | false}
+   */
+  rateLimit?: RateLimitConfig | false
 }
 
 export type AnyRoute = Route<any | never, any | never, any | never, any | never>
@@ -147,6 +195,12 @@ export type RouterConfig = TransactionConfig & {
    * @type {string | undefined}
    */
   healthCheckRoute?: string
+  /**
+   * Global rate limiting configuration for all routes.
+   * Individual routes can override this with their own rateLimit config.
+   * @type {GlobalRateLimitConfig | undefined}
+   */
+  rateLimit?: GlobalRateLimitConfig
   containerSetupHook?: (server: HTTPServer, app: express.Express) => Promise<void>
 }
 

package/src/Server/lib/container/Proxy.ts

@@ -3,13 +3,15 @@ import { Server as HTTPServer, createServer } from 'http'
 
 import cors from 'cors'
 import express from 'express'
+import { rateLimit } from 'express-rate-limit'
+import { RedisStore } from 'rate-limit-redis'
 
 import Server from './../Server.js'
 import GenericHandler from './GenericHandler.js'
 import HealthHandler from './HealthHandler.js'
 import Globals from '../../../Globals.js'
 import Utils from '../../../Util/Utils.js'
-import { RouterConfig } from '../../Router.js'
+import { GlobalRateLimitConfig, RouterConfig } from '../../Router.js'
 
 /* Get package.json version from Wapi on ESM */
 const { version: appVersion } = JSON.parse(fs.readFileSync('package.json').toString())
@@ -78,6 +80,13 @@ export default class Proxy {
       )
     )
 
+    // Apply global rate limiting if configured
+    if (this.config.rateLimit && this.config.rateLimit.enabled !== false) {
+      console.log('[Proxy] - [RATE-LIMIT] - Global rate limiting enabled')
+      const rateLimitMiddleware = this.createRateLimitMiddleware(this.config.rateLimit)
+      this.app.use(rateLimitMiddleware)
+    }
+
     // //This supposedly fix some 502 codes where nodejs socket would hang during
     // //a request and if behind ALB, it would cause 502 codes. Had experiencied this
     // //and 502 codes reduced dramastically, but still some appearances. Maybe this
@@ -174,4 +183,77 @@ export default class Proxy {
     //load balancer and we just foward everything we have to the function.
     this.app.route(Globals.Listener_HTTP_ProxyRoute).all(GenericHandler(this.serverlessHandler))
   }
+
+  /**
+   * Creates rate limiting middleware based on the provided configuration.
+   * @param {GlobalRateLimitConfig} config - The rate limit configuration
+   * @returns {express.RequestHandler} Express middleware for rate limiting
+   * @private
+   */
+  private createRateLimitMiddleware(config: GlobalRateLimitConfig): express.RequestHandler {
+    const store = this.createRateLimitStore(config)
+
+    return rateLimit({
+      windowMs: config.windowMs || 60000, // Default: 1 minute
+      limit: config.limit || 60, // Default: 60 requests per windowMs
+      standardHeaders: true, // Return rate limit info in `RateLimit-*` headers
+      legacyHeaders: false, // Disable `X-RateLimit-*` headers
+
+      // Key generator - how to identify unique clients
+      keyGenerator:
+        config.keyGenerator ||
+        ((req: express.Request) => {
+          // Use IP address from proxy-aware sources
+          return (
+            (req.ip as string) ||
+            (req.headers['x-forwarded-for'] as string)?.split(',')[0]?.trim() ||
+            req.socket.remoteAddress ||
+            'unknown'
+          )
+        }),
+
+      // Custom handler when rate limit is exceeded
+      handler:
+        config.handler ||
+        ((req: express.Request, res: express.Response) => {
+          // Log rate limit violation
+          console.warn('[Proxy] - [RATE-LIMIT] - Limit exceeded', {
+            ip: req.ip,
+            path: req.path,
+            method: req.method,
+            timestamp: new Date().toISOString(),
+          })
+
+          res.status(429).json({
+            error: 'rate_limit_exceeded',
+            message: 'Too many requests. Please try again later.',
+          })
+        }),
+
+      // Skip function - allows bypassing rate limiting for certain requests
+      skip: config.skip,
+
+      // Store - use Redis if configured, otherwise in-memory
+      store: store,
+    })
+  }
+
+  /**
+   * Creates the appropriate store for rate limiting based on configuration.
+   * @param {GlobalRateLimitConfig} config - The rate limit configuration
+   * @returns {RedisStore | undefined} Redis store if configured, undefined for in-memory
+   * @private
+   */
+  private createRateLimitStore(config: GlobalRateLimitConfig): any {
+    if (config.store === 'redis' && config.redis?.client) {
+      console.log('[Proxy] - [RATE-LIMIT] - Using Redis store')
+      return new RedisStore({
+        sendCommand: (...args: string[]) => config.redis!.client.sendCommand(args),
+        prefix: config.redis.prefix || 'wapi:rl:',
+      })
+    }
+
+    console.log('[Proxy] - [RATE-LIMIT] - Using in-memory store')
+    return undefined // express-rate-limit uses MemoryStore by default
+  }
 }