@forestadmin/agent-bff 1.23.7 → 1.24.0

package/dist/rate-limit/rate-limit-middleware.js

@@ -0,0 +1,61 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = createRateLimitMiddleware;
+const agent_path_1 = __importDefault(require("./agent-path"));
+const bff_http_error_1 = require("../http/bff-http-error");
+const bff_local_errors_1 = require("../http/bff-local-errors");
+const DEFAULT_MAX_ENTRIES = 10000;
+const MS_PER_SECOND = 1000;
+function retryAfterSeconds(resetAt, current) {
+    return Math.max(1, Math.ceil((resetAt - current) / MS_PER_SECOND));
+}
+function bucketKeyOf(state) {
+    const { apiKeyIdentity, principal } = state;
+    if (apiKeyIdentity)
+        return `api-key:${apiKeyIdentity.renderingId}:${apiKeyIdentity.user.id}`;
+    if (principal)
+        return `oauth:${principal.rendering_id}:${principal.id}`;
+    return undefined;
+}
+function createRateLimitMiddleware({ windowMs, maxRequests, now = Date.now, maxEntries = DEFAULT_MAX_ENTRIES, }) {
+    const buckets = new Map();
+    function purgeExpired(current) {
+        for (const [key, entry] of buckets) {
+            if (current >= entry.resetAt)
+                buckets.delete(key);
+        }
+    }
+    return async function rateLimitMiddleware(ctx, next) {
+        if (!(0, agent_path_1.default)(ctx.path)) {
+            await next();
+            return;
+        }
+        const key = bucketKeyOf(ctx.state);
+        if (key === undefined)
+            throw (0, bff_http_error_1.unauthorized)('No caller identity for this request');
+        const current = now();
+        let entry = buckets.get(key);
+        if (entry && current >= entry.resetAt) {
+            buckets.delete(key);
+            entry = undefined;
+        }
+        if (entry === undefined) {
+            purgeExpired(current);
+            if (buckets.size >= maxEntries) {
+                const earliestReset = Math.min(...[...buckets.values()].map(live => live.resetAt));
+                throw (0, bff_local_errors_1.tooManyRequests)(retryAfterSeconds(earliestReset, current), 'Too many requests: the rate limiter is saturated', bff_local_errors_1.RATE_LIMIT_CAUSES.limiterSaturated);
+            }
+            entry = { count: 0, resetAt: current + windowMs };
+            buckets.set(key, entry);
+        }
+        entry.count += 1;
+        if (entry.count > maxRequests) {
+            throw (0, bff_local_errors_1.tooManyRequests)(retryAfterSeconds(entry.resetAt, current), `Too many requests: the limit is ${maxRequests} per ${Math.round(windowMs / MS_PER_SECOND)}s per identity`, bff_local_errors_1.RATE_LIMIT_CAUSES.limitExceeded);
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forestadmin/agent-bff",
-  "version": "1.23.7",
+  "version": "1.24.0",
   "main": "dist/index.js",
   "bin": {
     "forest-bff": "dist/cli.js"
@@ -37,16 +37,18 @@
     "@forestadmin/datasource-toolkit": "1.55.1",
     "@forestadmin/forestadmin-client": "1.43.3",
     "@koa/bodyparser": "^6.1.0",
+    "inflected": "^1.1.6",
     "jsonwebtoken": "^9.0.3",
     "koa": "^3.0.1",
     "sanitize-html": "2.17.5",
     "zod": "4.3.6"
   },
   "devDependencies": {
-    "@forestadmin/agent": "1.98.6",
-    "@forestadmin/agent-testing": "1.2.10",
+    "@forestadmin/agent": "1.98.8",
+    "@forestadmin/agent-testing": "1.2.12",
     "@hey-api/openapi-ts": "0.99.0",
     "@redocly/cli": "2.35.1",
+    "@types/inflected": "^1.1.29",
     "@types/jsonwebtoken": "^9.0.1",
     "@types/koa": "^2.13.5",
     "@types/sanitize-html": "^2.16.1",