@igea/oac_backend 1.0.32 → 1.0.34

package/README.md

@@ -10,20 +10,35 @@ sudo apt install xsltproc
 ## ENV variables
 Env variables overwrites parameters from the config file
 
-### OAC_DB_USER
+### Database
+
+#### OAC_DB_USER
 Username for the OAC datbase
 
-### OAC_DB_PASSWORD
+#### OAC_DB_PASSWORD
 Password for the OAC datbase
 
-### OAC_SMTP_HOST
+### SMTP
+
+#### OAC_SMTP_HOST
 Host for the SMTP
 
-### OAC_SMTP_PORT
+#### OAC_SMTP_PORT
 Port for the SMTP
 
-### OAC_SMTP_USER
+#### OAC_SMTP_USER
 Username for the SMTP
 
-### OAC_SMTP_PASSWORD
-Password for the SMTP
+#### OAC_SMTP_PASSWORD
+Password for the SMTP
+
+### EXPOSED 
+
+#### OAC_EXPOSED_PROTOCOL
+Protocol exposed externally
+
+#### OAC_EXPOSED_HOST
+Host exposed externally
+
+#### OAC_EXPOSED_PORT
+Port exposed externally

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@igea/oac_backend",
-  "version": "1.0.32",
+  "version": "1.0.34",
   "description": "Backend service for the OAC project",
   "main": "src/index.js",
   "bin": {
@@ -27,6 +27,7 @@
     "cookie-parser": "1.4.7",
     "crypto": "1.0.1",
     "express": "5.1.0",
+    "express-rate-limit": "^8.1.0",
     "get-port": "7.1.0",
     "knex": "3.1.0",
     "libxmljs2": "0.37.0",

package/src/config.js

@@ -14,7 +14,10 @@ function loadConfig() {
   config.smtp.port = process.env.OAC_SMTP_PORT || config.smtp.port;
   config.smtp.auth.user = process.env.OAC_SMTP_USER || config.smtp.auth.user;
   config.smtp.auth.password = process.env.OAC_SMTP_PASSWORD || config.smtp.auth.password;
-  
+  config.exposed.protocol = process.env.OAC_EXPOSED_PROTOCOL || config.exposed.protocol;
+  config.exposed.host = process.env.OAC_EXPOSED_HOST || config.exposed.host;
+  config.exposed.port = process.env.OAC_EXPOSED_PORT || config.exposed.port;
+
   return config;
 }
 

package/src/controllers/auth.js

@@ -5,8 +5,15 @@ const EmailSender = require('../models/EmailSender');
 const config = require('../config');
 const EXPOSED = config.exposed || {};
 const { randomUUID } = require('crypto');
+const rateLimit = require('express-rate-limit');
 
-
+const authLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 100, // limit each IP to 100 requests per windowMs
+  message: 'Too many requests from this IP, please try again later.',
+  standardHeaders: true,
+  legacyHeaders: false,
+});
 
 module.exports = function(jwtLib){
   /**
@@ -30,7 +37,7 @@ module.exports = function(jwtLib){
       });
   }
 
-  router.post('/authenticate', (req, res) => {  
+  router.post('/authenticate', authLimiter, (req, res) => {  
     console.log("here authenticate")
     let body = req.body 
     let type = body.type

package/src/models/users.js

@@ -6,7 +6,6 @@ const table = `${schema}.users`
 class Users {
 
     static fromAuthentication(user, password){
-        console.log(user, password)
         return new Promise(async (resolve, reject) => {
             try{
                 let userFound = await db(table)