@jaredwray/mockhttp 1.0.0 → 1.1.0

package/README.md

@@ -60,7 +60,7 @@ then run `mockhttp` in your code.
 import { mockhttp } from '@jaredwray/mockhttp';
 await mockhttp.start(); // start the server
 const response = await fetch('http://localhost:3000/get');
-console.log(reaponse);
+console.log(response);
 await mockhttp.stop(); // stop the server
 ```
 
@@ -247,6 +247,164 @@ const tap = mock.taps.inject(
 );
 ```
 
+# Rate Limiting
+
+MockHttp supports rate limiting using [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit). Rate limiting is **enabled by default** at **1000 requests per minute** with **localhost (127.0.0.1 and ::1) excluded** from rate limiting.
+
+## Default Rate Limiting
+
+By default, MockHttp applies the following rate limit:
+- **1000 requests per minute** per IP address
+- **Localhost is excluded** - requests from 127.0.0.1 and ::1 bypass rate limiting (ideal for local development and testing)
+
+```javascript
+import { MockHttp } from '@jaredwray/mockhttp';
+
+const mock = new MockHttp();
+await mock.start();
+// Rate limiting is active (1000 req/min) except for localhost
+```
+
+## Customizing Rate Limiting
+
+To customize rate limiting, pass a `rateLimit` configuration object when creating your MockHttp instance:
+
+```javascript
+import { MockHttp } from '@jaredwray/mockhttp';
+
+const mock = new MockHttp({
+  rateLimit: {
+    max: 100,              // Maximum 100 requests
+    timeWindow: '1 minute' // Per 1 minute window
+  }
+});
+
+await mock.start();
+```
+
+## Common Configuration Options
+
+The `rateLimit` option accepts all [@fastify/rate-limit options](https://github.com/fastify/fastify-rate-limit#options):
+
+### Basic Rate Limiting
+
+```javascript
+// Limit to 50 requests per minute
+const mock = new MockHttp({
+  rateLimit: {
+    max: 50,
+    timeWindow: '1 minute'
+  }
+});
+```
+
+### Stricter Limits with Custom Error Response
+
+```javascript
+const mock = new MockHttp({
+  rateLimit: {
+    max: 30,
+    timeWindow: 60000, // 1 minute in milliseconds
+    errorResponseBuilder: (req, context) => ({
+      statusCode: 429,
+      error: 'Too Many Requests',
+      message: `Rate limit exceeded. Try again in ${context.after}`
+    })
+  }
+});
+```
+
+### Allow List (Exclude Specific IPs)
+
+```javascript
+const mock = new MockHttp({
+  rateLimit: {
+    max: 100,
+    timeWindow: '1 minute',
+    allowList: ['127.0.0.1', '192.168.1.100'] // These IPs bypass rate limiting
+  }
+});
+```
+
+### Custom Key Generator (Rate Limit by Header)
+
+```javascript
+const mock = new MockHttp({
+  rateLimit: {
+    max: 100,
+    timeWindow: '1 minute',
+    keyGenerator: (request) => {
+      // Rate limit by API key instead of IP
+      return request.headers['x-api-key'] || request.ip;
+    }
+  }
+});
+```
+
+### Advanced Configuration
+
+```javascript
+const mock = new MockHttp({
+  rateLimit: {
+    global: true,                    // Apply to all routes
+    max: 100,                        // Max requests
+    timeWindow: '1 minute',          // Time window
+    cache: 10000,                    // Cache size for tracking clients
+    skipOnError: false,              // Don't skip on storage errors
+    ban: 10,                         // Ban after 10 rate limit violations
+    continueExceeding: false,        // Don't reset window on each request
+    enableDraftSpec: true,           // Use IETF draft spec headers
+    addHeaders: {                    // Customize rate limit headers
+      'x-ratelimit-limit': true,
+      'x-ratelimit-remaining': true,
+      'x-ratelimit-reset': true
+    }
+  }
+});
+```
+
+## Disabling Rate Limiting
+
+To disable rate limiting completely, set the `rateLimit` option to `false`:
+
+```javascript
+const mock = new MockHttp({
+  rateLimit: false // Completely disable rate limiting
+});
+
+await mock.start();
+// No rate limiting is applied to any requests
+```
+
+**Note:** To change rate limiting settings after the server has started, you must restart the server:
+
+```javascript
+const mock = new MockHttp();
+await mock.start(); // Starts with default rate limiting
+
+// To change or disable rate limiting:
+await mock.close();
+mock.rateLimit = undefined; // or set new options
+await mock.start(); // Restarts with new settings
+```
+
+## Available Options
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `max` | number \| function | `1000` | Maximum requests per time window |
+| `timeWindow` | number \| string | `60000` | Duration of rate limit window (milliseconds or string like '1 minute') |
+| `cache` | number | `5000` | LRU cache size for tracking clients |
+| `allowList` | array \| function | `[]` | IPs or function to exclude from rate limiting |
+| `keyGenerator` | function | IP-based | Function to generate unique client identifier |
+| `errorResponseBuilder` | function | Default 429 | Custom error response function |
+| `skipOnError` | boolean | `false` | Skip rate limiting if storage errors occur |
+| `ban` | number | `-1` | Ban client after N violations (disabled by default) |
+| `continueExceeding` | boolean | `false` | Renew time window on each request while limited |
+| `enableDraftSpec` | boolean | `false` | Use IETF draft specification headers |
+
+For the complete list of options, see the [@fastify/rate-limit documentation](https://github.com/fastify/fastify-rate-limit#options).
+
 # API Reference
 
 ## MockHttp Class
@@ -264,7 +422,18 @@ new MockHttp(options?)
   - `autoDetectPort?`: boolean - Auto-detect next available port if in use (default: true)
   - `helmet?`: boolean - Use Helmet for security headers (default: true)
   - `apiDocs?`: boolean - Enable Swagger API documentation (default: true)
+  - `rateLimit?`: RateLimitPluginOptions - Configure rate limiting (default: 1000 req/min, localhost excluded)
   - `httpBin?`: HttpBinOptions - Configure which httpbin routes to enable
+    - `httpMethods?`: boolean - Enable HTTP method routes (default: true)
+    - `redirects?`: boolean - Enable redirect routes (default: true)
+    - `requestInspection?`: boolean - Enable request inspection routes (default: true)
+    - `responseInspection?`: boolean - Enable response inspection routes (default: true)
+    - `statusCodes?`: boolean - Enable status code routes (default: true)
+    - `responseFormats?`: boolean - Enable response format routes (default: true)
+    - `cookies?`: boolean - Enable cookie routes (default: true)
+    - `anything?`: boolean - Enable anything routes (default: true)
+    - `auth?`: boolean - Enable authentication routes (default: true)
+    - `images?`: boolean - Enable image routes (default: true)
   - `hookOptions?`: HookifiedOptions - Hookified options
 
 ### Properties
@@ -274,6 +443,7 @@ new MockHttp(options?)
 - `autoDetectPort`: boolean - Get/set auto-detect port behavior
 - `helmet`: boolean - Get/set Helmet security headers
 - `apiDocs`: boolean - Get/set API documentation
+- `rateLimit`: RateLimitPluginOptions | undefined - Get/set rate limiting options
 - `httpBin`: HttpBinOptions - Get/set httpbin route options
 - `server`: FastifyInstance - Get/set the Fastify server instance
 - `taps`: TapManager - Get/set the TapManager instance
@@ -334,6 +504,10 @@ Register "anything" catch-all routes.
 
 Register authentication routes (basic, bearer, digest, hidden-basic).
 
+#### `async registerImageRoutes(fastifyInstance?)`
+
+Register image routes (jpeg, png, svg, webp) with content negotiation support.
+
 ## Taps (Response Injection)
 
 Access the TapManager via `mockHttp.taps` to inject custom responses.

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+import { RateLimitPluginOptions } from '@fastify/rate-limit';
 import { FastifyRequest, FastifyInstance } from 'fastify';
 import { Hookified, HookifiedOptions } from 'hookified';
 
@@ -130,6 +131,7 @@ type HttpBinOptions = {
     cookies?: boolean;
     anything?: boolean;
     auth?: boolean;
+    images?: boolean;
 };
 type MockHttpOptions = {
     /**
@@ -157,6 +159,11 @@ type MockHttpOptions = {
      * Whether to use Swagger UI. Defaults to true.
      */
     httpBin?: HttpBinOptions;
+    /**
+     * Rate limiting options. Defaults to 1000 requests per minute (localhost excluded).
+     * Set to undefined to disable rate limiting, or provide custom options to configure.
+     */
+    rateLimit?: boolean | RateLimitPluginOptions;
     /**
      * Hookified options.
      */
@@ -169,6 +176,7 @@ declare class MockHttp extends Hookified {
     private _helmet;
     private _apiDocs;
     private _httpBin;
+    private _rateLimit?;
     private _server;
     private _taps;
     constructor(options?: MockHttpOptions);
@@ -230,6 +238,20 @@ declare class MockHttp extends Hookified {
      * HTTP Bin options. Defaults to all enabled.
      */
     set httpBin(httpBinary: HttpBinOptions);
+    /**
+     * Rate limiting options. Defaults to 1000 requests per minute (localhost excluded).
+     * Set to undefined to disable rate limiting, or provide custom options to configure.
+     * @default { max: 1000, timeWindow: "1 minute", allowList: ["127.0.0.1", "::1"] }
+     */
+    get rateLimit(): RateLimitPluginOptions | undefined;
+    /**
+     * Rate limiting options. Defaults to 1000 requests per minute (localhost excluded).
+     * Set to undefined to disable rate limiting, or provide custom options to configure.
+     *
+     * Note: Changing this property requires restarting the server (close() then start()) for changes to take effect.
+     * @default { max: 1000, timeWindow: "1 minute", allowList: ["127.0.0.1", "::1"] }
+     */
+    set rateLimit(rateLimit: RateLimitPluginOptions | undefined);
     /**
      * The Fastify server instance.
      */
@@ -305,6 +327,11 @@ declare class MockHttp extends Hookified {
      * @param fastifyInstance - the server instance to register the routes on.
      */
     registerAuthRoutes(fastifyInstance?: FastifyInstance): Promise<void>;
+    /**
+     * Register the image routes.
+     * @param fastifyInstance - the server instance to register the routes on.
+     */
+    registerImageRoutes(fastifyInstance?: FastifyInstance): Promise<void>;
 }
 
 declare const start: () => Promise<MockHttp>;