@medialane/sdk 0.131.0 → 0.132.0

package/dist/index.cjs

@@ -1506,41 +1506,6 @@ function createFailoverFetch(urls, options = {}) {
   return failover;
 }
 
-// src/server/rate-limit.ts
-function createRateLimiter(windowMs, max) {
-  const counts = /* @__PURE__ */ new Map();
-  let nextSweepAt = Date.now() + windowMs;
-  return function checkRateLimit(key) {
-    const now = Date.now();
-    if (now >= nextSweepAt) {
-      for (const [k, entry2] of counts) {
-        if (now >= entry2.resetAt) counts.delete(k);
-      }
-      nextSweepAt = now + windowMs;
-    }
-    const entry = counts.get(key);
-    if (!entry || now >= entry.resetAt) {
-      counts.set(key, { count: 1, resetAt: now + windowMs });
-      return true;
-    }
-    if (entry.count >= max) return false;
-    entry.count += 1;
-    return true;
-  };
-}
-var TRUSTED_APP_IP_HEADER = "x-medialane-client-ip";
-function requestIp(req) {
-  const fromEdge = req.headers.get("x-vercel-forwarded-for")?.split(",")[0]?.trim();
-  if (fromEdge) return fromEdge;
-  const forwarded = req.headers.get("x-forwarded-for");
-  if (forwarded) {
-    const hops = forwarded.split(",").map((hop) => hop.trim()).filter(Boolean);
-    const nearest = hops[hops.length - 1];
-    if (nearest) return nearest;
-  }
-  return "unknown";
-}
-
 // src/server/origin.ts
 function isSameOrigin(req) {
   const origin = req.headers.get("origin");
@@ -1574,9 +1539,6 @@ function createBackendProxyHandler(config) {
     if (!isSameOrigin(req)) {
       return proxyError(-32600, "Cross-origin requests are not allowed", 403);
     }
-    if (!config.checkRateLimit(requestIp(req))) {
-      return proxyError(-32005, "Too many requests", 429);
-    }
     if (!config.apiKey) {
       return proxyError(-32003, "No API key configured \u2014 request not forwarded", 402);
     }
@@ -1834,9 +1796,6 @@ function createImageProxyHandler(config) {
     return res;
   }
   return async function handleImageProxy(req) {
-    if (!config.checkRateLimit(requestIp(req))) {
-      return jsonError("Too many requests", 429);
-    }
     const raw = new URL(req.url).searchParams.get("url");
     if (!raw) return jsonError("Missing url", 400);
     const validated = validateUrl(raw);
@@ -1918,30 +1877,6 @@ async function getBackendSignedUrl(config, kind = "image") {
   if (!res.ok || !data.data) throw new Error(data.error ?? "Failed to create upload URL");
   return data.data.url;
 }
-
-// src/server/trusted-client-ip.ts
-var SPOOFABLE_FORWARDING_HEADERS = [
-  "x-forwarded-for",
-  "x-real-ip",
-  "x-client-ip",
-  "true-client-ip",
-  "cf-connecting-ip",
-  TRUSTED_APP_IP_HEADER
-];
-function isSpoofableForwardingHeader(name) {
-  return SPOOFABLE_FORWARDING_HEADERS.includes(name.toLowerCase());
-}
-function trustedClientIp(req) {
-  const vercel = req.headers.get("x-vercel-forwarded-for")?.split(",")[0]?.trim();
-  if (vercel) return vercel;
-  const forwarded = req.headers.get("x-forwarded-for");
-  if (forwarded) {
-    const hops = forwarded.split(",").map((hop) => hop.trim()).filter(Boolean);
-    const nearest = hops[hops.length - 1];
-    if (nearest) return nearest;
-  }
-  return "unknown";
-}
 var IDENTITY_PREFIX = "siws_";
 var ACCOUNT_SESSION_PREFIX = "account_session_";
 var IDENTITY_DOMAIN = "siws-identity-v1";
@@ -2172,7 +2107,6 @@ exports.STARKNET_POP_COLLECTION_CLASS_HASH = STARKNET_POP_COLLECTION_CLASS_HASH;
 exports.STARKNET_POP_FACTORY_CONTRACT = STARKNET_POP_FACTORY_CONTRACT;
 exports.SUPPORTED_TOKENS = SUPPORTED_TOKENS;
 exports.SUPPORTED_URL_CHAINS = SUPPORTED_URL_CHAINS;
-exports.TRUSTED_APP_IP_HEADER = TRUSTED_APP_IP_HEADER;
 exports.UserFacingError = UserFacingError;
 exports.assetHref = assetHref;
 exports.buildAssetMetadata = buildAssetMetadata;
@@ -2183,7 +2117,6 @@ exports.collectionHref = collectionHref;
 exports.createBackendProxyHandler = createBackendProxyHandler;
 exports.createFailoverFetch = createFailoverFetch;
 exports.createImageProxyHandler = createImageProxyHandler;
-exports.createRateLimiter = createRateLimiter;
 exports.createRpcProxyHandler = createRpcProxyHandler;
 exports.encodeU256 = encodeU256;
 exports.formatAmount = formatAmount;
@@ -2202,7 +2135,6 @@ exports.isPrivateHost = isPrivateHost;
 exports.isPrivateOrInsecureUrl = isPrivateOrInsecureUrl;
 exports.isSameOrigin = isSameOrigin;
 exports.isServiceId = isServiceId;
-exports.isSpoofableForwardingHeader = isSpoofableForwardingHeader;
 exports.isTransientRpcError = isTransientRpcError;
 exports.isValidIpfsCidPath = isValidIpfsCidPath;
 exports.issueAccountSessionToken = issueAccountSessionToken;
@@ -2212,7 +2144,6 @@ exports.normalizeAddress = normalizeAddress;
 exports.normalizeHash = normalizeHash;
 exports.parseAmount = parseAmount;
 exports.readBodyWithCap = readBodyWithCap;
-exports.requestIp = requestIp;
 exports.resolveAppFeeConfig = resolveAppFeeConfig;
 exports.resolveConfig = resolveConfig;
 exports.resolveFeeConfig = resolveFeeConfig;
@@ -2220,7 +2151,6 @@ exports.resolveRemixPolicy = resolveRemixPolicy;
 exports.resolveSafeImageContentType = resolveSafeImageContentType;
 exports.shortenAddress = shortenAddress;
 exports.stringifyBigInts = stringifyBigInts;
-exports.trustedClientIp = trustedClientIp;
 exports.u256ToBigInt = u256ToBigInt;
 exports.uploadDirectoryToBackend = uploadDirectoryToBackend;
 exports.uploadFileToBackend = uploadFileToBackend;