@medialane/sdk 0.85.11 → 0.85.12

package/dist/index.cjs

@@ -1281,6 +1281,32 @@ function createFailoverFetch(urls, options = {}) {
   return failover;
 }
 
+// src/server/rate-limit.ts
+function createRateLimiter(windowMs, max) {
+  const counts = /* @__PURE__ */ new Map();
+  let nextSweepAt = Date.now() + windowMs;
+  return function checkRateLimit(key) {
+    const now = Date.now();
+    if (now >= nextSweepAt) {
+      for (const [k, entry2] of counts) {
+        if (now >= entry2.resetAt) counts.delete(k);
+      }
+      nextSweepAt = now + windowMs;
+    }
+    const entry = counts.get(key);
+    if (!entry || now >= entry.resetAt) {
+      counts.set(key, { count: 1, resetAt: now + windowMs });
+      return true;
+    }
+    if (entry.count >= max) return false;
+    entry.count += 1;
+    return true;
+  };
+}
+function requestIp(req) {
+  return req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? "unknown";
+}
+
 // src/server/rpc-proxy.ts
 var DEFAULT_STARKNET_RPC_METHODS = [
   "starknet_call",
@@ -1359,8 +1385,7 @@ function createRpcProxyHandler(config) {
     if (!isSameOrigin(req)) {
       return rpcError(-32600, "Cross-origin requests are not allowed", 403);
     }
-    const ip = req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? "unknown";
-    if (!config.checkRateLimit(ip)) {
+    if (!config.checkRateLimit(requestIp(req))) {
       return rpcError(-32005, "Too many requests", 429);
     }
     let body;
@@ -1558,6 +1583,7 @@ exports.chainSlug = chainSlug;
 exports.coinHref = coinHref;
 exports.collectionHref = collectionHref;
 exports.createFailoverFetch = createFailoverFetch;
+exports.createRateLimiter = createRateLimiter;
 exports.createRpcProxyHandler = createRpcProxyHandler;
 exports.encodeU256 = encodeU256;
 exports.formatAmount = formatAmount;
@@ -1576,6 +1602,7 @@ exports.listServices = listServices;
 exports.normalizeAddress = normalizeAddress;
 exports.normalizeHash = normalizeHash;
 exports.parseAmount = parseAmount;
+exports.requestIp = requestIp;
 exports.resolveConfig = resolveConfig;
 exports.resolveFeeConfig = resolveFeeConfig;
 exports.resolveSafeImageContentType = resolveSafeImageContentType;