@ruvyxa/adapter-bun 1.1.3 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +18 -0
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -56,3 +56,21 @@ bun .ruvyxa/deploy/bun/server/index.mjs
56
56
  ```
57
57
 
58
58
  The generated server streams SSR/API response bodies and honors `PORT` and `HOST`.
59
+
60
+ ## Client identity behind a proxy
61
+
62
+ The generated server believes `X-Forwarded-For` and `X-Real-IP` only from a connection whose peer is
63
+ loopback or listed in `security.trustedProxyIps`. From any other peer both headers are dropped
64
+ before the request is routed, because nothing in front of the server overwrote them and one caller
65
+ rotating a value would otherwise collect a fresh bucket per request from the built-in `rate`
66
+ middleware, the server-action rate limiter, and the action replay quota.
67
+
68
+ Behind a reverse proxy that is not on the same host — nginx or Traefik in another container, an
69
+ ingress controller, a service mesh — list its address or range, or every visitor is counted as one
70
+ client:
71
+
72
+ ```ts
73
+ export default config({
74
+ security: { trustedProxyIps: ['10.0.0.0/8'] },
75
+ })
76
+ ```
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ruvyxa/adapter-bun",
3
- "version": "1.1.3",
3
+ "version": "1.1.5",
4
4
  "description": "Run Ruvyxa on Bun-flavored hosts with typed adapter metadata for entrypoints and assets.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",
@@ -57,7 +57,7 @@
57
57
  }
58
58
  },
59
59
  "dependencies": {
60
- "@ruvyxa/core": "^1.1.3"
60
+ "@ruvyxa/core": "^1.1.5"
61
61
  },
62
62
  "scripts": {
63
63
  "build": "tsc -p tsconfig.json",