@ruvyxa/adapter-deno 1.1.3 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +18 -0
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -34,3 +34,21 @@ Build with `ruvyxa build`, copy `.ruvyxa/deploy/deno/`, then run:
34
34
  ```bash
35
35
  deno run -A --no-prompt server/index.mjs
36
36
  ```
37
+
38
+ ## Client identity behind a proxy
39
+
40
+ The generated server believes `X-Forwarded-For` and `X-Real-IP` only from a connection whose peer is
41
+ loopback or listed in `security.trustedProxyIps`. From any other peer both headers are dropped
42
+ before the request is routed, because nothing in front of the server overwrote them and one caller
43
+ rotating a value would otherwise collect a fresh bucket per request from the built-in `rate`
44
+ middleware, the server-action rate limiter, and the action replay quota.
45
+
46
+ Behind a reverse proxy that is not on the same host — nginx or Traefik in another container, an
47
+ ingress controller, a service mesh — list its address or range, or every visitor is counted as one
48
+ client:
49
+
50
+ ```ts
51
+ export default config({
52
+ security: { trustedProxyIps: ['10.0.0.0/8'] },
53
+ })
54
+ ```
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ruvyxa/adapter-deno",
3
- "version": "1.1.3",
3
+ "version": "1.1.5",
4
4
  "description": "Self-host Ruvyxa applications on the Deno runtime.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",
@@ -57,7 +57,7 @@
57
57
  }
58
58
  },
59
59
  "dependencies": {
60
- "@ruvyxa/core": "^1.1.3"
60
+ "@ruvyxa/core": "^1.1.5"
61
61
  },
62
62
  "scripts": {
63
63
  "build": "tsc -p tsconfig.json",