@scriptdb/server 1.0.9 → 1.1.0

package/README.md

@@ -468,7 +468,7 @@ PM2 files are stored in `~/.scriptdb/`:
 
 ## Changelog
 
-### 1.0.9 (2025-01-16)
+### 1.1.0 (2025-01-16)
 
 **Added**
 - Native `scriptdb logs` command to view real-time logs

package/dist/index.js

@@ -2912,6 +2912,7 @@ class Protocal {
   IP_FAIL_WINDOW_MS;
   MAX_LOGIN_ATTEMPTS;
   LOCK_DURATION_MS;
+  ENABLE_IP_LOCKOUT;
   MAX_MESSAGE_BYTES;
   MAX_MESSAGES_PER_CONNECTION;
   CONNECTION_TIMEOUT_MS;
@@ -3025,9 +3026,10 @@ class Protocal {
     });
     this.loginAttemptCache = new Map;
     this.ipAttemptCache = new Map;
-    this.IP_FAIL_WINDOW_MS = options.ipFailWindowMs || 15 * 60 * 1000;
-    this.MAX_LOGIN_ATTEMPTS = options.maxLoginAttempts || 5;
-    this.LOCK_DURATION_MS = options.lockDurationMs || 15 * 60 * 1000;
+    this.IP_FAIL_WINDOW_MS = options.ipFailWindowMs || fileConfig.ipFailWindowMs || 15 * 60 * 1000;
+    this.MAX_LOGIN_ATTEMPTS = options.maxLoginAttempts || fileConfig.maxLoginAttempts || 5;
+    this.LOCK_DURATION_MS = options.lockDurationMs || fileConfig.lockDurationMs || 15 * 60 * 1000;
+    this.ENABLE_IP_LOCKOUT = options.enableIpLockout !== undefined ? options.enableIpLockout : fileConfig.enableIpLockout !== undefined ? fileConfig.enableIpLockout : true;
     this.MAX_MESSAGE_BYTES = options.maxMessageBytes || 64 * 1024;
     this.MAX_MESSAGES_PER_CONNECTION = options.maxMessagesPerConnection || 1000;
     this.CONNECTION_TIMEOUT_MS = typeof options.connectionTimeoutMs === "number" ? options.connectionTimeoutMs : typeof fileConfig.connectionTimeoutMs === "number" ? fileConfig.connectionTimeoutMs : 0;
@@ -3473,32 +3475,34 @@ class Protocal {
                   err: e && e.message || String(e)
                 });
               }
-              const nowTs = Date.now();
-              const ipRec = this.ipAttemptCache.get(remoteIP) || {
-                attempts: 0,
-                lockedUntil: 0,
-                expiresAt: nowTs + this._attemptCacheTTL
-              };
-              ipRec.attempts = (ipRec.attempts || 0) + 1;
-              ipRec.expiresAt = nowTs + this._attemptCacheTTL;
-              if (ipRec.attempts >= this.MAX_LOGIN_ATTEMPTS) {
-                ipRec.lockedUntil = nowTs + this.LOCK_DURATION_MS;
-                this.audit("ip.lockout", {
-                  ip: remoteIP,
-                  attempts: ipRec.attempts
-                });
-              }
-              this.ipAttemptCache.set(remoteIP, ipRec);
-              if (ipRec.lockedUntil && ipRec.lockedUntil > nowTs) {
-                this.audit("ip.locked", { ip: remoteIP });
-                try {
-                  sendWithBackpressure({
-                    command: "login",
-                    message: "LOCKED_IP",
-                    data: null
+              if (this.ENABLE_IP_LOCKOUT) {
+                const nowTs = Date.now();
+                const ipRec = this.ipAttemptCache.get(remoteIP) || {
+                  attempts: 0,
+                  lockedUntil: 0,
+                  expiresAt: nowTs + this._attemptCacheTTL
+                };
+                ipRec.attempts = (ipRec.attempts || 0) + 1;
+                ipRec.expiresAt = nowTs + this._attemptCacheTTL;
+                if (ipRec.attempts >= this.MAX_LOGIN_ATTEMPTS) {
+                  ipRec.lockedUntil = nowTs + this.LOCK_DURATION_MS;
+                  this.audit("ip.lockout", {
+                    ip: remoteIP,
+                    attempts: ipRec.attempts
                   });
-                } catch (e) {}
-                break;
+                }
+                this.ipAttemptCache.set(remoteIP, ipRec);
+                if (ipRec.lockedUntil && ipRec.lockedUntil > nowTs) {
+                  this.audit("ip.locked", { ip: remoteIP });
+                  try {
+                    sendWithBackpressure({
+                      command: "login",
+                      message: "LOCKED_IP",
+                      data: null
+                    });
+                  } catch (e) {}
+                  break;
+                }
               }
               const now = Date.now();
               const record = this.loginAttemptCache.get(username) || {
@@ -4355,7 +4359,7 @@ import { spawn } from "node:child_process";
 import Storage from "@scriptdb/storage";
 var pkgData = `{
   "name": "scriptdb-workspace",
-  "version": "1.0.9",
+  "version": "1.1.0",
   "description": "ScriptDB workspace for custom scripts, services, and databases",
   "private": true,
   "devDependencies": {
@@ -4442,6 +4446,10 @@ var configDefault = {
   GITHUB_URL: "",
   GITHUB_TOKEN: "",
   GITHUB_BRANCH: "main",
+  enableIpLockout: true,
+  ipFailWindowMs: 900000,
+  maxLoginAttempts: 5,
+  lockDurationMs: 900000,
   users: [
     {
       username: "admin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scriptdb/server",
-  "version": "1.0.9",
+  "version": "1.1.0",
   "description": "server module resolver for script database",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -41,10 +41,10 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "@scriptdb/client": "^1.0.9",
-    "@scriptdb/storage": "^1.0.9",
-    "@scriptdb/system-modules": "^1.0.9",
-    "@scriptdb/vm": "^1.0.9",
+    "@scriptdb/client": "^1.1.0",
+    "@scriptdb/storage": "^1.1.0",
+    "@scriptdb/system-modules": "^1.1.0",
+    "@scriptdb/vm": "^1.1.0",
     "@types/ws": "^8.18.1",
     "bcryptjs": "^3.0.3",
     "bottleneck": "^2.19.5",