@shieldwall/express-middleware 1.0.0

package/index.js

@@ -0,0 +1,49 @@
+const fetch = require("node-fetch");
+
+const SHIELDWALL_API = "https://app-69cd5b67c5454eb378342788.base44.app/api/functions/validateRequest";
+
+function shieldwall(options = {}) {
+  const { siteId, apiKey, onBlocked, skipPaths = [] } = options;
+  if (!siteId) throw new Error("[ShieldWall] siteId is required");
+
+  return async function (req, res, next) {
+    try {
+      if (skipPaths.some((p) => req.path.startsWith(p))) return next();
+
+      const ip =
+        req.headers["x-forwarded-for"]?.split(",")[0]?.trim() ||
+        req.socket.remoteAddress || "0.0.0.0";
+
+      const body = {
+        site_id: siteId,
+        ip,
+        user_agent: req.headers["user-agent"] || "",
+        path: req.path,
+        method: req.method,
+      };
+
+      if (apiKey) body.api_key = apiKey;
+
+      const response = await fetch(SHIELDWALL_API, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+      });
+
+      const result = await response.json();
+
+      if (!result.allowed) {
+        if (typeof onBlocked === "function") return onBlocked(req, res, result);
+        return res.status(403).json({ error: "Blocked by ShieldWall", reason: result.reason });
+      }
+
+      req.shieldwall = result;
+      next();
+    } catch (err) {
+      console.warn("[ShieldWall] Failing open:", err.message);
+      next();
+    }
+  };
+}
+
+module.exports = shieldwall;

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@shieldwall/express-middleware",
+  "version": "1.0.0",
+  "description": "ShieldWall security middleware for Express.js",
+  "main": "index.js",
+  "keywords": ["security", "middleware", "express", "waf"],
+  "author": "ShieldWall",
+  "license": "MIT",
+  "dependencies": {
+    "node-fetch": "^2.7.0"
+  }
+}