@tozielinski/next-upstash-nonce 1.4.1 → 1.4.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.4.2](https://github.com/tozielinski/next-upstash-nonce/compare/v1.4.1...v1.4.2) (2025-12-27)
+
+
+### Bug Fixes
+
+* add rateLimiter for server action, minor bugfixes ([967269d](https://github.com/tozielinski/next-upstash-nonce/commit/967269d87c12119765e05d150aa9458d730dc53c))
+
 ## [1.4.1](https://github.com/tozielinski/next-upstash-nonce/compare/v1.4.0...v1.4.1) (2025-12-17)
 
 

package/dist/index.d.ts

@@ -22,14 +22,14 @@ export type RateLimitResult = {
     ip: string;
     requests: number;
     reason: `too-many-requests: ${number}`;
-    response: Response;
+    response?: Response;
 };
 export declare class NonceManager {
     private redis;
-    private ttlNonce;
-    private prefix;
-    private ttlRateLimit;
-    private countRateLimit;
+    private readonly ttlNonce;
+    private readonly prefix;
+    private readonly ttlRateLimit;
+    private readonly countRateLimit;
     constructor(redis: Redis, opts?: NonceOptions);
     /**
      * makes option parameters available in the server in environment files
@@ -39,6 +39,10 @@ export declare class NonceManager {
      * extracts client IP from request headers
      */
     private getClientIp;
+    /**
+     * extracts client IP from headers for server actions
+     */
+    getClientIpFromHeaders(headers: Headers): Promise<string>;
     /**
      * generates a new, secure nonce,
      * inserts it into Redis with a TTL,
@@ -56,23 +60,24 @@ export declare class NonceManager {
      */
     verifyAndDelete(nonce: string): Promise<boolean>;
     /**
-     * verifies a nonce from the Header of a request
+     * verifies nonce from the Header of a request
      * returns a NonceCheckResult if the nonce exists and has not expired.
      */
     verifyNonceFromRequest(req: Request): Promise<NonceCheckResult>;
     /**
-     * verifies a nonce from the Header of a request and deletes it from Redis
+     * verifies nonce from the Header of a request and deletes it from Redis
      * returns a NonceCheckResult if the nonce exists and has not expired.
      */
     verifyAndDeleteNonceFromRequest(req: Request): Promise<NonceCheckResult>;
     /**
-     * Optional: delete a nonce from Redis manually
+     * Optional: delete nonce from Redis manually
      */
     delete(nonce: string): Promise<void>;
     /**
      * rate limits requests from the same IP address
      */
     rateLimiter(req: Request): Promise<RateLimitResult>;
+    rateLimiterByIp(ip: string): Promise<RateLimitResult>;
 }
 export default NonceManager;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAGvC,MAAM,MAAM,YAAY,GAAG;IAEvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAK;IAC7B,KAAK,EAAE,IAAI,CAAC;IACZ,KAAK,EAAE,MAAM,CAAA;CAChB,GAAG;IACA,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IAChD,QAAQ,EAAE,QAAQ,CAAA;CACrB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAK;IAC5B,KAAK,EAAE,IAAI,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG;IACA,KAAK,EAAE,KAAK,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,sBAAsB,MAAM,EAAE,CAAC;IACvC,QAAQ,EAAE,QAAQ,CAAC;CACtB,CAAC;AAEF,qBAAa,YAAY;IACrB,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAAS;gBAGnB,KAAK,EAAE,KAAK,EAAE,IAAI,GAAE,YAAiB;IAQjD;;OAEG;IACH,OAAO,CAAC,WAAW;IAWnB;;OAEG;IACH,OAAO,CAAC,WAAW;IAanB;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAU/B;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa7C;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAetD;;;OAGG;IACG,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoCrE;;;OAGG;IACG,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoC9E;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1C;;OAEG;IACG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC;CAgB5D;AAED,eAAe,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,KAAK,EAAC,MAAM,gBAAgB,CAAC;AAGrC,MAAM,MAAM,YAAY,GAAG;IAEvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAK;IAC7B,KAAK,EAAE,IAAI,CAAC;IACZ,KAAK,EAAE,MAAM,CAAA;CAChB,GAAG;IACA,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IAChD,QAAQ,EAAE,QAAQ,CAAA;CACrB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAK;IAC5B,KAAK,EAAE,IAAI,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG;IACA,KAAK,EAAE,KAAK,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,sBAAsB,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACvB,CAAC;AAEF,qBAAa,YAAY;IACrB,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAG5B,KAAK,EAAE,KAAK,EAAE,IAAI,GAAE,YAAiB;IAQjD;;OAEG;IACH,OAAO,CAAC,WAAW;IAWnB;;OAEG;IACH,OAAO,CAAC,WAAW;IAYnB;;OAEG;IACG,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAc/D;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAU/B;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa7C;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAetD;;;OAGG;IACG,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoCrE;;;OAGG;IACG,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoC9E;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1C;;OAEG;IACG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC;IA0BnD,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CAsB9D;AAED,eAAe,YAAY,CAAC"}

package/dist/index.js

@@ -41,6 +41,20 @@ class NonceManager {
         }
         return "unknown";
     }
+    /**
+     * extracts client IP from headers for server actions
+     */
+    async getClientIpFromHeaders(headers) {
+        const forwardedFor = headers.get("x-forwarded-for");
+        if (forwardedFor) {
+            return forwardedFor.split(",")[0].trim();
+        }
+        const realIp = headers.get("x-real-ip");
+        if (realIp) {
+            return realIp;
+        }
+        return "unknown";
+    }
     /**
      * generates a new, secure nonce,
      * inserts it into Redis with a TTL,
@@ -89,7 +103,7 @@ class NonceManager {
         }
     }
     /**
-     * verifies a nonce from the Header of a request
+     * verifies nonce from the Header of a request
      * returns a NonceCheckResult if the nonce exists and has not expired.
      */
     async verifyNonceFromRequest(req) {
@@ -117,7 +131,7 @@ class NonceManager {
         };
     }
     /**
-     * verifies a nonce from the Header of a request and deletes it from Redis
+     * verifies nonce from the Header of a request and deletes it from Redis
      * returns a NonceCheckResult if the nonce exists and has not expired.
      */
     async verifyAndDeleteNonceFromRequest(req) {
@@ -145,7 +159,7 @@ class NonceManager {
         };
     }
     /**
-     * Optional: delete a nonce from Redis manually
+     * Optional: delete nonce from Redis manually
      */
     async delete(nonce) {
         const key = this.prefix + nonce;
@@ -163,7 +177,29 @@ class NonceManager {
         }
         if (requests > this.getEnvValue("RATE_LIMIT_COUNT", this.countRateLimit)) {
             const response = Response.json({ error: "Too many requests" }, { status: 429 });
-            return { valid: false, ip, requests, reason: `too-many-requests: ${requests}`, response: response };
+            return {
+                valid: false,
+                ip,
+                requests,
+                reason: `too-many-requests: ${requests}`,
+                response: response
+            };
+        }
+        return { valid: true, ip, requests };
+    }
+    async rateLimiterByIp(ip) {
+        const key = `rate:${ip}`;
+        const requests = (await this.redis.incr(key)) ?? 0;
+        if (requests === 1) {
+            await this.redis.expire(key, this.getEnvValue("RATE_LIMIT_TTL_SECONDS", this.ttlRateLimit));
+        }
+        if (requests > this.getEnvValue("RATE_LIMIT_COUNT", this.countRateLimit)) {
+            return {
+                valid: false,
+                ip,
+                requests,
+                reason: `too-many-requests: ${requests}`,
+            };
         }
         return { valid: true, ip, requests };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tozielinski/next-upstash-nonce",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Create, store, verify and delete nonces in Redis by Upstash for Next.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",