@universis/janitor 1.0.0

package/.gitlab-ci.yml

@@ -0,0 +1,31 @@
+image: node:14
+
+stages:
+  - releases
+  - deploy
+
+npm_publish:
+  stage: releases
+  only:
+    - /^(\d+\.)(\d+\.)(\d+)$/
+  except:
+    - branches
+  script:
+    - npm i
+    - npm run build
+    - echo //registry.npmjs.org/:_authToken=$NPM_TOKEN > .npmrc
+    - npm publish --access=public
+    - rm .npmrc
+
+pages:
+  stage: deploy
+  script:
+    - mkdir .public
+    - cp -r * .public
+    - mv .public public
+  artifacts:
+    paths:
+      - public
+  rules:
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+

package/LICENSE

@@ -0,0 +1,163 @@
+GNU Lesser General Public License
+=================================
+
+_Version 3, 29 June 2007_  
+_Copyright © 2007 Free Software Foundation, Inc. &lt;<http://fsf.org/>&gt;_
+
+Everyone is permitted to copy and distribute verbatim copies
+of this license document, but changing it is not allowed.
+
+
+This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+### 0. Additional Definitions
+
+As used herein, “this License” refers to version 3 of the GNU Lesser
+General Public License, and the “GNU GPL” refers to version 3 of the GNU
+General Public License.
+
+“The Library” refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+An “Application” is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+A “Combined Work” is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the “Linked
+Version”.
+
+The “Minimal Corresponding Source” for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+The “Corresponding Application Code” for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+### 1. Exception to Section 3 of the GNU GPL
+
+You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+### 2. Conveying Modified Versions
+
+If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+* **a)** under this License, provided that you make a good faith effort to
+ensure that, in the event an Application does not supply the
+function or data, the facility still operates, and performs
+whatever part of its purpose remains meaningful, or
+
+* **b)** under the GNU GPL, with none of the additional permissions of
+this License applicable to that copy.
+
+### 3. Object Code Incorporating Material from Library Header Files
+
+The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+* **a)** Give prominent notice with each copy of the object code that the
+Library is used in it and that the Library and its use are
+covered by this License.
+* **b)** Accompany the object code with a copy of the GNU GPL and this license
+document.
+
+### 4. Combined Works
+
+You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+* **a)** Give prominent notice with each copy of the Combined Work that
+the Library is used in it and that the Library and its use are
+covered by this License.
+
+* **b)** Accompany the Combined Work with a copy of the GNU GPL and this license
+document.
+
+* **c)** For a Combined Work that displays copyright notices during
+execution, include the copyright notice for the Library among
+these notices, as well as a reference directing the user to the
+copies of the GNU GPL and this license document.
+
+* **d)** Do one of the following:
+    - **0)** Convey the Minimal Corresponding Source under the terms of this
+License, and the Corresponding Application Code in a form
+suitable for, and under terms that permit, the user to
+recombine or relink the Application with a modified version of
+the Linked Version to produce a modified Combined Work, in the
+manner specified by section 6 of the GNU GPL for conveying
+Corresponding Source.
+    - **1)** Use a suitable shared library mechanism for linking with the
+Library.  A suitable mechanism is one that **(a)** uses at run time
+a copy of the Library already present on the user's computer
+system, and **(b)** will operate properly with a modified version
+of the Library that is interface-compatible with the Linked
+Version.
+
+* **e)** Provide Installation Information, but only if you would otherwise
+be required to provide such information under section 6 of the
+GNU GPL, and only to the extent that such information is
+necessary to install and execute a modified version of the
+Combined Work produced by recombining or relinking the
+Application with a modified version of the Linked Version. (If
+you use option **4d0**, the Installation Information must accompany
+the Minimal Corresponding Source and Corresponding Application
+Code. If you use option **4d1**, you must provide the Installation
+Information in the manner specified by section 6 of the GNU GPL
+for conveying Corresponding Source.)
+
+### 5. Combined Libraries
+
+You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+* **a)** Accompany the combined library with a copy of the same work based
+on the Library, uncombined with any other library facilities,
+conveyed under the terms of this License.
+* **b)** Give prominent notice with the combined library that part of it
+is a work based on the Library, and explaining where to find the
+accompanying uncombined form of the same work.
+
+### 6. Revised Versions of the GNU Lesser General Public License
+
+The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License “or any later version”
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

package/README.md

@@ -0,0 +1,113 @@
+# @universis/janitor
+
+![@universis/janitor logo](./public/janitor-logo-text.png)
+
+Universis api plugin for rate limiting requests or slowing down service responses.
+
+## Usage
+
+    npm i @universis/janitor
+
+## RateLimitService
+
+`RateLimitService` is a configurable extension of [express-rate-limit](https://www.npmjs.com/package/express-rate-limit) for limiting service requests.
+
+Register service under application services:
+
+```json
+{
+    "services": [
+        {
+            "serviceType": "@universis/janitor#RateLimitService"
+        }
+    ]
+}
+```
+and start configuring rate limited endpoints under `settings/universis/rateLimit`:
+
+```json
+    {
+        "settings": {
+            "universis": {
+                "rateLimit": {
+                    "profiles": [
+                        [
+                            "userRateLimitProfile",
+                            {
+                                "windowMs": 300000,
+                                "limit": 50,
+                                "legacyHeaders": true
+                            }
+                        ]
+                    ],
+                    "paths": [
+                            [
+                                "/users/me",
+                                {
+                                    "profile": "userRateLimitProfile"
+                                }
+                            ]
+                        ]
+                }
+            }
+        }
+    }
+```
+
+`RateLimitService` service configuration consists of a collection of rate limit `profiles` that are going to used as options during request validation and a collection of `paths` for defining rate limited route paths.
+
+Read more about rate limit configuration at [express-rate-limit documentation](https://github.com/express-rate-limit/express-rate-limit#configuration)
+
+
+## SpeedLimitService
+
+`SpeedLimitService` is a configurable extension of [express-slow-down](https://www.npmjs.com/package/express-slow-down) for slowing down service responses.
+
+Register service under application services:
+
+```json
+{
+    "services": [
+        {
+            "serviceType": "@universis/janitor#SpeedLimitService"
+        }
+    ]
+}
+```
+and start configuring speed limited endpoints under `settings/universis/speedLimit`:
+
+```json
+    {
+        "settings": {
+            "universis": {
+                "speedLimit": {
+                    "profiles": [
+                        [
+                            "userSpeedLimitProfile",
+                            {
+                                "windowMs": 300000,
+                                "delayAfter": 5,
+                                "delayMs": 500,
+                                "maxDelayMs": 20000,
+                                "headers": true
+                            }
+                        ]
+                    ],
+                    "paths": [
+                            [
+                                "/users/me",
+                                {
+                                    "profile": "userSpeedLimitProfile"
+                                }
+                            ]
+                        ]
+                }
+            }
+        }
+    }
+```
+
+`SpeedLimitService` configuration consists of a collection of speed limit `profiles` that are going to used as options during request validation and a collection of `paths` for defining speed limited route paths.
+
+Read more about speed limit configuration at [express-slow-down documentation](https://github.com/express-rate-limit/express-slow-down#configuration)
+

package/dist/RateLimitService.js

@@ -0,0 +1,71 @@
+"use strict";Object.defineProperty(exports, "__esModule", { value: true });exports.RateLimitService = void 0;var _common = require("@themost/common");
+var _expressRateLimit = require("express-rate-limit");
+var _express = _interopRequireDefault(require("express"));
+var _path = _interopRequireDefault(require("path"));function _interopRequireDefault(obj) {return obj && obj.__esModule ? obj : { default: obj };}
+
+class RateLimitService extends _common.ApplicationService {
+  /**
+   * @param {import('@themost/express').ExpressDataApplication} app 
+   */
+  constructor(app) {
+    super(app);
+    app.serviceRouter.subscribe((serviceRouter) => {
+      if (serviceRouter == null) {
+        return;
+      }
+      try {
+        const addRouter = _express.default.Router();
+        let serviceConfiguration = app.getConfiguration().getSourceAt('settings/universis/janitor/rateLimit') || {
+          profiles: [],
+          paths: []
+        };
+        if (serviceConfiguration.extends) {
+          // get additional configuration
+          const configurationPath = app.getConfiguration().getConfigurationPath();
+          const extendsPath = _path.default.resolve(configurationPath, serviceConfiguration.extends);
+          _common.TraceUtils.log(`@universis/janitor#RateLimitService will try to extend service configuration from ${extendsPath}`);
+          serviceConfiguration = require(extendsPath);
+        }
+        const pathsArray = serviceConfiguration.paths || [];
+        const profilesArray = serviceConfiguration.profiles || [];
+        // create maps
+        const paths = new Map(pathsArray);
+        const profiles = new Map(profilesArray);
+        if (paths.size === 0) {
+          _common.TraceUtils.warn('@universis/janitor#RateLimitService is being started but the collection of paths is empty.');
+        }
+        paths.forEach((value, path) => {
+          let profile;
+          // get profile
+          if (value.profile) {
+            profile = profiles.get(value.profile);
+          } else {
+            // or options defined inline
+            profile = value;
+          }
+          if (profile != null) {
+            const rateLimitOptions = Object.assign({
+              windowMs: 5 * 60 * 1000, // 5 minutes
+              limit: 50, // 50 requests
+              legacyHeaders: true // send headers
+            }, profile, {
+              keyGenerator: (req) => {
+                return req.headers['x-real-ip'] || req.headers['x-forwarded-for'] || (req.connection ? req.connection.remoteAddress : req.socket.remoteAddress);
+              }
+            });
+            addRouter.use(path, (0, _expressRateLimit.rateLimit)(rateLimitOptions));
+          }
+        });
+        if (addRouter.stack.length) {
+          serviceRouter.stack.unshift.apply(serviceRouter.stack, addRouter.stack);
+        }
+      } catch (err) {
+        _common.TraceUtils.error('An error occurred while validating rate limit configuration.');
+        _common.TraceUtils.error(err);
+        _common.TraceUtils.warn('Rate limit service is inactive due to an error occured while loading configuration.');
+      }
+    });
+  }
+
+}exports.RateLimitService = RateLimitService;
+//# sourceMappingURL=RateLimitService.js.map

package/dist/RateLimitService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitService.js","names":["_common","require","_expressRateLimit","_express","_interopRequireDefault","_path","obj","__esModule","default","RateLimitService","ApplicationService","constructor","app","serviceRouter","subscribe","addRouter","express","Router","serviceConfiguration","getConfiguration","getSourceAt","profiles","paths","extends","configurationPath","getConfigurationPath","extendsPath","path","resolve","TraceUtils","log","pathsArray","profilesArray","Map","size","warn","forEach","value","profile","get","rateLimitOptions","Object","assign","windowMs","limit","legacyHeaders","keyGenerator","req","headers","connection","remoteAddress","socket","use","rateLimit","stack","length","unshift","apply","err","error","exports"],"sources":["../src/RateLimitService.js"],"sourcesContent":["import { ApplicationService, TraceUtils } from '@themost/common';\nimport { rateLimit } from 'express-rate-limit';\nimport express from 'express';\nimport path from 'path';\n\nexport class RateLimitService extends ApplicationService {\n    /**\n     * @param {import('@themost/express').ExpressDataApplication} app \n     */\n    constructor(app) {\n        super(app);\n        app.serviceRouter.subscribe(serviceRouter => {\n            if (serviceRouter == null) {\n                return;\n            }\n            try {\n                const addRouter = express.Router();\n                let serviceConfiguration = app.getConfiguration().getSourceAt('settings/universis/janitor/rateLimit') || {\n                    profiles: [],\n                    paths: []\n                };\n                if (serviceConfiguration.extends) {\n                    // get additional configuration\n                    const configurationPath = app.getConfiguration().getConfigurationPath();\n                    const extendsPath = path.resolve(configurationPath, serviceConfiguration.extends);\n                    TraceUtils.log(`@universis/janitor#RateLimitService will try to extend service configuration from ${extendsPath}`);\n                    serviceConfiguration = require(extendsPath);\n                }\n                const pathsArray = serviceConfiguration.paths || [];\n                const profilesArray = serviceConfiguration.profiles || [];\n                // create maps\n                const paths = new Map(pathsArray);\n                const profiles = new Map(profilesArray);\n                if (paths.size === 0) {\n                    TraceUtils.warn('@universis/janitor#RateLimitService is being started but the collection of paths is empty.');\n                }\n                paths.forEach((value, path) => {\n                    let profile;\n                    // get profile\n                    if (value.profile) {\n                        profile = profiles.get(value.profile);\n                    } else {\n                        // or options defined inline\n                        profile = value\n                    }\n                    if (profile != null) {\n                        const rateLimitOptions = Object.assign({\n                            windowMs: 5 * 60 * 1000, // 5 minutes\n                            limit: 50, // 50 requests\n                            legacyHeaders: true // send headers\n                        }, profile, {\n                            keyGenerator: (req) => {\n                                return req.headers['x-real-ip'] || req.headers['x-forwarded-for'] || (req.connection ? req.connection.remoteAddress : req.socket.remoteAddress);\n                            }\n                        });\n                        addRouter.use(path, rateLimit(rateLimitOptions));\n                    }\n                });\n                if (addRouter.stack.length) {\n                    serviceRouter.stack.unshift.apply(serviceRouter.stack, addRouter.stack);\n                }\n            } catch (err) {\n                TraceUtils.error('An error occurred while validating rate limit configuration.');\n                TraceUtils.error(err);\n                TraceUtils.warn('Rate limit service is inactive due to an error occured while loading configuration.')\n            }\n        });\n    }\n\n}"],"mappings":"6GAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,KAAA,GAAAD,sBAAA,CAAAH,OAAA,UAAwB,SAAAG,uBAAAE,GAAA,UAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;;AAEjB,MAAMG,gBAAgB,SAASC,0BAAkB,CAAC;EACrD;AACJ;AACA;EACIC,WAAWA,CAACC,GAAG,EAAE;IACb,KAAK,CAACA,GAAG,CAAC;IACVA,GAAG,CAACC,aAAa,CAACC,SAAS,CAAC,CAAAD,aAAa,KAAI;MACzC,IAAIA,aAAa,IAAI,IAAI,EAAE;QACvB;MACJ;MACA,IAAI;QACA,MAAME,SAAS,GAAGC,gBAAO,CAACC,MAAM,EAAE;QAClC,IAAIC,oBAAoB,GAAGN,GAAG,CAACO,gBAAgB,EAAE,CAACC,WAAW,CAAC,sCAAsC,CAAC,IAAI;UACrGC,QAAQ,EAAE,EAAE;UACZC,KAAK,EAAE;QACX,CAAC;QACD,IAAIJ,oBAAoB,CAACK,OAAO,EAAE;UAC9B;UACA,MAAMC,iBAAiB,GAAGZ,GAAG,CAACO,gBAAgB,EAAE,CAACM,oBAAoB,EAAE;UACvE,MAAMC,WAAW,GAAGC,aAAI,CAACC,OAAO,CAACJ,iBAAiB,EAAEN,oBAAoB,CAACK,OAAO,CAAC;UACjFM,kBAAU,CAACC,GAAG,CAAE,qFAAoFJ,WAAY,EAAC,CAAC;UAClHR,oBAAoB,GAAGjB,OAAO,CAACyB,WAAW,CAAC;QAC/C;QACA,MAAMK,UAAU,GAAGb,oBAAoB,CAACI,KAAK,IAAI,EAAE;QACnD,MAAMU,aAAa,GAAGd,oBAAoB,CAACG,QAAQ,IAAI,EAAE;QACzD;QACA,MAAMC,KAAK,GAAG,IAAIW,GAAG,CAACF,UAAU,CAAC;QACjC,MAAMV,QAAQ,GAAG,IAAIY,GAAG,CAACD,aAAa,CAAC;QACvC,IAAIV,KAAK,CAACY,IAAI,KAAK,CAAC,EAAE;UAClBL,kBAAU,CAACM,IAAI,CAAC,4FAA4F,CAAC;QACjH;QACAb,KAAK,CAACc,OAAO,CAAC,CAACC,KAAK,EAAEV,IAAI,KAAK;UAC3B,IAAIW,OAAO;UACX;UACA,IAAID,KAAK,CAACC,OAAO,EAAE;YACfA,OAAO,GAAGjB,QAAQ,CAACkB,GAAG,CAACF,KAAK,CAACC,OAAO,CAAC;UACzC,CAAC,MAAM;YACH;YACAA,OAAO,GAAGD,KAAK;UACnB;UACA,IAAIC,OAAO,IAAI,IAAI,EAAE;YACjB,MAAME,gBAAgB,GAAGC,MAAM,CAACC,MAAM,CAAC;cACnCC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE;cACzBC,KAAK,EAAE,EAAE,EAAE;cACXC,aAAa,EAAE,IAAI,CAAC;YACxB,CAAC,EAAEP,OAAO,EAAE;cACRQ,YAAY,EAAEA,CAACC,GAAG,KAAK;gBACnB,OAAOA,GAAG,CAACC,OAAO,CAAC,WAAW,CAAC,IAAID,GAAG,CAACC,OAAO,CAAC,iBAAiB,CAAC,KAAKD,GAAG,CAACE,UAAU,GAAGF,GAAG,CAACE,UAAU,CAACC,aAAa,GAAGH,GAAG,CAACI,MAAM,CAACD,aAAa,CAAC;cACnJ;YACJ,CAAC,CAAC;YACFnC,SAAS,CAACqC,GAAG,CAACzB,IAAI,EAAE,IAAA0B,2BAAS,EAACb,gBAAgB,CAAC,CAAC;UACpD;QACJ,CAAC,CAAC;QACF,IAAIzB,SAAS,CAACuC,KAAK,CAACC,MAAM,EAAE;UACxB1C,aAAa,CAACyC,KAAK,CAACE,OAAO,CAACC,KAAK,CAAC5C,aAAa,CAACyC,KAAK,EAAEvC,SAAS,CAACuC,KAAK,CAAC;QAC3E;MACJ,CAAC,CAAC,OAAOI,GAAG,EAAE;QACV7B,kBAAU,CAAC8B,KAAK,CAAC,8DAA8D,CAAC;QAChF9B,kBAAU,CAAC8B,KAAK,CAACD,GAAG,CAAC;QACrB7B,kBAAU,CAACM,IAAI,CAAC,qFAAqF,CAAC;MAC1G;IACJ,CAAC,CAAC;EACN;;AAEJ,CAACyB,OAAA,CAAAnD,gBAAA,GAAAA,gBAAA"}

package/dist/RateLimtiService.d.ts

@@ -0,0 +1,4 @@
+import { ApplicationService } from '@themost/common';
+export declare class RateLimitService extends ApplicationService {
+
+}

package/dist/SpeedLimitService.d.ts

@@ -0,0 +1,4 @@
+import { ApplicationService } from '@themost/common';
+export declare class SpeedLimitService extends ApplicationService {
+
+}

package/dist/SpeedLimitService.js

@@ -0,0 +1,70 @@
+"use strict";Object.defineProperty(exports, "__esModule", { value: true });exports.SpeedLimitService = void 0;var _common = require("@themost/common");
+var _expressSlowDown = _interopRequireDefault(require("express-slow-down"));
+var _express = _interopRequireDefault(require("express"));
+var _path = _interopRequireDefault(require("path"));function _interopRequireDefault(obj) {return obj && obj.__esModule ? obj : { default: obj };}
+
+class SpeedLimitService extends _common.ApplicationService {
+  constructor(app) {
+    super(app);
+
+    app.serviceRouter.subscribe((serviceRouter) => {
+      if (serviceRouter == null) {
+        return;
+      }
+      try {
+        const addRouter = _express.default.Router();
+        let serviceConfiguration = app.getConfiguration().getSourceAt('settings/universis/janitor/speedLimit') || {
+          profiles: [],
+          paths: []
+        };
+        if (serviceConfiguration.extends) {
+          // get additional configuration
+          const configurationPath = app.getConfiguration().getConfigurationPath();
+          const extendsPath = _path.default.resolve(configurationPath, serviceConfiguration.extends);
+          _common.TraceUtils.log(`@universis/janitor#SpeedLimitService will try to extend service configuration from ${extendsPath}`);
+          serviceConfiguration = require(extendsPath);
+        }
+        const pathsArray = serviceConfiguration.paths || [];
+        const profilesArray = serviceConfiguration.profiles || [];
+        // create maps
+        const paths = new Map(pathsArray);
+        const profiles = new Map(profilesArray);
+        if (paths.size === 0) {
+          _common.TraceUtils.warn('@universis/janitor#SpeedLimitService is being started but the collection of paths is empty.');
+        }
+        paths.forEach((value, path) => {
+          let profile;
+          // get profile
+          if (value.profile) {
+            profile = profiles.get(value.profile);
+          } else {
+            // or options defined inline
+            profile = value;
+          }
+          if (profile != null) {
+            const slowDownOptions = Object.assign({
+              windowMs: 5 * 60 * 1000, // 5 minutes
+              delayAfter: 5, // 5 requests
+              delayMs: 500, // 500 ms
+              maxDelayMs: 20000 // 20 seconds
+            }, profile, {
+              keyGenerator: (req) => {
+                return req.headers['x-real-ip'] || req.headers['x-forwarded-for'] || (req.connection ? req.connection.remoteAddress : req.socket.remoteAddress);
+              }
+            });
+            addRouter.use(path, (0, _expressSlowDown.default)(slowDownOptions));
+          }
+        });
+        if (addRouter.stack.length) {
+          serviceRouter.stack.unshift.apply(serviceRouter.stack, addRouter.stack);
+        }
+      } catch (err) {
+        _common.TraceUtils.error('An error occurred while validating speed limit configuration.');
+        _common.TraceUtils.error(err);
+        _common.TraceUtils.warn('Speed limit service is inactive due to an error occured while loading configuration.');
+      }
+    });
+  }
+
+}exports.SpeedLimitService = SpeedLimitService;
+//# sourceMappingURL=SpeedLimitService.js.map

package/dist/SpeedLimitService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpeedLimitService.js","names":["_common","require","_expressSlowDown","_interopRequireDefault","_express","_path","obj","__esModule","default","SpeedLimitService","ApplicationService","constructor","app","serviceRouter","subscribe","addRouter","express","Router","serviceConfiguration","getConfiguration","getSourceAt","profiles","paths","extends","configurationPath","getConfigurationPath","extendsPath","path","resolve","TraceUtils","log","pathsArray","profilesArray","Map","size","warn","forEach","value","profile","get","slowDownOptions","Object","assign","windowMs","delayAfter","delayMs","maxDelayMs","keyGenerator","req","headers","connection","remoteAddress","socket","use","slowDown","stack","length","unshift","apply","err","error","exports"],"sources":["../src/SpeedLimitService.js"],"sourcesContent":["import { ApplicationService, TraceUtils } from '@themost/common';\nimport slowDown from 'express-slow-down';\nimport express from 'express';\nimport path from 'path';\n\nexport class SpeedLimitService extends ApplicationService {\n    constructor(app) {\n        super(app);\n\n        app.serviceRouter.subscribe(serviceRouter => {\n            if (serviceRouter == null) {\n                return;\n            }\n            try {\n                const addRouter = express.Router();\n                let serviceConfiguration = app.getConfiguration().getSourceAt('settings/universis/janitor/speedLimit') || {\n                    profiles: [],\n                    paths: []\n                };\n                if (serviceConfiguration.extends) {\n                    // get additional configuration\n                    const configurationPath = app.getConfiguration().getConfigurationPath();\n                    const extendsPath = path.resolve(configurationPath, serviceConfiguration.extends);\n                    TraceUtils.log(`@universis/janitor#SpeedLimitService will try to extend service configuration from ${extendsPath}`);\n                    serviceConfiguration = require(extendsPath);\n                }\n                const pathsArray = serviceConfiguration.paths || [];\n                const profilesArray = serviceConfiguration.profiles || [];\n                // create maps\n                const paths = new Map(pathsArray);\n                const profiles = new Map(profilesArray);\n                if (paths.size === 0) {\n                    TraceUtils.warn('@universis/janitor#SpeedLimitService is being started but the collection of paths is empty.');\n                }\n                paths.forEach((value, path) => {\n                    let profile;\n                    // get profile\n                    if (value.profile) {\n                        profile = profiles.get(value.profile);\n                    } else {\n                        // or options defined inline\n                        profile = value\n                    }\n                    if (profile != null) {\n                        const slowDownOptions = Object.assign({\n                            windowMs: 5 * 60 * 1000, // 5 minutes\n                            delayAfter: 5, // 5 requests\n                            delayMs: 500, // 500 ms\n                            maxDelayMs: 20000 // 20 seconds\n                        }, profile, {\n                            keyGenerator: (req) => {\n                                return req.headers['x-real-ip'] || req.headers['x-forwarded-for'] || (req.connection ? req.connection.remoteAddress : req.socket.remoteAddress);\n                            }\n                        });\n                        addRouter.use(path, slowDown(slowDownOptions));\n                    }\n                });\n                if (addRouter.stack.length) {\n                    serviceRouter.stack.unshift.apply(serviceRouter.stack, addRouter.stack);\n                }\n            } catch (err) {\n                TraceUtils.error('An error occurred while validating speed limit configuration.');\n                TraceUtils.error(err);\n                TraceUtils.warn('Speed limit service is inactive due to an error occured while loading configuration.')\n            }\n        });\n    }\n\n}"],"mappings":"8GAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,gBAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,QAAA,GAAAD,sBAAA,CAAAF,OAAA;AACA,IAAAI,KAAA,GAAAF,sBAAA,CAAAF,OAAA,UAAwB,SAAAE,uBAAAG,GAAA,UAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;;AAEjB,MAAMG,iBAAiB,SAASC,0BAAkB,CAAC;EACtDC,WAAWA,CAACC,GAAG,EAAE;IACb,KAAK,CAACA,GAAG,CAAC;;IAEVA,GAAG,CAACC,aAAa,CAACC,SAAS,CAAC,CAAAD,aAAa,KAAI;MACzC,IAAIA,aAAa,IAAI,IAAI,EAAE;QACvB;MACJ;MACA,IAAI;QACA,MAAME,SAAS,GAAGC,gBAAO,CAACC,MAAM,EAAE;QAClC,IAAIC,oBAAoB,GAAGN,GAAG,CAACO,gBAAgB,EAAE,CAACC,WAAW,CAAC,uCAAuC,CAAC,IAAI;UACtGC,QAAQ,EAAE,EAAE;UACZC,KAAK,EAAE;QACX,CAAC;QACD,IAAIJ,oBAAoB,CAACK,OAAO,EAAE;UAC9B;UACA,MAAMC,iBAAiB,GAAGZ,GAAG,CAACO,gBAAgB,EAAE,CAACM,oBAAoB,EAAE;UACvE,MAAMC,WAAW,GAAGC,aAAI,CAACC,OAAO,CAACJ,iBAAiB,EAAEN,oBAAoB,CAACK,OAAO,CAAC;UACjFM,kBAAU,CAACC,GAAG,CAAE,sFAAqFJ,WAAY,EAAC,CAAC;UACnHR,oBAAoB,GAAGjB,OAAO,CAACyB,WAAW,CAAC;QAC/C;QACA,MAAMK,UAAU,GAAGb,oBAAoB,CAACI,KAAK,IAAI,EAAE;QACnD,MAAMU,aAAa,GAAGd,oBAAoB,CAACG,QAAQ,IAAI,EAAE;QACzD;QACA,MAAMC,KAAK,GAAG,IAAIW,GAAG,CAACF,UAAU,CAAC;QACjC,MAAMV,QAAQ,GAAG,IAAIY,GAAG,CAACD,aAAa,CAAC;QACvC,IAAIV,KAAK,CAACY,IAAI,KAAK,CAAC,EAAE;UAClBL,kBAAU,CAACM,IAAI,CAAC,6FAA6F,CAAC;QAClH;QACAb,KAAK,CAACc,OAAO,CAAC,CAACC,KAAK,EAAEV,IAAI,KAAK;UAC3B,IAAIW,OAAO;UACX;UACA,IAAID,KAAK,CAACC,OAAO,EAAE;YACfA,OAAO,GAAGjB,QAAQ,CAACkB,GAAG,CAACF,KAAK,CAACC,OAAO,CAAC;UACzC,CAAC,MAAM;YACH;YACAA,OAAO,GAAGD,KAAK;UACnB;UACA,IAAIC,OAAO,IAAI,IAAI,EAAE;YACjB,MAAME,eAAe,GAAGC,MAAM,CAACC,MAAM,CAAC;cAClCC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE;cACzBC,UAAU,EAAE,CAAC,EAAE;cACfC,OAAO,EAAE,GAAG,EAAE;cACdC,UAAU,EAAE,KAAK,CAAC;YACtB,CAAC,EAAER,OAAO,EAAE;cACRS,YAAY,EAAEA,CAACC,GAAG,KAAK;gBACnB,OAAOA,GAAG,CAACC,OAAO,CAAC,WAAW,CAAC,IAAID,GAAG,CAACC,OAAO,CAAC,iBAAiB,CAAC,KAAKD,GAAG,CAACE,UAAU,GAAGF,GAAG,CAACE,UAAU,CAACC,aAAa,GAAGH,GAAG,CAACI,MAAM,CAACD,aAAa,CAAC;cACnJ;YACJ,CAAC,CAAC;YACFpC,SAAS,CAACsC,GAAG,CAAC1B,IAAI,EAAE,IAAA2B,wBAAQ,EAACd,eAAe,CAAC,CAAC;UAClD;QACJ,CAAC,CAAC;QACF,IAAIzB,SAAS,CAACwC,KAAK,CAACC,MAAM,EAAE;UACxB3C,aAAa,CAAC0C,KAAK,CAACE,OAAO,CAACC,KAAK,CAAC7C,aAAa,CAAC0C,KAAK,EAAExC,SAAS,CAACwC,KAAK,CAAC;QAC3E;MACJ,CAAC,CAAC,OAAOI,GAAG,EAAE;QACV9B,kBAAU,CAAC+B,KAAK,CAAC,+DAA+D,CAAC;QACjF/B,kBAAU,CAAC+B,KAAK,CAACD,GAAG,CAAC;QACrB9B,kBAAU,CAACM,IAAI,CAAC,sFAAsF,CAAC;MAC3G;IACJ,CAAC,CAAC;EACN;;AAEJ,CAAC0B,OAAA,CAAApD,iBAAA,GAAAA,iBAAA"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './RateLimitService';
+export * from './SpeedLimitService';

package/dist/index.js

@@ -0,0 +1,3 @@
+"use strict";Object.defineProperty(exports, "__esModule", { value: true });var _RateLimitService = require("./RateLimitService");Object.keys(_RateLimitService).forEach(function (key) {if (key === "default" || key === "__esModule") return;if (key in exports && exports[key] === _RateLimitService[key]) return;Object.defineProperty(exports, key, { enumerable: true, get: function () {return _RateLimitService[key];} });});
+var _SpeedLimitService = require("./SpeedLimitService");Object.keys(_SpeedLimitService).forEach(function (key) {if (key === "default" || key === "__esModule") return;if (key in exports && exports[key] === _SpeedLimitService[key]) return;Object.defineProperty(exports, key, { enumerable: true, get: function () {return _SpeedLimitService[key];} });});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["_RateLimitService","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_SpeedLimitService"],"sources":["../src/index.js"],"sourcesContent":["export * from './RateLimitService';\nexport * from './SpeedLimitService';"],"mappings":"2EAAA,IAAAA,iBAAA,GAAAC,OAAA,uBAAAC,MAAA,CAAAC,IAAA,CAAAH,iBAAA,EAAAI,OAAA,WAAAC,GAAA,OAAAA,GAAA,kBAAAA,GAAA,8BAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,iBAAA,CAAAK,GAAA,UAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA,IAAAG,UAAA,QAAAC,GAAA,WAAAA,CAAA,UAAAT,iBAAA,CAAAK,GAAA;AACA,IAAAK,kBAAA,GAAAT,OAAA,wBAAAC,MAAA,CAAAC,IAAA,CAAAO,kBAAA,EAAAN,OAAA,WAAAC,GAAA,OAAAA,GAAA,kBAAAA,GAAA,8BAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,kBAAA,CAAAL,GAAA,UAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA,IAAAG,UAAA,QAAAC,GAAA,WAAAA,CAAA,UAAAC,kBAAA,CAAAL,GAAA"}

package/dist/models/TestAction.d.ts

@@ -0,0 +1,5 @@
+import { DataObject } from '@themost/data';
+
+export declare class TestAction extends DataObject {
+
+}

package/dist/models/TestAction.js

@@ -0,0 +1,5 @@
+"use strict";Object.defineProperty(exports, "__esModule", { value: true });exports.TestAction = void 0;var _data = require("@themost/data");var _dec, _class;let
+
+
+TestAction = (_dec = _data.EdmMapping.entityType(), _dec(_class = class TestAction extends _data.DataObject {}) || _class);exports.TestAction = TestAction;
+//# sourceMappingURL=TestAction.js.map

package/dist/models/TestAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TestAction.js","names":["_data","require","_dec","_class","TestAction","EdmMapping","entityType","DataObject","exports"],"sources":["../../src/models/TestAction.js"],"sourcesContent":["import { DataObject, EdmMapping } from \"@themost/data\";\n\n@EdmMapping.entityType()\nclass TestAction extends DataObject {\n\n}\n\nexport {\n    TestAction\n}"],"mappings":"uGAAA,IAAAA,KAAA,GAAAC,OAAA,kBAAuD,IAAAC,IAAA,EAAAC,MAAA;;;AAGjDC,UAAU,IAAAF,IAAA,GADfG,gBAAU,CAACC,UAAU,EAAE,EAAAJ,IAAA,CAAAC,MAAA,GAAxB,MACMC,UAAU,SAASG,gBAAU,CAAC,EAEnC,KAAAJ,MAAA,EAAAK,OAAA,CAAAJ,UAAA,GAAAA,UAAA"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@universis/janitor",
+  "version": "1.0.0",
+  "description": "Universis api plugin for rate limiting requests",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "engines": {
+    "node": ">=14"
+  },
+  "scripts": {
+    "test": "jasmine",
+    "build": "rimraf dist && babel src --out-dir dist --copy-files --source-maps"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitlab.com/universis/rate-limit.git"
+  },
+  "keywords": [
+    "universis",
+    "api",
+    "extension",
+    "plugin",
+    "library",
+    "microservice"
+  ],
+  "author": "",
+  "license": "LGPL-3.0-or-later",
+  "bugs": {
+    "url": "https://gitlab.com/universis/rate-limit/issues"
+  },
+  "dependencies": {
+    "express-rate-limit": "^7.1.1",
+    "express-slow-down": "^1.6.0"
+  },
+  "peerDependencies": {
+    "@themost/common": "^2",
+    "@themost/data": "^2",
+    "@themost/query": "^2",
+    "@themost/xml": "^2",
+    "@themost/express": "^1"
+  },
+  "devDependencies": {
+    "@babel/cli": "^7.21.0",
+    "@babel/core": "^7.21.4",
+    "@babel/eslint-parser": "^7.21.3",
+    "@babel/plugin-proposal-decorators": "^7.21.0",
+    "@babel/preset-env": "^7.21.4",
+    "@babel/register": "^7.21.0",
+    "@rollup/plugin-babel": "^6.0.3",
+    "@types/express": "^4.17.6",
+    "@types/jasmine": "^3.5.10",
+    "dotenv": "^8.2.0",
+    "eslint": "^8.39.0",
+    "jasmine": "^4.6.0",
+    "jasmine-spec-reporter": "^5.0.2",
+    "rimraf": "3.0.2",
+    "typescript": "^5.0.4"
+  },
+  "homepage": "https://gitlab.com/universis/rate-limit#readme"
+}

package/public/index.html

@@ -0,0 +1,42 @@
+<html lang="en" data-bs-theme="dark">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="description" content="">
+    <title>@universis/janitor</title>
+    <!-- Bootstrap core CSS -->
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-T3c6CoIi6uLrA9TneNEoa7RxnatzjcDSCmG1MXxSR1GAsXEV/Dwwykc2MPK8M2HN" crossorigin="anonymous">
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap" rel="stylesheet">
+    <style>
+        body {
+            font-family: 'Montserrat';
+            padding-top: 4.5rem;
+        }
+    </style>
+</head>
+<body >
+    <nav class="navbar navbar-expand-md navbar-dark fixed-top bg-primary">
+        <div class="container-fluid">
+            <a class="navbar-brand" href="#">@universis/janitor</a>
+        </div>
+    </nav>
+    <main class="container">
+        <div class="p-5 rounded">
+            <h1>@universis/janitor</h1>
+            <p class="lead">Universis api plugin for rate limiting requests</p>
+        </div>
+        <div>
+            <script id="readme" type="text/markdown" src="https://gitlab.com/universis/janitor/-/raw/main/README.md?inline=false" ></script>
+            <div class="markdown">
+            </div>
+        </div>      
+    </main>
+    <script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js" integrity="sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=" crossorigin="anonymous"></script>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-C6RzsynM9kWDrMNeT87bh95OGNyZPhcTNXj1NW7RuBCsyN/o0jlpcV8Qyq46cDfL" crossorigin="anonymous"></script>
+    <script src="https://cdn.jsdelivr.net/npm/showdown@2.1.0/dist/showdown.min.js" integrity="sha256-iOtvu+DCcN3zOEruDJYg0HDgkKJuB8Z0Ia42yQO11kk=" crossorigin="anonymous"></script>
+</body>
+
+</html>

package/public/janitor-logo.svg

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<!-- Created with Vectornator (http://vectornator.io/) -->
+<svg height="1451.5199999999998mm" stroke-miterlimit="10" style="fill-rule:nonzero;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;" version="1.1" viewBox="0 0 4115.06 4115.06" width="1451.5199999999998mm" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<defs/>
+<g id="Layer-1">
+<path d="M723.486 744.868L1942.84 744.767L3392.53 744.647" fill="none" opacity="1" stroke="#23b7cc" stroke-linecap="round" stroke-linejoin="round" stroke-width="283.5"/>
+<path d="M735.141 1225.03L1408.88 1968.33L1629.62 2205.76L2290.13 2916.22" fill="none" opacity="1" stroke="#23b7cc" stroke-linecap="round" stroke-linejoin="round" stroke-width="283.5"/>
+<path d="M2381.55 2272.88L2826.88 1797.13L3362.09 1218.8" fill="none" opacity="1" stroke="#23b7cc" stroke-linecap="round" stroke-linejoin="round" stroke-width="283.5"/>
+<path d="M2806.2 3518.14L2806.83 3058.9L2806.03 2876.36L2804.41 2504.02" fill="none" opacity="1" stroke="#23b7cc" stroke-linecap="round" stroke-linejoin="round" stroke-width="283.5"/>
+<path d="M817.89 2946.06L1633.75 2942.44" fill="none" opacity="1" stroke="#23b7cc" stroke-linecap="round" stroke-linejoin="round" stroke-width="283.5"/>
+</g>
+</svg>

package/public/schemas/v1/rate-limit-service.json

@@ -0,0 +1,84 @@
+{
+    "$schema": "http://json-schema.org/draft-04/schema#",
+    "type": "object",
+    "id": "urn:universis:rate-limit-service:1",
+    "description": "@universis/janitor#RateLimitService configuration schema",
+    "properties": {
+      "profiles": {
+        "type": "array",
+        "description": "A named collection of rate limit configurations",
+        "items": [
+          {
+            "type": "array",
+            "items": [
+              {
+                "type": "string",
+                "description": "The name of current rate limit profile."
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "windowMs": {
+                    "description": "Time frame for which requests are checked/remembered. Also used in the Retry-After header when the limit is reached.",
+                    "type": "integer"
+                  },
+                  "limit": {
+                    "description": "The maximum number of connections to allow during the window before rate limiting the client.",
+                    "type": "integer"
+                  },
+                  "legacyHeaders": {
+                    "description": "Whether to send the legacy rate limit headers for the limit (X-RateLimit-Limit), current usage (X-RateLimit-Remaining) and reset time (if the store provides it) (X-RateLimit-Reset) on all responses.",
+                    "type": "boolean"
+                  },
+                  "skipFailedRequests": {
+                    "description": "When set to true, failed requests won't be counted. Request considered failed when the requestWasSuccessful option returns false.",
+                    "type": "boolean"
+                  },
+                  "skipSuccessfulRequests": {
+                    "description": "If true, the library will (by default) skip all requests that are considered 'failed' by the requestWasSuccessful function.",
+                    "type": "boolean"
+                  },
+                  "store": {
+                    "description": "The storage to use when persisting rate limit attempts. By default, the MemoryStore is used.",
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "windowMs",
+                  "limit"
+                ]
+              }
+            ]
+          }
+        ]
+      },
+      "paths": {
+        "type": "array",
+        "items": [
+          {
+            "type": "array",
+            "items": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "profile": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "profile"
+                ]
+              }
+            ]
+          }
+        ]
+      }
+    },
+    "required": [
+      "profiles",
+      "paths"
+    ]
+  }

package/public/schemas/v1/speed-limit-service.json

@@ -0,0 +1,93 @@
+{
+    "$schema": "http://json-schema.org/draft-04/schema#",
+    "type": "object",
+    "id": "urn:universis:speed-limit-service:1",
+    "description": "@universis/janitor#SpeedLimitService configuration schema",
+    "properties": {
+      "profiles": {
+        "description": "A named collection of speed limit configurations",
+        "type": "array",
+        "items": [
+          {
+            "type": "array",
+            "items": [
+              {
+                "type": "string",
+                "description": "The name of current speed limit profile."
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "windowMs": {
+                    "description": "milliseconds - how long to keep records of requests in memory. Defaults to 60000 (1 minute)",
+                    "type": "integer"
+                  },
+                  "delayMs": {
+                    "description": "milliseconds - how long to delay the response, multiplied by (number of recent hits - delayAfter). Defaults to 1000 (1 second). Set to 0 to disable delaying.",
+                    "type": "integer"
+                  },
+                  "delayAfter": {
+                    "description": "max number of connections during windowMs before starting to delay responses. Number or function that returns a number. Defaults to 1.",
+                    "type": "integer"
+                  },
+                  "maxDelayMs": {
+                    "description": "milliseconds - maximum value for delayMs after many consecutive attempts, that is, after the n-th request, the delay will be always maxDelayMs. Important when your application is running behind a load balancer or reverse proxy that has a request timeout. Defaults to Infinity.",
+                    "type": "integer"
+                  },
+                  "skipFailedRequests": {
+                    "description": "when true failed requests (response status >= 400) won't be counted. Defaults to false.",
+                    "type": "boolean"
+                  },
+                  "skipSuccessfulRequests": {
+                    "description": "when true successful requests (response status < 400) won't be counted. Defaults to false.",
+                    "type": "boolean"
+                  },
+                  "store": {
+                    "description": "The storage to use when persisting rate limit attempts. By default, the MemoryStore is used.",
+                    "type": "string"
+                  },
+                  "headers": {
+                    "description": "Add X-SlowDown-Limit, X-SlowDown-Remaining, and if the store supports it, X-SlowDown-Reset headers to all responses. Modeled after the equivalent headers in express-rate-limit. Default: false",
+                    "type": "boolean"
+                  }
+                },
+                "required": [
+                  "windowMs",
+                  "delayAfter",
+                  "delayMs"
+                ]
+              }
+            ]
+          }
+        ]
+      },
+      "paths": {
+        "type": "array",
+        "items": [
+          {
+            "type": "array",
+            "items": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "profile": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "profile"
+                ]
+              }
+            ]
+          }
+        ]
+      }
+    },
+    "required": [
+      "profiles",
+      "paths"
+    ]
+  }

package/src/RateLimitService.js

@@ -0,0 +1,70 @@
+import { ApplicationService, TraceUtils } from '@themost/common';
+import { rateLimit } from 'express-rate-limit';
+import express from 'express';
+import path from 'path';
+
+export class RateLimitService extends ApplicationService {
+    /**
+     * @param {import('@themost/express').ExpressDataApplication} app 
+     */
+    constructor(app) {
+        super(app);
+        app.serviceRouter.subscribe(serviceRouter => {
+            if (serviceRouter == null) {
+                return;
+            }
+            try {
+                const addRouter = express.Router();
+                let serviceConfiguration = app.getConfiguration().getSourceAt('settings/universis/janitor/rateLimit') || {
+                    profiles: [],
+                    paths: []
+                };
+                if (serviceConfiguration.extends) {
+                    // get additional configuration
+                    const configurationPath = app.getConfiguration().getConfigurationPath();
+                    const extendsPath = path.resolve(configurationPath, serviceConfiguration.extends);
+                    TraceUtils.log(`@universis/janitor#RateLimitService will try to extend service configuration from ${extendsPath}`);
+                    serviceConfiguration = require(extendsPath);
+                }
+                const pathsArray = serviceConfiguration.paths || [];
+                const profilesArray = serviceConfiguration.profiles || [];
+                // create maps
+                const paths = new Map(pathsArray);
+                const profiles = new Map(profilesArray);
+                if (paths.size === 0) {
+                    TraceUtils.warn('@universis/janitor#RateLimitService is being started but the collection of paths is empty.');
+                }
+                paths.forEach((value, path) => {
+                    let profile;
+                    // get profile
+                    if (value.profile) {
+                        profile = profiles.get(value.profile);
+                    } else {
+                        // or options defined inline
+                        profile = value
+                    }
+                    if (profile != null) {
+                        const rateLimitOptions = Object.assign({
+                            windowMs: 5 * 60 * 1000, // 5 minutes
+                            limit: 50, // 50 requests
+                            legacyHeaders: true // send headers
+                        }, profile, {
+                            keyGenerator: (req) => {
+                                return req.headers['x-real-ip'] || req.headers['x-forwarded-for'] || (req.connection ? req.connection.remoteAddress : req.socket.remoteAddress);
+                            }
+                        });
+                        addRouter.use(path, rateLimit(rateLimitOptions));
+                    }
+                });
+                if (addRouter.stack.length) {
+                    serviceRouter.stack.unshift.apply(serviceRouter.stack, addRouter.stack);
+                }
+            } catch (err) {
+                TraceUtils.error('An error occurred while validating rate limit configuration.');
+                TraceUtils.error(err);
+                TraceUtils.warn('Rate limit service is inactive due to an error occured while loading configuration.')
+            }
+        });
+    }
+
+}

package/src/RateLimtiService.d.ts

@@ -0,0 +1,4 @@
+import { ApplicationService } from '@themost/common';
+export declare class RateLimitService extends ApplicationService {
+
+}

package/src/SpeedLimitService.d.ts

@@ -0,0 +1,4 @@
+import { ApplicationService } from '@themost/common';
+export declare class SpeedLimitService extends ApplicationService {
+
+}

package/src/SpeedLimitService.js

@@ -0,0 +1,69 @@
+import { ApplicationService, TraceUtils } from '@themost/common';
+import slowDown from 'express-slow-down';
+import express from 'express';
+import path from 'path';
+
+export class SpeedLimitService extends ApplicationService {
+    constructor(app) {
+        super(app);
+
+        app.serviceRouter.subscribe(serviceRouter => {
+            if (serviceRouter == null) {
+                return;
+            }
+            try {
+                const addRouter = express.Router();
+                let serviceConfiguration = app.getConfiguration().getSourceAt('settings/universis/janitor/speedLimit') || {
+                    profiles: [],
+                    paths: []
+                };
+                if (serviceConfiguration.extends) {
+                    // get additional configuration
+                    const configurationPath = app.getConfiguration().getConfigurationPath();
+                    const extendsPath = path.resolve(configurationPath, serviceConfiguration.extends);
+                    TraceUtils.log(`@universis/janitor#SpeedLimitService will try to extend service configuration from ${extendsPath}`);
+                    serviceConfiguration = require(extendsPath);
+                }
+                const pathsArray = serviceConfiguration.paths || [];
+                const profilesArray = serviceConfiguration.profiles || [];
+                // create maps
+                const paths = new Map(pathsArray);
+                const profiles = new Map(profilesArray);
+                if (paths.size === 0) {
+                    TraceUtils.warn('@universis/janitor#SpeedLimitService is being started but the collection of paths is empty.');
+                }
+                paths.forEach((value, path) => {
+                    let profile;
+                    // get profile
+                    if (value.profile) {
+                        profile = profiles.get(value.profile);
+                    } else {
+                        // or options defined inline
+                        profile = value
+                    }
+                    if (profile != null) {
+                        const slowDownOptions = Object.assign({
+                            windowMs: 5 * 60 * 1000, // 5 minutes
+                            delayAfter: 5, // 5 requests
+                            delayMs: 500, // 500 ms
+                            maxDelayMs: 20000 // 20 seconds
+                        }, profile, {
+                            keyGenerator: (req) => {
+                                return req.headers['x-real-ip'] || req.headers['x-forwarded-for'] || (req.connection ? req.connection.remoteAddress : req.socket.remoteAddress);
+                            }
+                        });
+                        addRouter.use(path, slowDown(slowDownOptions));
+                    }
+                });
+                if (addRouter.stack.length) {
+                    serviceRouter.stack.unshift.apply(serviceRouter.stack, addRouter.stack);
+                }
+            } catch (err) {
+                TraceUtils.error('An error occurred while validating speed limit configuration.');
+                TraceUtils.error(err);
+                TraceUtils.warn('Speed limit service is inactive due to an error occured while loading configuration.')
+            }
+        });
+    }
+
+}

package/src/index.d.ts

@@ -0,0 +1,2 @@
+export * from './RateLimitService';
+export * from './SpeedLimitService';

package/src/index.js

@@ -0,0 +1,2 @@
+export * from './RateLimitService';
+export * from './SpeedLimitService';

package/src/models/TestAction.d.ts

@@ -0,0 +1,5 @@
+import { DataObject } from '@themost/data';
+
+export declare class TestAction extends DataObject {
+
+}

package/src/models/TestAction.js

@@ -0,0 +1,10 @@
+import { DataObject, EdmMapping } from "@themost/data";
+
+@EdmMapping.entityType()
+class TestAction extends DataObject {
+
+}
+
+export {
+    TestAction
+}