auto-smart-security 1.0.1 → 1.0.3

package/README.md

@@ -50,7 +50,7 @@ applySecurity(app, {
 Reason: ${info.reason}
 IP: ${info.ip}
 URL: ${info.url}
-UA: ${info.ua ?? 'N/A'}`
+UA: ${info.ua ?? 'N/A'}`,
     );
   },
 });
@@ -133,17 +133,34 @@ Using ioredis
 import Redis from 'ioredis';
 import { RedisBlacklistStore } from 'smart-security';
 
-const redis = new Redis(process.env.REDIS_URL);
+const redis = new Redis({
+  host: process.env.REDIS_HOST,
+  port: Number(process.env.REDIS_PORT ?? 6379),
+  password: process.env.REDIS_PASSWORD || undefined,
+});
 
 applySecurity(app, {
-  pathWhitelist: ['admin/', 'media'],
+  mode: process.env.NODE_ENV === 'development' ? 'dev' : 'prod',
+  rateLimit: { max: 120, windowMs: 60_000 },
+  bot: { enabled: true },
+  blacklistTTL: 10 * 60 * 1000,
+  pathWhitelist: ['api', '/media'],
   blacklist: {
     store: new RedisBlacklistStore(
       redis,
       ['1.2.3.4'], // static blacklist
-      600          // TTL in seconds
+      600, // TTL in seconds
     ),
   },
+  onBlock: (info) => {
+    SEND_NOTIFICATION_ERR(
+      `[SECURITY]
+Reason: ${info.reason}
+IP: ${info.ip}
+URL: ${info.url}
+UA: ${info.ua ?? 'N/A'}`,
+    );
+  },
 });
 ```
 
@@ -172,4 +189,10 @@ applySecurity(app, {
 - Docker / Kubernetes
 - Cloudflare / Nginx / reverse proxies
 
-## 🧩 Works With
+## 📬 Contact
+
+If you have questions, suggestions, or want to report security issues, feel free to contact:
+
+- **Email:** haivinhinspirit@gmail.com
+
+I usually respond within 24–48 hours.

package/dist/apply-security.js

@@ -54,8 +54,13 @@ function applySecurity(app, options) {
             return res.status(403).send('Bot detected');
         }
         /** 3️⃣ Path whitelist */
+        const normalizePath = (url) => url.split('?')[0].replace(/^\/+/, '');
+        const isPathAllowed = (url, whitelist) => {
+            const path = normalizePath(url);
+            return whitelist.some((p) => path.startsWith(p.replace(/^\/+/, '')));
+        };
         if (options.pathWhitelist?.length &&
-            !options.pathWhitelist.some((p) => url.includes(p))) {
+            !isPathAllowed(url, options.pathWhitelist)) {
             await blacklist.block(ip);
             options.onBlock?.({
                 ip,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-smart-security",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Production-ready security middleware for Express / NestJS",
   "author": "Hai Vinh <haivinhinspirit@gmail.com>",
   "main": "dist/index.js",