auto-smart-security 1.0.10 → 1.0.12

package/dist/blacklist/redis.store.js

@@ -12,12 +12,16 @@ class RedisBlacklistStore {
         return `${this.prefix}${ip}`;
     }
     async isBlocked(ip) {
+        if (!this.redis)
+            return false;
         if (this.staticBlacklist.includes(ip))
             return true;
         const value = await this.redis.get(this.key(ip));
         return value === '1';
     }
     async block(ip, ttlSeconds) {
+        if (!this.redis)
+            return;
         const ttl = ttlSeconds ?? this.ttlSeconds;
         await this.redis.set(this.key(ip), '1', 'EX', ttl);
     }

package/dist/bot-detector.d.ts

@@ -1,6 +1,7 @@
 export declare class BotDetector {
     private limit;
     private scores;
+    private ttl;
     constructor(limit?: number);
     detect(req: any): boolean;
 }

package/dist/bot-detector.js

@@ -6,8 +6,11 @@ class BotDetector {
     constructor(limit = 8) {
         this.limit = limit;
         this.scores = new Map();
+        this.ttl = 60000; // 1 phút
     }
     detect(req) {
+        if (req.method === 'OPTIONS')
+            return false;
         let score = 0;
         const ua = (req.headers?.['user-agent'] || '').toLowerCase();
         if (!ua || ua.length < 20)
@@ -25,8 +28,13 @@ class BotDetector {
         if (/(wp-admin|\.env|phpmyadmin|cgi-bin)/i.test(req.originalUrl))
             score += 5;
         const ip = (0, utils_1.getClientIP)(req);
-        const total = (this.scores.get(ip) || 0) + score;
-        this.scores.set(ip, total);
+        const now = Date.now();
+        const entry = this.scores.get(ip);
+        let total = score;
+        if (entry && now - entry.ts < this.ttl) {
+            total += entry.score;
+        }
+        this.scores.set(ip, { score: total, ts: now });
         return total >= this.limit;
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-smart-security",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "description": "Production-ready security middleware for Express / NestJS",
   "author": "Hai Vinh <haivinhinspirit@gmail.com>",
   "main": "dist/index.js",