express-rate-limit 5.5.0 → 5.5.1

package/README.md

@@ -17,6 +17,7 @@ Note: this module does not share state with other processes/servers by default.
 - [Redis Store](https://npmjs.com/package/rate-limit-redis)
 - [Memcached Store](https://npmjs.org/package/rate-limit-memcached)
 - [Mongo Store](https://www.npmjs.com/package/rate-limit-mongo)
+- [Precise Memory Store](https://www.npmjs.com/package/precise-memory-rate-limit) - similar to the built-in memory store except that it stores a distinct timestamp for each IP rather than bucketing them together.
 
 ### Alternate Rate-limiters
 
@@ -39,7 +40,7 @@ For an API-only server where the rate-limiter should be applied to all requests:
 ```js
 const rateLimit = require("express-rate-limit");
 
-// Enable if you're behind a reverse proxy (Heroku, Bluemix, AWS ELB, Nginx, etc)
+// Enable if you're behind a reverse proxy (Heroku, Bluemix, AWS ELB or API Gateway, Nginx, etc)
 // see https://expressjs.com/en/guide/behind-proxies.html
 // app.set('trust proxy', 1);
 
@@ -57,7 +58,7 @@ For a "regular" web server (e.g. anything that uses `express.static()`), where t
 ```js
 const rateLimit = require("express-rate-limit");
 
-// Enable if you're behind a reverse proxy (Heroku, Bluemix, AWS ELB, Nginx, etc)
+// Enable if you're behind a reverse proxy (Heroku, Bluemix, AWS ELB or API Gateway, Nginx, etc)
 // see https://expressjs.com/en/guide/behind-proxies.html
 // app.set('trust proxy', 1);
 
@@ -346,4 +347,4 @@ v2 uses a less precise but less resource intensive method of tracking hits from
 
 ## License
 
-MIT © [Nathan Friedly](http://nfriedly.com/)
+MIT © [Nathan Friedly](http://nfriedly.com/)

package/lib/express-rate-limit.js

@@ -19,8 +19,8 @@ function RateLimit(options) {
       // allows to create custom keys (by default user IP is used)
       keyGenerator: function (req /*, res*/) {
         if (!req.ip) {
-          throw new Error(
-            "express-rate-limit: req.ip is undefined - are you sure you're using express?"
+          console.error(
+            "express-rate-limit: req.ip is undefined - you can avoid this by providing a custom keyGenerator function, but it may be indicative of a larger issue."
           );
         }
         return req.ip;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "express-rate-limit",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "description": "Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.",
   "homepage": "https://github.com/nfriedly/express-rate-limit",
   "author": {