happy2 0.0.5

package/packages/happy2-server/dist/modules/request/rate-limit.test.js

@@ -0,0 +1,123 @@
+import Fastify from "fastify";
+import { describe, expect, it, vi } from "vitest";
+import { createRateLimitHook, createRateLimitStorageKey, HttpRateLimiter, LocalRateLimitStore, RateLimitUnavailableError, requestRateLimitRules, } from "./rate-limit.js";
+describe("LocalRateLimitStore", () => {
+    it("enforces and resets a fixed window", async () => {
+        const store = new LocalRateLimitStore();
+        const input = { key: "messages:ip:digest", limit: 2, windowMs: 1_000 };
+        expect(await store.consume({ ...input, now: 100 })).toMatchObject({
+            allowed: true,
+            remaining: 1,
+            resetAt: 1_100,
+        });
+        expect(await store.consume({ ...input, now: 200 })).toMatchObject({
+            allowed: true,
+            remaining: 0,
+            resetAt: 1_100,
+        });
+        expect(await store.consume({ ...input, now: 300 })).toMatchObject({
+            allowed: false,
+            remaining: 0,
+            resetAt: 1_100,
+            reason: "limit",
+        });
+        expect(await store.consume({ ...input, now: 1_100 })).toMatchObject({
+            allowed: true,
+            remaining: 1,
+            resetAt: 2_100,
+        });
+    });
+    it("stays bounded, fails closed at capacity, and reclaims expired keys", async () => {
+        const store = new LocalRateLimitStore({ maxEntries: 2, cleanupIntervalMs: 10_000 });
+        await store.consume({ key: "one", limit: 1, windowMs: 100, now: 0 });
+        await store.consume({ key: "two", limit: 1, windowMs: 200, now: 0 });
+        expect(await store.consume({ key: "three", limit: 1, windowMs: 100, now: 1 })).toMatchObject({
+            allowed: false,
+            reason: "store_capacity",
+            resetAt: 100,
+        });
+        expect(store.size).toBe(2);
+        expect(await store.consume({ key: "three", limit: 1, windowMs: 100, now: 100 })).toMatchObject({
+            allowed: true,
+        });
+        expect(store.size).toBe(2);
+    });
+});
+describe("HttpRateLimiter", () => {
+    it("hashes raw actor and IP identities into independent keys", () => {
+        const request = { ip: "203.0.113.9" };
+        const rules = requestRateLimitRules(request, {
+            scope: "messages.send",
+            ip: { limit: 20, windowMs: 1_000 },
+            actor: { limit: 5, windowMs: 1_000 },
+        }, "user_secret");
+        expect(rules.map((rule) => rule.dimension)).toEqual(["ip", "actor"]);
+        const keys = rules.map(createRateLimitStorageKey);
+        expect(keys).toHaveLength(2);
+        expect(keys[0]).not.toContain("203.0.113.9");
+        expect(keys[1]).not.toContain("user_secret");
+        expect(keys[0]).not.toBe(keys[1]);
+    });
+    it("defaults to fail-closed and supports an explicit fail-open policy", async () => {
+        const error = new Error("redis unavailable");
+        const store = { consume: vi.fn().mockRejectedValue(error) };
+        const rule = {
+            scope: "auth.login",
+            dimension: "ip",
+            identity: "127.0.0.1",
+            limit: 1,
+            windowMs: 1_000,
+        };
+        await expect(new HttpRateLimiter(store).evaluate([rule])).rejects.toBeInstanceOf(RateLimitUnavailableError);
+        await expect(new HttpRateLimiter(store, { failOpen: true }).evaluate([rule])).resolves.toMatchObject({
+            allowed: true,
+            bypassedBecauseStoreFailed: true,
+        });
+    });
+    it("uses Fastify's trusted-proxy IP and returns retry metadata", async () => {
+        let now = 10_000;
+        const limiter = new HttpRateLimiter(new LocalRateLimitStore(), { now: () => now });
+        const app = Fastify({ trustProxy: 1 });
+        app.post("/v0/action", {
+            preHandler: createRateLimitHook({
+                limiter,
+                policy: {
+                    scope: "test.action",
+                    ip: { limit: 1, windowMs: 2_500 },
+                },
+            }),
+        }, async () => ({ ok: true }));
+        const first = await app.inject({
+            method: "POST",
+            url: "/v0/action",
+            headers: { "x-forwarded-for": "203.0.113.10" },
+        });
+        expect(first.statusCode).toBe(200);
+        expect(first.headers["ratelimit-remaining"]).toBe("0");
+        const limited = await app.inject({
+            method: "POST",
+            url: "/v0/action",
+            headers: { "x-forwarded-for": "203.0.113.10" },
+        });
+        expect(limited.statusCode).toBe(429);
+        expect(limited.headers["retry-after"]).toBe("3");
+        expect(limited.headers["ratelimit-limit"]).toBe("1");
+        expect(limited.headers["ratelimit-reset"]).toBe("3");
+        expect(limited.json()).toEqual({ error: "rate_limited", retryAfterSeconds: 3 });
+        const otherProxyAwareIp = await app.inject({
+            method: "POST",
+            url: "/v0/action",
+            headers: { "x-forwarded-for": "203.0.113.11" },
+        });
+        expect(otherProxyAwareIp.statusCode).toBe(200);
+        now = 12_500;
+        const reset = await app.inject({
+            method: "POST",
+            url: "/v0/action",
+            headers: { "x-forwarded-for": "203.0.113.10" },
+        });
+        expect(reset.statusCode).toBe(200);
+        await app.close();
+    });
+});
+//# sourceMappingURL=rate-limit.test.js.map

package/packages/happy2-server/dist/modules/request/rate-limit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.test.js","sourceRoot":"","sources":["../../../sources/modules/request/rate-limit.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACH,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,GAExB,MAAM,iBAAiB,CAAC;AAEzB,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEvE,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9D,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9D,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9D,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YAChE,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,CACF,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CACzE,CAAC,aAAa,CAAC;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,GAAG;SACf,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE3B,MAAM,CACF,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC3E,CAAC,aAAa,CAAC;YACZ,OAAO,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAChE,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,qBAAqB,CAC/B,OAAO,EACP;YACI,KAAK,EAAE,eAAe;YACtB,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YAClC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvC,EACD,aAAa,CAChB,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAmB,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG;YACT,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;SACT,CAAC;QAEX,MAAM,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC5E,yBAAyB,CAC5B,CAAC;QACF,MAAM,MAAM,CACR,IAAI,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC,QAAQ,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,0BAA0B,EAAE,IAAI;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QACxE,IAAI,GAAG,GAAG,MAAM,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,mBAAmB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CACJ,YAAY,EACZ;YACI,UAAU,EAAE,mBAAmB,CAAC;gBAC5B,OAAO;gBACP,MAAM,EAAE;oBACJ,KAAK,EAAE,aAAa;oBACpB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;iBACpC;aACJ,CAAC;SACL,EACD,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAC7B,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;QAEhF,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACvC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE/C,GAAG,GAAG,MAAM,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}