nestjs-shield 1.0.1 → 1.1.0

package/README.md

@@ -37,7 +37,7 @@ Or from GitHub Packages (published as `@yassinos-coder/nestjs-shield`) — first
 GITHUB_TOKEN=ghp_xxx npm install @yassinos-coder/nestjs-shield
 ```
 
-Node ≥ 18, NestJS 9 / 10 / 11.
+Node ≥ 18, NestJS 9 / 10 / 11 / 12. NestJS 12 applications require Node ≥ 20.
 
 ## Quick start
 

package/dist/storage/redis.storage.js

@@ -111,6 +111,19 @@ local ttl = redis.call('PTTL', key)
 if ttl < 0 then ttl = 0 end
 return { count, ttl }
 `;
+const BURST_INCREMENT_LUA = `
+local count = redis.call('INCR', KEYS[1])
+redis.call('PEXPIRE', KEYS[1], ARGV[1])
+return count
+`;
+const BURST_DECREMENT_LUA = `
+local count = tonumber(redis.call('GET', KEYS[1]) or '0')
+if count <= 1 then
+  redis.call('DEL', KEYS[1])
+  return 0
+end
+return redis.call('DECR', KEYS[1])
+`;
 const SLIDING_COUNTER_LUA = `
 local cur = KEYS[1]
 local prev = KEYS[2]
@@ -166,11 +179,9 @@ class RedisStorage {
     }
     async fixedWindow(key, ttlMs, limit) {
         const k = this.k(key);
-        const count = await this.client.incr(k);
-        if (count === 1)
-            await this.client.pexpire(k, ttlMs);
-        const ttl = await this.client.pttl(k);
-        return { count, allowed: count <= limit, resetMs: Math.max(0, ttl), limit };
+        const res = (await this.runScript('shieldIncrement', INCREMENT_LUA, [k], [1, ttlMs]));
+        const count = Number(res[0]);
+        return { count, allowed: count <= limit, resetMs: Math.max(0, Number(res[1])), limit };
     }
     async slidingWindowCounter(key, ttlMs, limit) {
         const now = Date.now();
@@ -225,16 +236,13 @@ class RedisStorage {
     }
     async incrementConcurrent(key) {
         const k = this.k(`burst:${key}`);
-        const next = await this.client.incr(k);
-        await this.client.pexpire(k, 60_000);
-        return next;
+        const next = await this.runScript('shieldBurstIncrement', BURST_INCREMENT_LUA, [k], [60_000]);
+        return Number(next);
     }
     async decrementConcurrent(key) {
         const k = this.k(`burst:${key}`);
-        const next = await this.client.decr(k);
-        if (next <= 0)
-            await this.client.del(k);
-        return Math.max(0, next);
+        const next = await this.runScript('shieldBurstDecrement', BURST_DECREMENT_LUA, [k], []);
+        return Math.max(0, Number(next));
     }
     k(key) {
         return this.prefix ? `${this.prefix}:${key}` : key;
@@ -255,6 +263,8 @@ class RedisStorage {
             this.client.defineCommand('shieldSlidingLog', { numberOfKeys: 1, lua: SLIDING_LOG_LUA });
             this.client.defineCommand('shieldSlidingCounter', { numberOfKeys: 2, lua: SLIDING_COUNTER_LUA });
             this.client.defineCommand('shieldIncrement', { numberOfKeys: 1, lua: INCREMENT_LUA });
+            this.client.defineCommand('shieldBurstIncrement', { numberOfKeys: 1, lua: BURST_INCREMENT_LUA });
+            this.client.defineCommand('shieldBurstDecrement', { numberOfKeys: 1, lua: BURST_DECREMENT_LUA });
             this.commandsDefined = true;
         }
         catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nestjs-shield",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Layered API protection for NestJS: rate limiting, IP allow/block lists, auto-ban, slow-down, UA filtering, burst caps, payload limits. Pluggable storage (memory/Redis).",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -51,8 +51,8 @@
     "node": ">=18"
   },
   "peerDependencies": {
-    "@nestjs/common": "^9.0.0 || ^10.0.0 || ^11.0.0",
-    "@nestjs/core": "^9.0.0 || ^10.0.0 || ^11.0.0",
+    "@nestjs/common": "^9.0.0 || ^10.0.0 || ^11.0.0 || ^12.0.0",
+    "@nestjs/core": "^9.0.0 || ^10.0.0 || ^11.0.0 || ^12.0.0",
     "reflect-metadata": "^0.1.13 || ^0.2.0",
     "rxjs": "^7.0.0"
   },
@@ -65,9 +65,9 @@
     "ipaddr.js": "^2.2.0"
   },
   "devDependencies": {
-    "@nestjs/common": "^10.4.0",
-    "@nestjs/core": "^10.4.0",
-    "@types/node": "^20.12.0",
+    "@nestjs/common": "^12.0.1",
+    "@nestjs/core": "^12.0.1",
+    "@types/node": "^22.0.0",
     "ioredis": "^5.4.1",
     "reflect-metadata": "^0.2.2",
     "rimraf": "^5.0.7",