node-red-contrib-ipgeolocation 1.0.0 → 1.0.2

package/README.md

@@ -8,7 +8,7 @@
 [![Node.js](https://img.shields.io/badge/node-%3E%3D14-43853d.svg)](https://nodejs.org)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
 
-A complete, production-ready set of **Node-RED IP geolocation nodes**. Look up the country, city, latitude, and longitude of any IP address or domain, score IPs for proxy, VPN, TOR, and bot risk, resolve ASN and abuse-contact data, parse user-agent strings, and fetch timezone and astronomy data, all from low-code Node-RED flows.
+A complete, production-ready set of **Node-RED IP geolocation nodes**. Look up the country, city, latitude, and longitude of any IP address or domain, score IPs for proxy, VPN, Tor, and bot risk, resolve ASN and abuse-contact data, parse user-agent strings, and fetch timezone and astronomy data, all from low-code Node-RED flows.
 
 ---
 
@@ -37,11 +37,11 @@ A complete, production-ready set of **Node-RED IP geolocation nodes**. Look up t
 
 - **Single IP geolocation:** resolve country, region, city, latitude, longitude, currency, and timezone for any IPv4, IPv6, or domain.
 - **Bulk IP geolocation:** process up to 50,000 IP addresses in one request.
-- **IP security and threat intelligence:** detect proxy, VPN, TOR, bot, and threat scores for fraud prevention and access control.
+- **IP security and threat intelligence:** detect proxy, VPN, Tor, bot, and threat scores for fraud prevention and access control.
 - **Bulk security lookup:** score large IP lists in a single call.
 - **Abuse contact lookup:** retrieve the abuse email, phone, and owning organization for an IP.
 - **ASN lookup:** resolve Autonomous System details by IP or AS number.
-- **Timezone API:** get timezone data by name, IP, coordinates, city, IATA code, ICAO code, or UN/LOCODE.
+- **Time Zone API:** get timezone data by name, IP, coordinates, city, IATA code, ICAO code, or UN/LOCODE.
 - **Astronomy API:** sunrise, sunset, moonrise, moonset, twilight phases, moon phase, and solar and lunar positions by coordinates, address, or IP.
 - **User-agent parser:** identify browser, device, OS, and engine from a user-agent string.
 - **Developer friendly:** dynamic `msg`, `flow`, and `global` inputs, an optional dedicated error output, automatic retries with exponential backoff, secure credential storage, and per-request credit reporting.
@@ -91,6 +91,13 @@ cd ~/.node-red
 npm install node-red-contrib-ipgeolocation
 ```
 
+For an existing installation, update the package and refresh its HTTP dependencies in the Node-RED user directory:
+
+```bash
+npm install node-red-contrib-ipgeolocation@latest
+npm update axios follow-redirects
+```
+
 Restart Node-RED. All ten nodes appear under the **IPGeolocation** category in the palette.
 
 ---
@@ -159,7 +166,7 @@ Include modules:
 
 | Module | Extra credits | Adds |
 |--------|:---:|------|
-| `security` | +2 | Proxy, VPN, TOR, bot, threat score |
+| `security` | +2 | Proxy, VPN, Tor, bot, threat score |
 | `abuse` | +1 | Abuse contact (email, phone, org) |
 | `user_agent` | 0 | Parsed user-agent |
 | `geo_accuracy` | 0 | Accuracy radius and confidence |
@@ -184,7 +191,7 @@ const resolved = msg.payload.filter(r => r.ip);
 
 ### ipgeo-security: IP security and threat intelligence
 
-Single-IP risk lookup: proxy, VPN, TOR, and bot detection plus a threat score, useful for fraud checks, login protection, and access control. Supports **Fields** and **Excludes**.
+Single-IP risk lookup: proxy, VPN, Tor, and bot detection plus a threat score, useful for fraud checks, login protection, and access control. Supports **Fields** and **Excludes**.
 
 ### ipgeo-bulk-security: bulk IP security
 
@@ -213,7 +220,7 @@ Looks up Autonomous System details. The **Query type** selects what gets sent:
 
 Supports an **Include** list (`peers`, `downstreams`, `upstreams`, and more), overridable per message via `msg.ipgeo_include`, plus **Fields** and **Excludes**.
 
-### ipgeo-timezone: timezone API
+### ipgeo-timezone: Time Zone API
 
 Seven lookup modes:
 
@@ -223,9 +230,9 @@ Seven lookup modes:
 | IP address | `ip` | `8.8.8.8` |
 | Address / city | `location` | `Paris, France` |
 | Coordinates | `lat` + `long` | `48.8566`, `2.3522` |
-| IATA airport | `iata` | `CDG` |
-| ICAO airport | `icao` | `LFPG` |
-| UN/LOCODE | `location` | `FRPAR` |
+| IATA airport | `iata_code` | `CDG` |
+| ICAO airport | `icao_code` | `LFPG` |
+| UN/LOCODE | `lo_code` | `FRPAR` |
 
 Returns `INVALID_INPUT` when the value required for the chosen mode is missing.
 
@@ -287,7 +294,7 @@ On failure, the node sets `msg.error` with a typed `code`, a readable `message`,
 | `FORBIDDEN` | Plan restriction or origin not whitelisted (HTTP 403) |
 | `NOT_FOUND` | Endpoint or resource not found (HTTP 404) |
 | `VALIDATION` | Validation error (HTTP 422) |
-| `LOCKED` | Key locked, quota exceeded, or account suspended (HTTP 423) |
+| `LOCKED` | Private or bogon IP address (HTTP 423). Check that the input is a valid public IP and that your application resolved the visitor's address correctly. Localhost and private-network addresses cannot be geolocated. |
 | `RATE_LIMITED` | Too many requests (HTTP 429) |
 | `SERVER_ERROR` | API internal error (HTTP 500) |
 | `HTTP_ERROR` | Any other non-2xx status |
@@ -363,20 +370,25 @@ Each node reports the real charge in `msg.ipgeo_credits`. See the [Credits Usage
 ## Development and testing
 
 ```bash
-npm install      # install dependencies
+npm ci           # install the locked dependencies
 npm test         # run the mocha test suite
 npm run coverage # run tests with an HTML and text coverage report
+npm run audit:security # check runtime and development dependencies
+npm run test:package   # test fresh installs and upgrades of the packed npm package
+npm run test:http      # test HTTPS behavior with the locally installed Postman CLI
 ```
 
 Tests use `mocha`, `node-red-node-test-helper`, `should`, and `nock`, with all HTTP fully mocked so the suite runs offline with no live API calls. Specs live in `test/**/*_spec.js` and cover the shared API client, the helpers, every node, and the bundled example flows.
 
+`test:http` starts a local Postman simulation and checks real HTTPS requests, redirects, retries and timeouts. It uses test credentials and stops the proxy when the checks finish. `test:package` requires registry access to verify fresh installations and upgrades from version 1.0.1, including an existing lock with current Axios and an older redirect dependency.
+
 ---
 
 ## Frequently Asked Questions
 
 <details>
 <summary><strong>How do I get an IPGeolocation.io API key?</strong></summary>
-Sign up for a free account at <code>app.ipgeolocation.io/signup</code>. The free tier provides enough usage to evaluate every node included in this package.
+Sign up for a free account at <code>app.ipgeolocation.io/signup</code>. The free plan covers the lookup, timezone, astronomy, and user-agent nodes, within free-plan fields and options. Bulk, security, dedicated ASN, and abuse nodes require a paid plan.
 </details>
 
 <details>
@@ -390,8 +402,8 @@ Yes. Use the <code>ipgeo-bulk</code> node for geolocation lookups or the <code>i
 </details>
 
 <details>
-<summary><strong>How do I detect VPNs, proxies, or TOR exit nodes?</strong></summary>
-Use the <code>ipgeo-security</code> node, or enable the <code>security</code> include module when using <code>ipgeo-lookup</code>. The response includes fields indicating proxy usage, VPN detection, TOR exit node status, and other threat-related information.
+<summary><strong>How do I detect VPNs, proxies, or Tor exit nodes?</strong></summary>
+Use the <code>ipgeo-security</code> node, or enable the <code>security</code> include module when using <code>ipgeo-lookup</code>. The response includes fields indicating proxy usage, VPN detection, Tor exit node status, and other threat-related information.
 </details>
 
 <details>

package/nodes/ipgeo-timezone.js

@@ -32,9 +32,9 @@ const MODE_PARAM = {
   ip:       'ip',
   location: 'location',
   coords:   null,          // lat + lng are separate params
-  iata:     'iata',
-  icao:     'icao',
-  unlocode: 'location',    // UN/LO code is passed as 'location'
+  iata:     'iata_code',
+  icao:     'icao_code',
+  unlocode: 'lo_code',    // UN/LO code is passed as 'location'
 };
 
 module.exports = function (RED) {

package/nodes/lib/api-client.js

@@ -76,7 +76,7 @@ function mapAxiosError(err) {
       case 422: return new IPGeoError(
         `Unprocessable entity: ${apiMsg || 'Validation error'}`, 'VALIDATION', 422, data);
       case 423: return new IPGeoError(
-        `API key locked: ${apiMsg || 'Quota exceeded or account suspended'}`, 'LOCKED', 423, data);
+        `Private or bogon IP address: ${apiMsg || 'Localhost and private-network addresses cannot be geolocated'}`, 'LOCKED', 423, data);
       case 429: return new IPGeoError(
         `Rate limit exceeded: ${apiMsg || 'Too many requests'}`, 'RATE_LIMITED', 429, data);
       case 500: return new IPGeoError(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-red-contrib-ipgeolocation",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Node-RED nodes for the IPGeolocation.io v3 API: IP geolocation, security and threat intelligence (VPN, proxy, and TOR detection), abuse contacts, ASN lookup, bulk IP processing, timezone, astronomy, and user-agent parsing.",
   "keywords": [
     "node-red",
@@ -44,15 +44,15 @@
     }
   },
   "dependencies": {
-    "axios": "^1.18.0"
+    "axios": "^1.21.0"
   },
   "devDependencies": {
-    "@node-red/editor-client": "^3.1.9",
-    "mocha": "^10.8.2",
+    "@node-red/editor-client": "^4.1.17",
+    "mocha": "^12.0.2",
     "nock": "^13.5.6",
-    "node-red": "^3.1.15",
+    "node-red": "^4.1.17",
     "node-red-node-test-helper": "^0.3.6",
-    "nyc": "^15.1.0",
+    "nyc": "^18.0.0",
     "should": "^13.2.3",
     "sinon": "^17.0.1"
   },
@@ -65,8 +65,20 @@
   ],
   "scripts": {
     "test": "mocha",
+    "test:http": "node test/run-http.js",
+    "test:package": "node test/package-install.js",
+    "audit:security": "node scripts/audit.js",
     "test:watch": "mocha --watch",
     "coverage": "nyc --reporter=text --reporter=html mocha",
-    "prepublishOnly": "npm test"
+    "prepublishOnly": "npm test && npm run audit:security"
+  },
+  "overrides": {
+    "@node-red/registry": {
+      "npm": "^11.21.1"
+    },
+    "multer": "^2.5.0",
+    "express": "^4.22.3",
+    "qs": "^6.17.0",
+    "body-parser@^1": "^1.20.9"
   }
-}
+}