securenow 5.18.0 → 6.0.0

package/nuxt.mjs

@@ -1,75 +0,0 @@
-/**
- * SecureNow Nuxt 3 Module
- *
- * Usage in nuxt.config.ts:
- *
- *   export default defineNuxtConfig({
- *     modules: ['securenow/nuxt'],
- *     securenow: {            // optional overrides
- *       serviceName: 'my-nuxt-app',
- *     },
- *   });
- *
- * Environment variables (same as all SecureNow integrations):
- *   SECURENOW_APPID, SECURENOW_INSTANCE, SECURENOW_LOGGING_ENABLED, etc.
- */
-
-import { defineNuxtModule, createResolver, addServerPlugin } from '@nuxt/kit';
-
-const OTEL_EXTERNALS = [
-  'securenow',
-  '@opentelemetry/api',
-  '@opentelemetry/api-logs',
-  '@opentelemetry/sdk-node',
-  '@opentelemetry/sdk-logs',
-  '@opentelemetry/auto-instrumentations-node',
-  '@opentelemetry/instrumentation',
-  '@opentelemetry/instrumentation-http',
-  '@opentelemetry/exporter-trace-otlp-http',
-  '@opentelemetry/exporter-logs-otlp-http',
-  '@opentelemetry/resources',
-  '@opentelemetry/semantic-conventions',
-];
-
-export default defineNuxtModule({
-  meta: {
-    name: 'securenow',
-    configKey: 'securenow',
-    compatibility: { nuxt: '>=3.0.0' },
-  },
-
-  defaults: {
-    serviceName: undefined,
-    endpoint: undefined,
-    noUuid: undefined,
-    captureBody: undefined,
-    logging: undefined,
-  },
-
-  setup(options, nuxt) {
-    const { resolve } = createResolver(import.meta.url);
-
-    // ── Externalize OTel packages so Nitro doesn't bundle them ──
-    nuxt.hook('nitro:config', (nitroConfig) => {
-      nitroConfig.externals = nitroConfig.externals || {};
-      nitroConfig.externals.external = [
-        ...(nitroConfig.externals.external || []),
-        ...OTEL_EXTERNALS,
-      ];
-    });
-
-    // ── Pass module options to the server plugin via runtimeConfig ──
-    nuxt.options.runtimeConfig.securenow = {
-      serviceName: options.serviceName,
-      endpoint: options.endpoint,
-      noUuid: options.noUuid,
-      captureBody: options.captureBody,
-      logging: options.logging,
-    };
-
-    // ── Register Nitro server plugin ──
-    addServerPlugin(resolve('./nuxt-server-plugin'));
-
-    console.log('[securenow] Nuxt module loaded — server plugin registered');
-  },
-});

package/resolve-ip.js

@@ -1,77 +0,0 @@
-'use strict';
-
-const os = require('os');
-
-const LOOPBACK_RE = /^(127\.|::1$|::ffff:127\.)/;
-const PRIVATE_IP_RE = /^(127\.|::1$|::ffff:127\.|10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|f[cd][0-9a-f]{2}:)/;
-
-const trustedProxyCsv = (process.env.SECURENOW_TRUSTED_PROXIES || '').trim();
-const trustedProxySet = trustedProxyCsv
-  ? new Set(trustedProxyCsv.split(',').map(s => s.trim()).filter(Boolean))
-  : null;
-
-let _hostIp = null;
-function getHostIp() {
-  if (_hostIp !== null) return _hostIp;
-  try {
-    const ifaces = os.networkInterfaces();
-    for (const name of Object.keys(ifaces)) {
-      for (const iface of ifaces[name]) {
-        if (!iface.internal && iface.family === 'IPv4') { _hostIp = iface.address; return _hostIp; }
-      }
-    }
-  } catch (_) {}
-  _hostIp = '';
-  return _hostIp;
-}
-
-function isFromTrustedProxy(socketIp) {
-  if (!socketIp) return false;
-  const normalized = socketIp.replace(/^::ffff:/, '');
-  if (trustedProxySet && trustedProxySet.has(normalized)) return true;
-  return PRIVATE_IP_RE.test(socketIp);
-}
-
-/**
- * Resolve the real client IP from an HTTP request, respecting trusted proxies.
- * Reads X-Forwarded-For / X-Real-IP only when the direct connection comes
- * from a private/trusted proxy IP. Prevents client-side IP spoofing.
- */
-function resolveClientIp(request) {
-  const socketIp = request.socket?.remoteAddress || '';
-  if (!isFromTrustedProxy(socketIp)) return socketIp;
-
-  const fwd = request.headers['x-forwarded-for'];
-  if (fwd) {
-    const chain = String(fwd).split(',').map(s => s.trim()).filter(Boolean);
-    for (let i = chain.length - 1; i >= 0; i--) {
-      if (!isFromTrustedProxy(chain[i])) return chain[i];
-    }
-    return socketIp;
-  }
-  const headerIp = request.headers['x-real-ip'];
-  if (headerIp) return headerIp;
-
-  if (LOOPBACK_RE.test(socketIp)) {
-    const hostIp = getHostIp();
-    if (hostIp) return hostIp;
-  }
-  return socketIp;
-}
-
-/**
- * Resolve IP from a raw TCP socket (no HTTP headers available).
- * Normalizes IPv6-mapped IPv4 addresses.
- */
-function resolveSocketIp(socket) {
-  const raw = socket?.remoteAddress || '';
-  return raw.replace(/^::ffff:/, '');
-}
-
-module.exports = {
-  resolveClientIp,
-  resolveSocketIp,
-  isFromTrustedProxy,
-  LOOPBACK_RE,
-  PRIVATE_IP_RE,
-};