xypriss 2.3.4 → 2.3.5

package/dist/esm/src/server/utils/trustProxy.js

@@ -0,0 +1,444 @@
+import { isIP } from 'net';
+
+/**
+ * Advanced Trust Proxy Implementation for XyPriss
+ *
+ * Supports Express-like trust proxy configurations including:
+ * - Boolean values (true/false)
+ * - String values ('loopback', 'linklocal', 'uniquelocal')
+ * - CIDR notation ('192.168.0.0/16')
+ * - IP addresses ('127.0.0.1')
+ * - Arrays of the above
+ * - Custom functions
+ */
+/**
+ * Predefined network ranges
+ */
+const PREDEFINED_RANGES = {
+    loopback: ["127.0.0.0/8", "::1/128"],
+    linklocal: ["169.254.0.0/16", "fe80::/10"],
+    uniquelocal: ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16", "fc00::/7"],
+};
+class TrustProxy {
+    constructor(config) {
+        this.trustProxyFn = this.createTrustProxyFunction(config);
+    }
+    /**
+     * Validate and normalize IP address string
+     */
+    normalizeIP(ip) {
+        if (!ip || typeof ip !== "string")
+            return null;
+        const trimmed = ip.trim();
+        if (!trimmed)
+            return null;
+        // Handle IPv4-mapped IPv6 addresses (::ffff:192.168.1.1)
+        if (trimmed.startsWith("::ffff:") && trimmed.includes(".")) {
+            const ipv4Part = trimmed.substring(7);
+            if (isIP(ipv4Part) === 4) {
+                return ipv4Part;
+            }
+        }
+        // Validate it's a proper IP
+        const ipVersion = isIP(trimmed);
+        if (ipVersion === 0)
+            return null;
+        return trimmed;
+    }
+    /**
+     * Convert IPv4 address to number for comparison
+     */
+    ipv4ToNumber(ip) {
+        try {
+            const parts = ip.split(".");
+            if (parts.length !== 4)
+                return null;
+            const nums = parts.map((p) => {
+                const num = parseInt(p, 10);
+                if (isNaN(num) || num < 0 || num > 255)
+                    throw new Error("Invalid octet");
+                return num;
+            });
+            return (nums[0] << 24) + (nums[1] << 16) + (nums[2] << 8) + nums[3];
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Check if IPv4 address is in CIDR range
+     */
+    isIPv4InCIDR(ip, cidr) {
+        try {
+            const parts = cidr.split("/");
+            if (parts.length !== 2)
+                return false;
+            const [network, prefixLength] = parts;
+            const prefixLen = parseInt(prefixLength, 10);
+            if (isNaN(prefixLen) || prefixLen < 0 || prefixLen > 32)
+                return false;
+            const ipNum = this.ipv4ToNumber(ip);
+            const networkNum = this.ipv4ToNumber(network);
+            if (ipNum === null || networkNum === null)
+                return false;
+            // Handle edge cases
+            if (prefixLen === 0)
+                return true; // 0.0.0.0/0 matches everything
+            if (prefixLen === 32)
+                return ipNum === networkNum; // Exact match
+            const mask = (0xffffffff << (32 - prefixLen)) >>> 0;
+            return (ipNum & mask) === (networkNum & mask);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Expand IPv6 address to full form
+     */
+    expandIPv6(ip) {
+        try {
+            if (!ip.includes(":"))
+                return null;
+            // Handle :: compression
+            if (ip.includes("::")) {
+                const parts = ip.split("::");
+                if (parts.length > 2)
+                    return null; // Invalid: multiple ::
+                const left = parts[0] ? parts[0].split(":") : [];
+                const right = parts[1] ? parts[1].split(":") : [];
+                const missing = 8 - left.length - right.length;
+                if (missing < 0)
+                    return null; // Too many parts
+                const middle = Array(missing).fill("0000");
+                const allParts = [...left, ...middle, ...right];
+                // Pad each part to 4 hex digits
+                return allParts.map((p) => p.padStart(4, "0")).join(":");
+            }
+            // No compression
+            const parts = ip.split(":");
+            if (parts.length !== 8)
+                return null;
+            return parts.map((p) => p.padStart(4, "0")).join(":");
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Convert IPv6 address to BigInt for comparison
+     */
+    ipv6ToBigInt(ip) {
+        try {
+            const expanded = this.expandIPv6(ip);
+            if (!expanded)
+                return null;
+            const parts = expanded.split(":");
+            if (parts.length !== 8)
+                return null;
+            let result = 0n;
+            for (let i = 0; i < 8; i++) {
+                const val = parseInt(parts[i], 16);
+                if (isNaN(val) || val < 0 || val > 0xffff)
+                    return null;
+                result = (result << 16n) + BigInt(val);
+            }
+            return result;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Check if IPv6 address is in CIDR range
+     */
+    isIPv6InCIDR(ip, cidr) {
+        try {
+            const parts = cidr.split("/");
+            if (parts.length !== 2)
+                return false;
+            const [network, prefixLength] = parts;
+            const prefixLen = parseInt(prefixLength, 10);
+            if (isNaN(prefixLen) || prefixLen < 0 || prefixLen > 128)
+                return false;
+            const ipNum = this.ipv6ToBigInt(ip);
+            const networkNum = this.ipv6ToBigInt(network);
+            if (ipNum === null || networkNum === null)
+                return false;
+            // Handle edge cases
+            if (prefixLen === 0)
+                return true; // ::/0 matches everything
+            if (prefixLen === 128)
+                return ipNum === networkNum; // Exact match
+            const mask = (BigInt(2) ** BigInt(128) - BigInt(1)) <<
+                BigInt(128 - prefixLen);
+            return (ipNum & mask) === (networkNum & mask);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Check if IP address is in CIDR range
+     */
+    isIPInCIDR(ip, cidr) {
+        if (!ip || !cidr)
+            return false;
+        const ipVersion = isIP(ip);
+        if (ipVersion === 0)
+            return false;
+        // Determine CIDR type
+        const isCIDRv4 = cidr.includes(".") && cidr.includes("/");
+        const isCIDRv6 = cidr.includes(":") && cidr.includes("/");
+        if (ipVersion === 4 && isCIDRv4) {
+            return this.isIPv4InCIDR(ip, cidr);
+        }
+        else if (ipVersion === 6 && isCIDRv6) {
+            return this.isIPv6InCIDR(ip, cidr);
+        }
+        return false;
+    }
+    /**
+     * Check if IP matches a single trust proxy rule
+     */
+    matchesTrustRule(ip, rule) {
+        if (!ip || !rule)
+            return false;
+        try {
+            // Handle predefined ranges
+            if (rule in PREDEFINED_RANGES) {
+                const ranges = PREDEFINED_RANGES[rule];
+                return ranges.some((range) => this.isIPInCIDR(ip, range));
+            }
+            // Handle CIDR notation
+            if (rule.includes("/")) {
+                return this.isIPInCIDR(ip, rule);
+            }
+            // Handle exact IP match (normalize both for comparison)
+            const normalizedIP = this.normalizeIP(ip);
+            const normalizedRule = this.normalizeIP(rule);
+            if (!normalizedIP || !normalizedRule)
+                return false;
+            return normalizedIP === normalizedRule;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Create a trust proxy function from configuration
+     */
+    createTrustProxyFunction(config) {
+        // Handle boolean values
+        if (typeof config === "boolean") {
+            return () => config;
+        }
+        // Handle number values (trust first N hops)
+        if (typeof config === "number") {
+            if (!Number.isInteger(config) || config < 0) {
+                throw new Error("Trust proxy number must be a non-negative integer");
+            }
+            return (_ip, hopIndex) => hopIndex < config;
+        }
+        // Handle function values
+        if (typeof config === "function") {
+            return (ip, hopIndex) => {
+                try {
+                    return Boolean(config(ip, hopIndex));
+                }
+                catch {
+                    return false; // Safe default on function error
+                }
+            };
+        }
+        // Handle string values
+        if (typeof config === "string") {
+            const trimmed = config.trim();
+            if (!trimmed)
+                return () => false;
+            return (ip) => this.matchesTrustRule(ip, trimmed);
+        }
+        // Handle array values
+        if (Array.isArray(config)) {
+            const validRules = config.filter((rule) => typeof rule === "string" && rule.trim());
+            if (validRules.length === 0)
+                return () => false;
+            return (ip) => validRules.some((rule) => this.matchesTrustRule(ip, rule));
+        }
+        // Default: don't trust
+        return () => false;
+    }
+    /**
+     * Safely parse X-Forwarded-For header
+     */
+    parseForwardedFor(header) {
+        if (!header)
+            return [];
+        // Handle array form (shouldn't happen but be defensive)
+        const headerStr = Array.isArray(header) ? header.join(",") : header;
+        if (typeof headerStr !== "string")
+            return [];
+        return headerStr
+            .split(",")
+            .map((ip) => this.normalizeIP(ip))
+            .filter((ip) => ip !== null);
+    }
+    /**
+     * Get remote address with fallback
+     */
+    getRemoteAddress(req) {
+        const remoteAddr = req.socket?.remoteAddress;
+        if (!remoteAddr)
+            return "127.0.0.1";
+        const normalized = this.normalizeIP(remoteAddr);
+        return normalized || "127.0.0.1";
+    }
+    /**
+     * Extract client IP considering trust proxy configuration
+     */
+    extractClientIP(req) {
+        try {
+            const forwardedFor = req.headers["x-forwarded-for"];
+            const ips = this.parseForwardedFor(forwardedFor);
+            if (ips.length === 0) {
+                // No forwarded headers, return direct connection IP
+                return this.getRemoteAddress(req);
+            }
+            // Start from the rightmost IP (closest to server) and work backwards
+            const directIP = this.getRemoteAddress(req);
+            let trustedIP = directIP;
+            // Process IPs from right to left (closest to server first)
+            for (let i = ips.length - 1; i >= 0; i--) {
+                const hopIndex = ips.length - 1 - i;
+                const currentIP = ips[i];
+                // Check if we trust this hop
+                if (this.trustProxyFn(trustedIP, hopIndex)) {
+                    trustedIP = currentIP;
+                }
+                else {
+                    // Stop at first untrusted hop
+                    break;
+                }
+            }
+            return trustedIP;
+        }
+        catch {
+            // On any error, return the direct connection IP as safe default
+            return this.getRemoteAddress(req);
+        }
+    }
+    /**
+     * Extract all IPs in the proxy chain
+     */
+    extractProxyChain(req) {
+        try {
+            const forwardedFor = req.headers["x-forwarded-for"];
+            const ips = this.parseForwardedFor(forwardedFor);
+            const directIP = this.getRemoteAddress(req);
+            if (ips.length === 0) {
+                return [directIP];
+            }
+            const trustedIPs = [directIP];
+            // Process IPs from right to left
+            for (let i = ips.length - 1; i >= 0; i--) {
+                const hopIndex = ips.length - 1 - i;
+                const currentIP = ips[i];
+                const previousIP = trustedIPs[trustedIPs.length - 1];
+                if (this.trustProxyFn(previousIP, hopIndex)) {
+                    trustedIPs.push(currentIP);
+                }
+                else {
+                    break;
+                }
+            }
+            return trustedIPs.reverse(); // Return in client -> server order
+        }
+        catch {
+            return [this.getRemoteAddress(req)];
+        }
+    }
+    /**
+     * Determine if connection is secure based on trust proxy
+     */
+    isSecureConnection(req) {
+        try {
+            // Check if we have a direct TLS connection
+            const socket = req.socket;
+            if (socket?.encrypted === true) {
+                return true;
+            }
+            // Check X-Forwarded-Proto header if we trust the proxy
+            const forwardedProto = req.headers["x-forwarded-proto"];
+            if (!forwardedProto)
+                return false;
+            const directIP = this.getRemoteAddress(req);
+            if (!this.trustProxyFn(directIP, 0))
+                return false;
+            // Handle both string and array forms
+            const protoStr = Array.isArray(forwardedProto)
+                ? forwardedProto[0]
+                : forwardedProto;
+            if (typeof protoStr !== "string")
+                return false;
+            // Take first value if comma-separated
+            const proto = protoStr.split(",")[0].trim().toLowerCase();
+            return proto === "https";
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get protocol considering trust proxy
+     */
+    getProtocol(req) {
+        return this.isSecureConnection(req) ? "https" : "http";
+    }
+    /**
+     * Get hostname considering trust proxy
+     */
+    getHostname(req) {
+        try {
+            const directIP = this.getRemoteAddress(req);
+            // Check X-Forwarded-Host if we trust the proxy
+            const forwardedHost = req.headers["x-forwarded-host"];
+            if (forwardedHost && this.trustProxyFn(directIP, 0)) {
+                const hostStr = Array.isArray(forwardedHost)
+                    ? forwardedHost[0]
+                    : forwardedHost;
+                if (typeof hostStr === "string" && hostStr.trim()) {
+                    // Take first host if comma-separated, remove port
+                    const hostname = hostStr.split(",")[0].trim().split(":")[0];
+                    if (hostname)
+                        return hostname;
+                }
+            }
+            // Fallback to Host header
+            const host = req.headers.host;
+            if (host && typeof host === "string") {
+                const hostname = host.split(":")[0];
+                if (hostname)
+                    return hostname;
+            }
+            return "localhost";
+        }
+        catch {
+            return "localhost";
+        }
+    }
+    /**
+     * Validate trust proxy configuration
+     */
+    static validate(config) {
+        try {
+            new TrustProxy(config);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+
+export { TrustProxy };
+//# sourceMappingURL=trustProxy.js.map

package/dist/esm/src/server/utils/trustProxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustProxy.js","sources":["../../../../../src/server/utils/trustProxy.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;;;;;;;AAUG;AAYH;;AAEG;AACH,MAAM,iBAAiB,GAAG;AACtB,IAAA,QAAQ,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC;AACpC,IAAA,SAAS,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAC1C,WAAW,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,CAAC;CACpE,CAAC;MAEE,UAAU,CAAA;AAGnB,IAAA,WAAA,CAAY,MAAuB,EAAA;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;KAC7D;AAED;;AAEG;AACK,IAAA,WAAW,CAAC,EAAU,EAAA;AAC1B,QAAA,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;AAAE,YAAA,OAAO,IAAI,CAAC;AAE/C,QAAA,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;AAC1B,QAAA,IAAI,CAAC,OAAO;AAAE,YAAA,OAAO,IAAI,CAAC;;AAG1B,QAAA,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;YACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACtC,YAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;AACtB,gBAAA,OAAO,QAAQ,CAAC;aACnB;SACJ;;AAGD,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,SAAS,KAAK,CAAC;AAAE,YAAA,OAAO,IAAI,CAAC;AAEjC,QAAA,OAAO,OAAO,CAAC;KAClB;AAED;;AAEG;AACK,IAAA,YAAY,CAAC,EAAU,EAAA;AAC3B,QAAA,IAAI;YACA,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI,CAAC;YAEpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAI;gBACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG;AAClC,oBAAA,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;AACrC,gBAAA,OAAO,GAAG,CAAC;AACf,aAAC,CAAC,CAAC;AAEH,YAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;SACvE;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI,CAAC;SACf;KACJ;AAED;;AAEG;IACK,YAAY,CAAC,EAAU,EAAE,IAAY,EAAA;AACzC,QAAA,IAAI;YACA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,KAAK,CAAC;AAErC,YAAA,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;YACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAE7C,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,EAAE;AACnD,gBAAA,OAAO,KAAK,CAAC;YAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AAE9C,YAAA,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI;AAAE,gBAAA,OAAO,KAAK,CAAC;;YAGxD,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,IAAI,SAAS,KAAK,EAAE;AAAE,gBAAA,OAAO,KAAK,KAAK,UAAU,CAAC;AAElD,YAAA,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAEpD,OAAO,CAAC,KAAK,GAAG,IAAI,OAAO,UAAU,GAAG,IAAI,CAAC,CAAC;SACjD;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK,CAAC;SAChB;KACJ;AAED;;AAEG;AACK,IAAA,UAAU,CAAC,EAAU,EAAA;AACzB,QAAA,IAAI;AACA,YAAA,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;AAAE,gBAAA,OAAO,IAAI,CAAC;;AAGnC,YAAA,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;gBACnB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,gBAAA,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAElC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAE/C,IAAI,OAAO,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAE7B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,gBAAA,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;;gBAGhD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC5D;;YAGD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI,CAAC;YAEpC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACzD;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI,CAAC;SACf;KACJ;AAED;;AAEG;AACK,IAAA,YAAY,CAAC,EAAU,EAAA;AAC3B,QAAA,IAAI;YACA,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACrC,YAAA,IAAI,CAAC,QAAQ;AAAE,gBAAA,OAAO,IAAI,CAAC;YAE3B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAClC,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI,CAAC;YAEpC,IAAI,MAAM,GAAG,EAAE,CAAC;AAEhB,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;gBACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM;AAAE,oBAAA,OAAO,IAAI,CAAC;gBACvD,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;aAC1C;AAED,YAAA,OAAO,MAAM,CAAC;SACjB;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI,CAAC;SACf;KACJ;AAED;;AAEG;IACK,YAAY,CAAC,EAAU,EAAE,IAAY,EAAA;AACzC,QAAA,IAAI;YACA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,KAAK,CAAC;AAErC,YAAA,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;YACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAE7C,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,GAAG;AACpD,gBAAA,OAAO,KAAK,CAAC;YAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AAE9C,YAAA,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI;AAAE,gBAAA,OAAO,KAAK,CAAC;;YAGxD,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,IAAI,SAAS,KAAK,GAAG;AAAE,gBAAA,OAAO,KAAK,KAAK,UAAU,CAAC;AAEnD,YAAA,MAAM,IAAI,GACN,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACrC,gBAAA,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;YAE5B,OAAO,CAAC,KAAK,GAAG,IAAI,OAAO,UAAU,GAAG,IAAI,CAAC,CAAC;SACjD;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK,CAAC;SAChB;KACJ;AAED;;AAEG;IACK,UAAU,CAAC,EAAU,EAAE,IAAY,EAAA;AACvC,QAAA,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK,CAAC;AAE/B,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,CAAC;AAAE,YAAA,OAAO,KAAK,CAAC;;AAGlC,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC1D,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAE1D,QAAA,IAAI,SAAS,KAAK,CAAC,IAAI,QAAQ,EAAE;YAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;SACtC;AAAM,aAAA,IAAI,SAAS,KAAK,CAAC,IAAI,QAAQ,EAAE;YACpC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;SACtC;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;IACK,gBAAgB,CAAC,EAAU,EAAE,IAAY,EAAA;AAC7C,QAAA,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK,CAAC;AAE/B,QAAA,IAAI;;AAEA,YAAA,IAAI,IAAI,IAAI,iBAAiB,EAAE;AAC3B,gBAAA,MAAM,MAAM,GACR,iBAAiB,CAAC,IAAsC,CAAC,CAAC;AAC9D,gBAAA,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;aAC7D;;AAGD,YAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;gBACpB,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;aACpC;;YAGD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAE9C,YAAA,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc;AAAE,gBAAA,OAAO,KAAK,CAAC;YAEnD,OAAO,YAAY,KAAK,cAAc,CAAC;SAC1C;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK,CAAC;SAChB;KACJ;AAED;;AAEG;AACK,IAAA,wBAAwB,CAC5B,MAAuB,EAAA;;AAGvB,QAAA,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE;AAC7B,YAAA,OAAO,MAAM,MAAM,CAAC;SACvB;;AAGD,QAAA,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;AAC5B,YAAA,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE;AACzC,gBAAA,MAAM,IAAI,KAAK,CACX,mDAAmD,CACtD,CAAC;aACL;YACD,OAAO,CAAC,GAAW,EAAE,QAAgB,KAAK,QAAQ,GAAG,MAAM,CAAC;SAC/D;;AAGD,QAAA,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE;AAC9B,YAAA,OAAO,CAAC,EAAU,EAAE,QAAgB,KAAI;AACpC,gBAAA,IAAI;oBACA,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;iBACxC;AAAC,gBAAA,MAAM;oBACJ,OAAO,KAAK,CAAC;iBAChB;AACL,aAAC,CAAC;SACL;;AAGD,QAAA,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;AAC5B,YAAA,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,YAAA,IAAI,CAAC,OAAO;AAAE,gBAAA,OAAO,MAAM,KAAK,CAAC;AACjC,YAAA,OAAO,CAAC,EAAU,KAAK,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;SAC7D;;AAGD,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACvB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CACpD,CAAC;AACF,YAAA,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,MAAM,KAAK,CAAC;YAEhD,OAAO,CAAC,EAAU,KACd,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;SAClE;;AAGD,QAAA,OAAO,MAAM,KAAK,CAAC;KACtB;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,MAAqC,EAAA;AAC3D,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,EAAE,CAAC;;QAGvB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAEpE,IAAI,OAAO,SAAS,KAAK,QAAQ;AAAE,YAAA,OAAO,EAAE,CAAC;AAE7C,QAAA,OAAO,SAAS;aACX,KAAK,CAAC,GAAG,CAAC;AACV,aAAA,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,EAAE,KAAmB,EAAE,KAAK,IAAI,CAAC,CAAC;KAClD;AAED;;AAEG;AACK,IAAA,gBAAgB,CAAC,GAAoB,EAAA;AACzC,QAAA,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;AAC7C,QAAA,IAAI,CAAC,UAAU;AAAE,YAAA,OAAO,WAAW,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,UAAU,IAAI,WAAW,CAAC;KACpC;AAED;;AAEG;AACI,IAAA,eAAe,CAAC,GAAoB,EAAA;AACvC,QAAA,IAAI;YACA,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAEjD,YAAA,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;;AAElB,gBAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;aACrC;;YAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,SAAS,GAAG,QAAQ,CAAC;;AAGzB,YAAA,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;gBACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,gBAAA,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;;gBAGzB,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;oBACxC,SAAS,GAAG,SAAS,CAAC;iBACzB;qBAAM;;oBAEH,MAAM;iBACT;aACJ;AAED,YAAA,OAAO,SAAS,CAAC;SACpB;AAAC,QAAA,MAAM;;AAEJ,YAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;SACrC;KACJ;AAED;;AAEG;AACI,IAAA,iBAAiB,CAAC,GAAoB,EAAA;AACzC,QAAA,IAAI;YACA,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAE5C,YAAA,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;gBAClB,OAAO,CAAC,QAAQ,CAAC,CAAC;aACrB;AAED,YAAA,MAAM,UAAU,GAAa,CAAC,QAAQ,CAAC,CAAC;;AAGxC,YAAA,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;gBACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,gBAAA,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAErD,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;AACzC,oBAAA,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBAC9B;qBAAM;oBACH,MAAM;iBACT;aACJ;AAED,YAAA,OAAO,UAAU,CAAC,OAAO,EAAE,CAAC;SAC/B;AAAC,QAAA,MAAM;YACJ,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;SACvC;KACJ;AAED;;AAEG;AACI,IAAA,kBAAkB,CAAC,GAAoB,EAAA;AAC1C,QAAA,IAAI;;AAEA,YAAA,MAAM,MAAM,GAAG,GAAG,CAAC,MAAa,CAAC;AACjC,YAAA,IAAI,MAAM,EAAE,SAAS,KAAK,IAAI,EAAE;AAC5B,gBAAA,OAAO,IAAI,CAAC;aACf;;YAGD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACxD,YAAA,IAAI,CAAC,cAAc;AAAE,gBAAA,OAAO,KAAK,CAAC;YAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;AAAE,gBAAA,OAAO,KAAK,CAAC;;AAGlD,YAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;AAC1C,kBAAE,cAAc,CAAC,CAAC,CAAC;kBACjB,cAAc,CAAC;YACrB,IAAI,OAAO,QAAQ,KAAK,QAAQ;AAAE,gBAAA,OAAO,KAAK,CAAC;;AAG/C,YAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1D,OAAO,KAAK,KAAK,OAAO,CAAC;SAC5B;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK,CAAC;SAChB;KACJ;AAED;;AAEG;AACI,IAAA,WAAW,CAAC,GAAoB,EAAA;AACnC,QAAA,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC;KAC1D;AAED;;AAEG;AACI,IAAA,WAAW,CAAC,GAAoB,EAAA;AACnC,QAAA,IAAI;YACA,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;;YAG5C,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACtD,IAAI,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE;AACjD,gBAAA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;AACxC,sBAAE,aAAa,CAAC,CAAC,CAAC;sBAChB,aAAa,CAAC;gBACpB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE;;oBAE/C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,oBAAA,IAAI,QAAQ;AAAE,wBAAA,OAAO,QAAQ,CAAC;iBACjC;aACJ;;AAGD,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;AAC9B,YAAA,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;gBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,gBAAA,IAAI,QAAQ;AAAE,oBAAA,OAAO,QAAQ,CAAC;aACjC;AAED,YAAA,OAAO,WAAW,CAAC;SACtB;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,WAAW,CAAC;SACtB;KACJ;AAED;;AAEG;IACI,OAAO,QAAQ,CAAC,MAAuB,EAAA;AAC1C,QAAA,IAAI;AACA,YAAA,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AACvB,YAAA,OAAO,IAAI,CAAC;SACf;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK,CAAC;SAChB;KACJ;AACJ;;;;"}

package/dist/index.d.ts

@@ -94,6 +94,56 @@ type NextFunction = (error?: any) => void;
  */
 type RouteHandler$1 = (req: XyPrisRequest, res: XyPrisResponse, next?: NextFunction) => void | Promise<void>;
 
+/**
+ * Trust Proxy Type Definitions for XyPriss
+ *
+ * Comprehensive type definitions for the advanced trust proxy functionality
+ */
+/**
+ * Predefined network range identifiers
+ */
+type PredefinedRange = 'loopback' | 'linklocal' | 'uniquelocal';
+/**
+ * Trust proxy configuration value
+ *
+ * Supports all Express.js trust proxy configurations plus XyPriss enhancements:
+ *
+ * @example
+ * ```typescript
+ * // Boolean - trust all proxies or none
+ * trustProxy: true
+ * trustProxy: false
+ *
+ * // Predefined ranges
+ * trustProxy: 'loopback'     // Trust localhost/127.0.0.1 and ::1
+ * trustProxy: 'linklocal'    // Trust link-local addresses (169.254.0.0/16, fe80::/10)
+ * trustProxy: 'uniquelocal'  // Trust private networks (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, fc00::/7)
+ *
+ * // CIDR notation
+ * trustProxy: '192.168.0.0/16'
+ * trustProxy: '10.0.0.0/8'
+ * trustProxy: 'fc00::/7'  // IPv6 CIDR
+ *
+ * // Exact IP addresses
+ * trustProxy: '127.0.0.1'
+ * trustProxy: '::1'
+ *
+ * // Array of rules (mixed types supported)
+ * trustProxy: ['loopback', 'linklocal', '10.0.0.0/8']
+ * trustProxy: ['127.0.0.1', '192.168.1.100', 'uniquelocal']
+ *
+ * // Number - trust first N hops
+ * trustProxy: 1  // Trust first proxy
+ * trustProxy: 2  // Trust first 2 proxies in chain
+ *
+ * // Custom function
+ * trustProxy: (ip, hopIndex) => {
+ *   return ip.startsWith('192.168.') || ip === '127.0.0.1';
+ * }
+ * ```
+ */
+type TrustProxyValue$1 = boolean | PredefinedRange | string | (PredefinedRange | string)[] | number | ((ip: string, hopIndex: number) => boolean);
+
 interface CacheStats {
     hits: number;
     misses: number;
@@ -4489,6 +4539,10 @@ declare class XyPrissServer {
      * Add safe JSON middleware to handle circular references
      */
     private addSafeJsonMiddleware;
+    /**
+     * Configure trust proxy settings based on server options
+     */
+    private configureTrustProxy;
     /**
      * Initialize request management middleware for timeouts, network quality, and concurrency control
      */
@@ -5218,7 +5272,7 @@ interface MultiServerConfig {
     /** Server-specific overrides */
     server?: {
         host?: string;
-        trustProxy?: boolean;
+        trustProxy?: TrustProxyValue$1;
         jsonLimit?: string;
         urlEncodedLimit?: string;
         enableMiddleware?: boolean;
@@ -5458,7 +5512,7 @@ interface ServerOptions {
     server?: {
         port?: number;
         host?: string;
-        trustProxy?: boolean;
+        trustProxy?: TrustProxyValue$1;
         jsonLimit?: string;
         urlEncodedLimit?: string;
         enableMiddleware?: boolean;
@@ -11831,6 +11885,92 @@ declare class PluginDevelopmentHelpers {
  */
 declare function quickServer(port?: number): UltraFastApp;
 
+/**
+ * Advanced Trust Proxy Implementation for XyPriss
+ *
+ * Supports Express-like trust proxy configurations including:
+ * - Boolean values (true/false)
+ * - String values ('loopback', 'linklocal', 'uniquelocal')
+ * - CIDR notation ('192.168.0.0/16')
+ * - IP addresses ('127.0.0.1')
+ * - Arrays of the above
+ * - Custom functions
+ */
+
+type TrustProxyValue = boolean | string | string[] | number | ((ip: string, hopIndex: number) => boolean);
+declare class TrustProxy {
+    private trustProxyFn;
+    constructor(config: TrustProxyValue);
+    /**
+     * Validate and normalize IP address string
+     */
+    private normalizeIP;
+    /**
+     * Convert IPv4 address to number for comparison
+     */
+    private ipv4ToNumber;
+    /**
+     * Check if IPv4 address is in CIDR range
+     */
+    private isIPv4InCIDR;
+    /**
+     * Expand IPv6 address to full form
+     */
+    private expandIPv6;
+    /**
+     * Convert IPv6 address to BigInt for comparison
+     */
+    private ipv6ToBigInt;
+    /**
+     * Check if IPv6 address is in CIDR range
+     */
+    private isIPv6InCIDR;
+    /**
+     * Check if IP address is in CIDR range
+     */
+    private isIPInCIDR;
+    /**
+     * Check if IP matches a single trust proxy rule
+     */
+    private matchesTrustRule;
+    /**
+     * Create a trust proxy function from configuration
+     */
+    private createTrustProxyFunction;
+    /**
+     * Safely parse X-Forwarded-For header
+     */
+    private parseForwardedFor;
+    /**
+     * Get remote address with fallback
+     */
+    private getRemoteAddress;
+    /**
+     * Extract client IP considering trust proxy configuration
+     */
+    extractClientIP(req: IncomingMessage): string;
+    /**
+     * Extract all IPs in the proxy chain
+     */
+    extractProxyChain(req: IncomingMessage): string[];
+    /**
+     * Determine if connection is secure based on trust proxy
+     */
+    isSecureConnection(req: IncomingMessage): boolean;
+    /**
+     * Get protocol considering trust proxy
+     */
+    getProtocol(req: IncomingMessage): string;
+    /**
+     * Get hostname considering trust proxy
+     */
+    getHostname(req: IncomingMessage): string;
+    /**
+     * Validate trust proxy configuration
+     */
+    static validate(config: TrustProxyValue): boolean;
+}
+
 /***************************************************************************
  * XyPrissJS - Advanced JavaScript Security Library
  *
@@ -11863,5 +12003,5 @@ declare function quickServer(port?: number): UltraFastApp;
  */
 declare function Router(): XyPrissRouter;
 
-export { CachePlugin as CachePluginBase, CompressionPlugin, ConnectionPlugin, DEFAULT_PLUGIN_CONFIG, FileUploadAPI as FLA, FileUploadAPI, JWTAuthPlugin, NetworkCategory, NetworkPlugin, NetworkPluginFactory, NetworkPluginUtils, PERFORMANCE_TARGETS, PLUGIN_SYSTEM_NAME, PLUGIN_SYSTEM_VERSION, PerformanceMonitor, PerformancePlugin as PerformancePluginBase, PluginDevelopmentHelpers, PluginEngine, PluginEventType, PluginPriority, PluginRegistry, PluginSystemFactory, PluginSystemUtils, PluginType, ProxyPlugin, RateLimitPlugin, ResponseTimePlugin, Route, Router, SecurityMiddleware, SecurityPlugin as SecurityPluginBase, SmartCachePlugin, XyPrissRouter, createCacheMiddleware, createCircularRefDebugger, createOptimalCache, createSafeJsonMiddleware, createServer, createServerInstance, expressStringify, fastStringify, initializeFileUpload, quickServer, safeJsonStringify, safeStringify, sendSafeJson, setupSafeJson, uploadAny, uploadArray, uploadFields, uploadSingle };
-export type { BasePlugin, CacheConfig, CachePlugin$1 as CachePlugin, CompressionAlgorithm, CompressionConfig, ConnectionConfig, FailoverConfig, HTTPCacheConfig, HealthCheckConfig, CachePlugin$1 as ICachePlugin, PerformancePlugin$1 as IPerformancePlugin, SecurityPlugin$1 as ISecurityPlugin, LoadBalancingStrategy, MultiServerApp, MultiServerConfig, NativePlugin, NetworkExecutionContext, NetworkExecutionResult, NetworkHealthStatus, NetworkPluginConfig, NetworkSecurityConfig, NextFunction, PerformanceConfig, PerformanceMetrics, PerformancePlugin$1 as PerformancePlugin, PluginConfiguration, PluginEvent, PluginExecutionContext, PluginExecutionResult, PluginExecutionStats, PluginInitializationContext, PluginRegistryConfig, ProxyConfig, RateLimitConfig, RateLimitRule, RateLimitStrategy, RedisConfig, XyPrisRequest as Request, RequestHandler, XyPrisResponse as Response, RouteConfig, RouteOptions, SecurityConfig, SecurityPlugin$1 as SecurityPlugin, ServerOptions, SmartRouteConfig, UltraFastApp, UpstreamServer, WebSocketConfig, MultiServerApp as XyPMS, XyPrisRequest as XyPrissRequest, XyPrisResponse as XyPrissResponse };
+export { CachePlugin as CachePluginBase, CompressionPlugin, ConnectionPlugin, DEFAULT_PLUGIN_CONFIG, FileUploadAPI as FLA, FileUploadAPI, JWTAuthPlugin, NetworkCategory, NetworkPlugin, NetworkPluginFactory, NetworkPluginUtils, PERFORMANCE_TARGETS, PLUGIN_SYSTEM_NAME, PLUGIN_SYSTEM_VERSION, PerformanceMonitor, PerformancePlugin as PerformancePluginBase, PluginDevelopmentHelpers, PluginEngine, PluginEventType, PluginPriority, PluginRegistry, PluginSystemFactory, PluginSystemUtils, PluginType, ProxyPlugin, RateLimitPlugin, ResponseTimePlugin, Route, Router, SecurityMiddleware, SecurityPlugin as SecurityPluginBase, SmartCachePlugin, TrustProxy, XyPrissRouter, createCacheMiddleware, createCircularRefDebugger, createOptimalCache, createSafeJsonMiddleware, createServer, createServerInstance, expressStringify, fastStringify, initializeFileUpload, quickServer, safeJsonStringify, safeStringify, sendSafeJson, setupSafeJson, uploadAny, uploadArray, uploadFields, uploadSingle };
+export type { BasePlugin, CacheConfig, CachePlugin$1 as CachePlugin, CompressionAlgorithm, CompressionConfig, ConnectionConfig, FailoverConfig, HTTPCacheConfig, HealthCheckConfig, CachePlugin$1 as ICachePlugin, PerformancePlugin$1 as IPerformancePlugin, SecurityPlugin$1 as ISecurityPlugin, LoadBalancingStrategy, MultiServerApp, MultiServerConfig, NativePlugin, NetworkExecutionContext, NetworkExecutionResult, NetworkHealthStatus, NetworkPluginConfig, NetworkSecurityConfig, NextFunction, PerformanceConfig, PerformanceMetrics, PerformancePlugin$1 as PerformancePlugin, PluginConfiguration, PluginEvent, PluginExecutionContext, PluginExecutionResult, PluginExecutionStats, PluginInitializationContext, PluginRegistryConfig, ProxyConfig, RateLimitConfig, RateLimitRule, RateLimitStrategy, RedisConfig, XyPrisRequest as Request, RequestHandler, XyPrisResponse as Response, RouteConfig, RouteOptions, SecurityConfig, SecurityPlugin$1 as SecurityPlugin, ServerOptions, SmartRouteConfig, TrustProxyValue$1 as TrustProxyValue, UltraFastApp, UpstreamServer, WebSocketConfig, MultiServerApp as XyPMS, XyPrisRequest as XyPrissRequest, XyPrisResponse as XyPrissResponse };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "xypriss",
-    "version": "2.3.4",
+    "version": "2.3.5",
     "description": "XyPriss is a lightweight, TypeScript-first, open-source Node.js web framework crafted for developers seeking a familiar Express-like API without Express dependencies. It features built-in security middleware, a robust routing system, and performance optimizations to build scalable, secure web applications effortlessly. Join our community and contribute on GitHub!",
     "main": "dist/cjs/index.js",
     "module": "dist/esm/index.js",