xypriss 9.11.13 → 9.12.0

package/dist/src/middleware/XyPrissMiddlewareAPI.js

@@ -0,0 +1,284 @@
+/**
+ * XyPriss Middleware API
+ * Clean, simple implementation for middleware management with built-in security middleware
+ */
+// Built-in security middleware using actual libraries
+import { BuiltInMiddleware } from "./built-in/BuiltInMiddleware";
+import { Logger } from "../shared/logger/Logger";
+export class XyPrissMiddleware {
+    constructor(app, securityConfig) {
+        this.registeredMiddleware = [];
+        this.middlewareCounter = 0;
+        this.securityConfig = null;
+        this.app = app;
+        this.securityConfig = securityConfig || null;
+        this.logger = new Logger({
+            components: {
+                middleware: true,
+            },
+        });
+        // DO NOT apply default middleware here - wait for explicit initialization
+        // This allows proper config merging before applying middleware
+    }
+    /**
+     * Initialize default middleware with security configuration
+     */
+    initializeWithConfig(securityConfig) {
+        if (securityConfig) {
+            this.securityConfig = securityConfig;
+        }
+        // Enable default security middleware by default
+        this.enableDefaultMiddleware();
+    }
+    /**
+     * Enable default built-in middleware based on security configuration
+     */
+    enableDefaultMiddleware() {
+        this.logger.debug("middleware", "🔧 Enabling default security middleware...");
+        // Apply middleware based on security configuration
+        const config = this.securityConfig;
+        // Helmet (always enabled by default unless explicitly disabled)
+        if (config?.helmet !== false) {
+            this.helmet({ hidePoweredBy: true });
+        }
+        // CORS (conditionally enabled based on config)
+        if (config?.cors !== false) {
+            const corsConfig = config?.cors === true || !config?.cors
+                ? { origin: true }
+                : config.cors;
+            this.cors(corsConfig);
+        }
+        // Compression (conditionally enabled)
+        if (config?.compression !== false) {
+            this.compression({ threshold: 1024 });
+        }
+        // HTTP Parameter Pollution protection (conditionally enabled)
+        if (config?.hpp !== false) {
+            this.hpp({ whitelist: ["tags", "categories"] });
+        }
+        // XSS protection (conditionally enabled)
+        if (config?.xss !== false) {
+            this.xss({ whiteList: { a: ["href", "title"] } });
+        }
+        // Rate limiting (conditionally enabled)
+        if (config?.rateLimit !== false) {
+            const rateLimitConfig = typeof config?.rateLimit === "object"
+                ? config.rateLimit
+                : {
+                    windowMs: 15 * 60 * 1000,
+                    max: 100,
+                    message: "Too many requests, please try again later.",
+                    standardHeaders: true,
+                };
+            this.rateLimit(rateLimitConfig);
+        }
+        this.logger.debug("middleware", "✅ Default security middleware enabled based on configuration");
+    }
+    register(middleware, // Accept any type for compatibility
+    options = {}) {
+        const id = `middleware_${++this.middlewareCounter}`;
+        const name = options.name || `custom_middleware_${this.middlewareCounter}`;
+        const registered = {
+            id,
+            name,
+            middleware,
+            enabled: true,
+            priority: options.priority || "normal",
+            type: "custom",
+            routes: options.routes,
+        };
+        this.registeredMiddleware.push(registered);
+        this.applyMiddleware(registered);
+        this.logger.debug("middleware", `✅ Registered middleware: ${name} (priority: ${registered.priority})`);
+        return this;
+    }
+    security(config = {}) {
+        this.logger.debug("middleware", "🔒 Configuring security middleware bundle...");
+        // Apply security middleware
+        if (config.helmet !== false) {
+            this.helmet(config.helmet);
+        }
+        if (config.cors !== false) {
+            this.cors(config.cors);
+        }
+        if (config.rateLimit !== false) {
+            this.rateLimit(config.rateLimit);
+        }
+        if (config.csrf !== false) {
+            this.csrf(config.csrf);
+        }
+        if (config.compression !== false) {
+            this.compression(config.compression);
+        }
+        return this;
+    }
+    cors(config = {}) {
+        const corsConfig = typeof config === "object" ? config : {};
+        const corsMiddleware = BuiltInMiddleware.cors(corsConfig);
+        return this.registerBuiltIn("cors", corsMiddleware, "high");
+    }
+    rateLimit(config = {}) {
+        const rateLimitConfig = typeof config === "object" ? config : {};
+        const rateLimitMiddleware = BuiltInMiddleware.rateLimit(rateLimitConfig);
+        return this.registerBuiltIn("rateLimit", rateLimitMiddleware, "high");
+    }
+    helmet(config = {}) {
+        const helmetConfig = typeof config === "object" ? config : {};
+        const helmetMiddleware = BuiltInMiddleware.helmet(helmetConfig);
+        return this.registerBuiltIn("helmet", helmetMiddleware, "critical");
+    }
+    csrf(config = {}) {
+        const csrfConfig = typeof config === "object" ? config : {};
+        const csrfMiddleware = BuiltInMiddleware.csrf(csrfConfig);
+        return this.registerBuiltIn("csrf", csrfMiddleware, "high");
+    }
+    compression(config = {}) {
+        const compressionConfig = typeof config === "object" ? config : {};
+        const compressionMiddleware = BuiltInMiddleware.compression(compressionConfig);
+        return this.registerBuiltIn("compression", compressionMiddleware, "low");
+    }
+    /**
+     * Add HPP (HTTP Parameter Pollution) protection
+     */
+    hpp(config = {}) {
+        const hppConfig = typeof config === "object" ? config : {};
+        const hppMiddleware = BuiltInMiddleware.hpp(hppConfig);
+        return this.registerBuiltIn("hpp", hppMiddleware, "high");
+    }
+    /**
+     * Add XSS protection
+     */
+    xss(config = {}) {
+        const xssConfig = typeof config === "object" ? config : {};
+        const xssMiddleware = BuiltInMiddleware.xss(xssConfig);
+        return this.registerBuiltIn("xss", xssMiddleware, "high");
+    }
+    stats() {
+        const total = this.registeredMiddleware.length;
+        const enabled = this.registeredMiddleware.filter((m) => m.enabled).length;
+        const disabled = total - enabled;
+        const byType = {
+            custom: this.registeredMiddleware.filter((m) => m.type === "custom")
+                .length,
+            builtin: this.registeredMiddleware.filter((m) => m.type === "builtin").length,
+        };
+        return {
+            total,
+            enabled,
+            disabled,
+            byType,
+            byPriority: {
+                critical: this.registeredMiddleware.filter((m) => m.priority === "critical").length,
+                high: this.registeredMiddleware.filter((m) => m.priority === "high").length,
+                normal: this.registeredMiddleware.filter((m) => m.priority === "normal").length,
+                low: this.registeredMiddleware.filter((m) => m.priority === "low").length,
+            },
+        };
+    }
+    list() {
+        return this.registeredMiddleware.map((m) => ({
+            id: m.id,
+            name: m.name,
+            enabled: m.enabled,
+            priority: m.priority,
+            type: m.type,
+        }));
+    }
+    clear() {
+        this.registeredMiddleware = [];
+        this.logger.debug("middleware", "🧹 All middleware cleared");
+        return this;
+    }
+    optimize() {
+        const priorityOrder = {
+            critical: 0,
+            high: 10,
+            normal: 100,
+            low: 1000,
+        };
+        this.registeredMiddleware.sort((a, b) => {
+            const priorityA = typeof a.priority === "number"
+                ? a.priority
+                : (priorityOrder[a.priority] ?? 100);
+            const priorityB = typeof b.priority === "number"
+                ? b.priority
+                : (priorityOrder[b.priority] ?? 100);
+            return priorityA - priorityB;
+        });
+        this.logger.debug("middleware", "⚡ Middleware order optimized by priority");
+        return this;
+    }
+    // Compatibility methods for MiddlewareAPIInterface
+    unregister(id) {
+        const index = this.registeredMiddleware.findIndex((m) => m.id === id);
+        if (index !== -1) {
+            this.registeredMiddleware.splice(index, 1);
+            this.logger.debug("middleware", `🗑️ Unregistered middleware: ${id}`);
+        }
+        return this;
+    }
+    enable(id) {
+        const middleware = this.registeredMiddleware.find((m) => m.id === id);
+        if (middleware) {
+            middleware.enabled = true;
+            this.applyMiddleware(middleware);
+            this.logger.debug("middleware", `✅ Enabled middleware: ${id}`);
+        }
+        return this;
+    }
+    disable(id) {
+        const middleware = this.registeredMiddleware.find((m) => m.id === id);
+        if (middleware) {
+            middleware.enabled = false;
+            this.logger.debug("middleware", `❌ Disabled middleware: ${id}`);
+        }
+        return this;
+    }
+    getInfo(id) {
+        if (id) {
+            const middleware = this.registeredMiddleware.find((m) => m.id === id);
+            return middleware
+                ? {
+                    id: middleware.id,
+                    name: middleware.name,
+                    enabled: middleware.enabled,
+                    priority: middleware.priority,
+                    type: middleware.type,
+                    routes: middleware.routes,
+                }
+                : null;
+        }
+        return this.list();
+    }
+    getStats() {
+        return this.stats();
+    }
+    getConfig() {
+        return {
+            totalMiddleware: this.registeredMiddleware.length,
+            enabledMiddleware: this.registeredMiddleware.filter((m) => m.enabled).length,
+        };
+    }
+    // Helper methods
+    registerBuiltIn(name, middleware, priority) {
+        const id = `builtin_${name}_${++this.middlewareCounter}`;
+        const registered = {
+            id,
+            name,
+            middleware,
+            enabled: true,
+            priority,
+            type: "builtin",
+        };
+        this.registeredMiddleware.push(registered);
+        this.applyMiddleware(registered);
+        this.logger.debug("middleware", `🔧 Applied built-in middleware: ${name} (priority: ${priority})`);
+        return this;
+    }
+    applyMiddleware(registered) {
+        if (this.app && this.app.use && registered.enabled) {
+            this.app.use(registered.middleware);
+        }
+    }
+}
+//# sourceMappingURL=XyPrissMiddlewareAPI.js.map

package/dist/src/middleware/XyPrissMiddlewareAPI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XyPrissMiddlewareAPI.js","sourceRoot":"","sources":["../../../src/middleware/XyPrissMiddlewareAPI.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,sDAAsD;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAYjD,MAAM,OAAO,iBAAiB;IAS1B,YACI,GAAQ,EACR,cAA+D;QAT3D,yBAAoB,GAA2B,EAAE,CAAC;QAClD,sBAAiB,GAAG,CAAC,CAAC;QAEtB,mBAAc,GAET,IAAI,CAAC;QAMd,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,cAAc,GAAG,cAAc,IAAI,IAAI,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACrB,UAAU,EAAE;gBACR,UAAU,EAAE,IAAI;aACnB;SACJ,CAAC,CAAC;QAEH,0EAA0E;QAC1E,+DAA+D;IACnE,CAAC;IAED;;OAEG;IACI,oBAAoB,CACvB,cAA+D;QAE/D,IAAI,cAAc,EAAE,CAAC;YACjB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,4CAA4C,CAC/C,CAAC;QAEF,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QAEnC,gEAAgE;QAChE,IAAI,MAAM,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,+CAA+C;QAC/C,IAAI,MAAM,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,GACZ,MAAM,EAAE,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI;gBAClC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;gBAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;QAED,sCAAsC;QACtC,IAAI,MAAM,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,8DAA8D;QAC9D,IAAI,MAAM,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,yCAAyC;QACzC,IAAI,MAAM,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,eAAe,GACjB,OAAO,MAAM,EAAE,SAAS,KAAK,QAAQ;gBACjC,CAAC,CAAC,MAAM,CAAC,SAAS;gBAClB,CAAC,CAAC;oBACI,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;oBACxB,GAAG,EAAE,GAAG;oBACR,OAAO,EAAE,4CAA4C;oBACrD,eAAe,EAAE,IAAI;iBACxB,CAAC;YACZ,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,8DAA8D,CACjE,CAAC;IACN,CAAC;IAED,QAAQ,CACJ,UAAe,EAAE,oCAAoC;IACrD,UAII,EAAE;QAEN,MAAM,EAAE,GAAG,cAAc,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACpD,MAAM,IAAI,GACN,OAAO,CAAC,IAAI,IAAI,qBAAqB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAElE,MAAM,UAAU,GAAyB;YACrC,EAAE;YACF,IAAI;YACJ,UAAU;YACV,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ;YACtC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,OAAO,CAAC,MAAM;SACzB,CAAC;QAEF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,4BAA4B,IAAI,eAAe,UAAU,CAAC,QAAQ,GAAG,CACxE,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,SAAmC,EAAE;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,8CAA8C,CACjD,CAAC;QAEF,4BAA4B;QAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,SAA2C,EAAE;QAC9C,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1D,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,SAAS,CACL,SAAgD,EAAE;QAElD,MAAM,eAAe,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,mBAAmB,GACrB,iBAAiB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CACF,SAA6C,EAAE;QAE/C,MAAM,YAAY,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,SAA2C,EAAE;QAC9C,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAiB,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,WAAW,CACP,SAAkD,EAAE;QAEpD,MAAM,iBAAiB,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,qBAAqB,GACvB,iBAAiB,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC,eAAe,CACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,CACR,CAAC;IACN,CAAC;IAED;;OAEG;IACH,GAAG,CACC,SAAsD,EAAE;QAExD,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,GAAG,CACC,SAAsD,EAAE;QAExD,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACnB,CAAC,MAAM,CAAC;QACT,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;QACjC,MAAM,MAAM,GAAG;YACX,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAC/D,MAAM;YACX,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAC9B,CAAC,MAAM;SACX,CAAC;QAEF,OAAO;YACH,KAAK;YACL,OAAO;YACP,QAAQ;YACR,MAAM;YACN,UAAU,EAAE;gBACR,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CACnC,CAAC,MAAM;gBACR,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC/B,CAAC,MAAM;gBACR,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACjC,CAAC,MAAM;gBACR,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAC9B,CAAC,MAAM;aACX;SACJ,CAAC;IACN,CAAC;IAED,IAAI;QACA,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;SACf,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK;QACD,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,QAAQ;QACJ,MAAM,aAAa,GAA2B;YAC1C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,GAAG;YACX,GAAG,EAAE,IAAI;SACZ,CAAC;QAEF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACpC,MAAM,SAAS,GACX,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAC1B,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACZ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7C,MAAM,SAAS,GACX,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAC1B,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACZ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7C,OAAO,SAAS,GAAG,SAAS,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,0CAA0C,CAC7C,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,mDAAmD;IACnD,UAAU,CAAC,EAAU;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,gCAAgC,EAAE,EAAE,CACvC,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,EAAU;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,EAAU;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACb,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,EAAW;QACf,IAAI,EAAE,EAAE,CAAC;YACL,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CACrB,CAAC;YACF,OAAO,UAAU;gBACb,CAAC,CAAC;oBACI,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC5B;gBACH,CAAC,CAAC,IAAI,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,QAAQ;QACJ,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,SAAS;QACL,OAAO;YACH,eAAe,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM;YACjD,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACnB,CAAC,MAAM;SACX,CAAC;IACN,CAAC;IAED,iBAAiB;IACT,eAAe,CACnB,IAAY,EACZ,UAAoB,EACpB,QAA4B;QAE5B,MAAM,EAAE,GAAG,WAAW,IAAI,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzD,MAAM,UAAU,GAAyB;YACrC,EAAE;YACF,IAAI;YACJ,UAAU;YACV,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,IAAI,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,YAAY,EACZ,mCAAmC,IAAI,eAAe,QAAQ,GAAG,CACpE,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,UAAgC;QACpD,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;CACJ"}

package/dist/src/middleware/built-in/BuiltInMiddleware.d.ts

@@ -0,0 +1,104 @@
+/**
+ * XyPriss Built-in Middleware
+ * Wrappers around popular middleware libraries
+ */
+import { xyprissCors as cors } from "./security/XyPrissCors";
+import { xyprissHPP as hpp } from "./security/XyPrissHPP";
+import { RequestSignatureConfig } from "../../types/mod/security";
+import { Logger } from "../../shared/logger/Logger";
+export interface BuiltInMiddlewareConfig {
+    helmet?: any;
+    cors?: any;
+    compression?: any;
+    csrf?: any;
+    validator?: any;
+    hpp?: any;
+    xss?: any;
+    requestSignature?: any;
+    maliciousUrlScanner?: any;
+}
+export declare class BuiltInMiddleware {
+    /**
+     * Get Helmet middleware for security headers
+     * @deprecated Handled natively by XHSC Engine
+     */
+    static helmet(options?: any): (req: any, res: any, next: any) => void;
+    /**
+     * Get CORS middleware
+     *
+     * By default, allows all headers to be developer-friendly.
+     * Developers can restrict headers via config if needed for production.
+     *
+     * Supports multiple origin matching patterns:
+     * - Strings with wildcards: "localhost:*", "*.example.com"
+     * - Regular expressions: /^localhost:\d+$/, /\.test\.com$/
+     * - Mixed arrays: ["localhost:*", /^api\..*\.com$/, "production.com"]
+     */
+    static cors(options?: Parameters<typeof cors>[0]): (req: any, res: any, next: any) => any;
+    /**
+     * Create an advanced origin function that supports strings, RegExp, and wildcards
+     */
+    private static createAdvancedOriginFunction;
+    /**
+     * Check if an origin matches a string pattern (including wildcards)
+     */
+    private static matchesStringOrigin;
+    /**
+     * Rate limiting is now handled natively or via XHSC.
+     * @deprecated Use XyPriss Native Rate Limiter instead.
+     */
+    /**
+     * Native XyPriss Rate Limiter
+     */
+    static rateLimit(options?: any): (req: any, res: any, next: any) => void;
+    /**
+     * Get Compression middleware
+     */
+    static compression(options?: any): any;
+    /**
+     * CSRF protection middleware
+     * @deprecated Handled natively by XHSC Engine
+     */
+    static csrf(options?: any): (req: any, res: any, next: any) => void;
+    /**
+     * Get HPP (HTTP Parameter Pollution) protection middleware
+     */
+    static hpp(options?: Parameters<typeof hpp>[0]): any;
+    /**
+     * Get XSS protection middleware
+     * @deprecated Handled natively by XHSC Engine
+     */
+    static xss(options?: any): (req: any, _res: any, next: any) => void;
+    static morgan(_options?: any): never;
+    /**
+     * Get Browser-Only middleware to block non-browser requests (like cURL)
+     */
+    static browserOnly(options?: any): (req: any, res: any, next: any) => void;
+    /**
+     * Get Terminal-Only middleware to block browser requests (allows cURL and API tools)
+     */
+    static terminalOnly(options?: any): (req: any, res: any, next: any) => void;
+    /**
+     * Get Mobile-Only middleware to block browser requests (allows mobile app access)
+     */
+    static mobileOnly(options?: any): (req: any, res: any, next: any) => any;
+    /**
+     * Get Request Signature middleware for API authentication
+     */
+    static requestSignature(options: RequestSignatureConfig): (req: any, res: any, next: any) => void;
+    /**
+     * Get all default security middleware
+     */
+    static security(options?: BuiltInMiddlewareConfig): {
+        helmet: (req: any, res: any, next: any) => void;
+        cors: (req: any, res: any, next: any) => any;
+        compression: any;
+        csrf: (req: any, res: any, next: any) => void;
+        requestSignature: (req: any, res: any, next: any) => void;
+    };
+    /**
+     * Get Malicious URL Scanner middleware
+     */
+    static maliciousUrlScanner(config: any, logger?: Logger): import("../..").RequestHandler;
+}
+//# sourceMappingURL=BuiltInMiddleware.d.ts.map

package/dist/src/middleware/built-in/BuiltInMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BuiltInMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/middleware/built-in/BuiltInMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,IAAI,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAI1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAKlE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,MAAM,WAAW,uBAAuB;IACpC,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,gBAAgB,CAAC,EAAE,GAAG,CAAC;IACvB,mBAAmB,CAAC,EAAE,GAAG,CAAC;CAC7B;AAED,qBAAa,iBAAiB;IAC1B;;;OAGG;IACH,MAAM,CAAC,MAAM,CAAC,OAAO,GAAE,GAAQ,IACnB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;IAMzC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,GAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAM;IAiGpD;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IA0C3C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAuBlC;;;OAGG;IACH;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,OAAO,GAAE,GAAQ,IAItB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;IAOzC;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,GAAE,GAAQ,GAAG,GAAG;IAoC1C;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,GAAE,GAAQ,IACjB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;IAMzC;;OAEG;IACH,MAAM,CAAC,GAAG,CAAC,OAAO,GAAE,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAM,GAAG,GAAG;IASxD;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,OAAO,GAAE,GAAQ,IAChB,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG;IAO1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,KAAK;IAMpC;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,GAAE,GAAQ;IAKpC;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,OAAO,GAAE,GAAQ;IAKrC;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,OAAO,GAAE,GAAQ;IAKnC;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,sBAAsB;IAKvD;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,uBAA4B;sBA9TpC,GAAG,OAAO,GAAG,QAAQ,GAAG;;;oBAuPxB,GAAG,OAAO,GAAG,QAAQ,GAAG;;;IAkFzC;;OAEG;IACH,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM;CAG1D"}