a111d2930d
Task #11: Formular gegen Spam schützen - Installed `express-rate-limit` (^8.5.2) as a runtime dependency in `@workspace/api-server` - Created a rate limiter (5 requests per IP per hour, 1-hour sliding window) using `rateLimit()` from express-rate-limit - Applied the limiter as inline middleware on POST /contact so it runs before the handler - On limit exceeded the API returns HTTP 429 with a German-language JSON error: { success: false, message: "Zu viele Anfragen. Bitte versuchen Sie es in einer Stunde erneut." } - Uses `standardHeaders: "draft-8"` (RateLimit header group) and disables legacy X-RateLimit-* headers - Added `app.set("trust proxy", 1)` in app.ts so that Express reads the real client IP from X-Forwarded-For (set by Replit's reverse proxy), ensuring the rate limit is applied per actual client rather than per proxy IP - No other changes to the contact handler flow No deviations from the task description. Replit-Task-Id: de2cecbd-511f-4046-8e87-567ec96e19fb
35 lines
949 B
JSON
35 lines
949 B
JSON
{
|
|
"name": "@workspace/api-server",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "export NODE_ENV=development && pnpm run build && pnpm run start",
|
|
"build": "node ./build.mjs",
|
|
"start": "node --enable-source-maps ./dist/index.mjs",
|
|
"typecheck": "tsc -p tsconfig.json --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@getbrevo/brevo": "^5.0.4",
|
|
"@workspace/api-zod": "workspace:*",
|
|
"@workspace/db": "workspace:*",
|
|
"cookie-parser": "^1.4.7",
|
|
"cors": "^2.8.6",
|
|
"drizzle-orm": "catalog:",
|
|
"express": "^5.2.1",
|
|
"express-rate-limit": "^8.5.2",
|
|
"pino": "^9.14.0",
|
|
"pino-http": "^10.5.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/cookie-parser": "^1.4.10",
|
|
"@types/cors": "^2.8.19",
|
|
"@types/express": "^5.0.6",
|
|
"@types/node": "catalog:",
|
|
"esbuild": "0.27.3",
|
|
"esbuild-plugin-pino": "^2.3.3",
|
|
"pino-pretty": "^13.1.3",
|
|
"thread-stream": "3.1.0"
|
|
}
|
|
}
|