@brandazm/dynamic-permissions/dist/config/default-security.config.js

A flexible and powerful permissions management system for NestJS applications with built-in security features

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.defaultSecurityConfig = void 0;
exports.defaultSecurityConfig = {
    rateLimit: {
        enabled: true,
        windowMs: 15 * 60 * 1000,
        max: 100,
    },
    cors: {
        enabled: true,
        allowedOrigins: ['http://localhost:3000'],
        allowedMethods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH'],
        allowedHeaders: ['Content-Type', 'Authorization'],
        exposedHeaders: ['X-Total-Count'],
        credentials: true,
    },
    helmet: {
        enabled: true,
        contentSecurityPolicy: true,
        crossOriginEmbedderPolicy: true,
        crossOriginOpenerPolicy: true,
        crossOriginResourcePolicy: true,
        dnsPrefetchControl: true,
        frameguard: true,
        hidePoweredBy: true,
        hsts: true,
        ieNoOpen: true,
        noSniff: true,
        referrerPolicy: true,
        xssFilter: true,
    },
    requestValidation: {
        maxBodySize: 10 * 1024 * 1024,
        requireJsonContent: true,
        validateContentType: true,
    },
    enableCaching: true,
    cacheTimeout: 3600,
    enableAuditLog: true,
};
//# sourceMappingURL=default-security.config.js.map