express-api-limiter
Version:
express-api-rate-limit is a simple and customizable rate-limiting middleware for Express.js applications, designed to prevent abuse by restricting the number of requests a client can make within a specified time window. This package allows you to define d
68 lines (67 loc) • 3.75 kB
JavaScript
;
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __importDefault = (this && this.__importDefault) || function (mod) {
return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
const chai_1 = require("chai");
const express_1 = __importDefault(require("express"));
const supertest_1 = __importDefault(require("supertest")); // Using supertest here
const rateLimiter_1 = require("../rateLimiter"); // Adjust path if needed
describe("RateLimiter Middleware", () => {
let rateLimiter;
let app;
beforeEach(() => {
rateLimiter = new rateLimiter_1.RateLimiter();
app = (0, express_1.default)();
// Set up rate-limited route
app.get("/api/test", rateLimiter.middleware({ windowMs: 1, maxCalls: 2 }), (req, res) => {
res.send("This is a rate-limited API endpoint!");
});
});
it("should allow 2 requests within 1 minute", () => __awaiter(void 0, void 0, void 0, function* () {
// First request should succeed
const response1 = yield (0, supertest_1.default)(app).get("/api/test");
(0, chai_1.expect)(response1.status).to.equal(200);
(0, chai_1.expect)(response1.text).to.equal("This is a rate-limited API endpoint!");
// Second request should also succeed
const response2 = yield (0, supertest_1.default)(app).get("/api/test");
(0, chai_1.expect)(response2.status).to.equal(200);
(0, chai_1.expect)(response2.text).to.equal("This is a rate-limited API endpoint!");
}));
it("should reject the 3rd request within 1 minute with 429 status", () => __awaiter(void 0, void 0, void 0, function* () {
// First and second requests should succeed
yield (0, supertest_1.default)(app).get("/api/test");
yield (0, supertest_1.default)(app).get("/api/test");
// Third request should be rejected due to rate limit
const response = yield (0, supertest_1.default)(app).get("/api/test");
(0, chai_1.expect)(response.status).to.equal(429); // Too many requests
(0, chai_1.expect)(response.body.message).to.equal("Too many requests. Please try again after 1 minute.");
}));
it("should allow a request after 1 minute window", (done) => {
// Simulate 2 requests within 1 minute
(0, supertest_1.default)(app)
.get("/api/test")
.end(() => {
(0, supertest_1.default)(app)
.get("/api/test")
.end(() => {
// Wait for 1 minute (simulate time passing)
setTimeout(() => __awaiter(void 0, void 0, void 0, function* () {
const response = yield (0, supertest_1.default)(app).get("/api/test");
(0, chai_1.expect)(response.status).to.equal(200);
(0, chai_1.expect)(response.text).to.equal("This is a rate-limited API endpoint!");
done(); // Mark test as done after the final assertion
}), 60000); // Wait for 1 minute
});
});
});
});