feat: add rate limit for the requests

package.json

@@ -35,9 +35,11 @@
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "dotenv": "^16.4.5",
+    "express-rate-limit": "^7.3.1",
     "helmet": "^7.1.0",
     "pg": "^8.11.5",
     "pg-hstore": "^2.3.4",
+    "pino": "^9.2.0",
     "reflect-metadata": "^0.2.0",
     "rxjs": "^7.8.1",
     "sequelize": "^6.37.3",

src/app.module.ts

@@ -18,17 +18,24 @@ import { DatabaseModule } from './core/database/database.module';
 import { CorsMiddleware } from './core/middleware/cors.middleware';
 import { HelmetMiddleware } from './core/middleware/helmet.middleware';
 import { LoggerMiddleware } from './core/middleware/logger.middleware';
+import { RateLimitMiddleware } from './core/middleware/rate-limit.middleware';
 
 @Module({
   imports: [ConfigModule, DatabaseModule, AuthModule, UserModule],
   controllers: [AppController, UserController],
   providers: [AppService, AuthService],
+  exports: [AppService],
 })
 export class AppModule implements NestModule {
   constructor() {}
 
   configure(consumer: MiddlewareConsumer) {
-    const middlewares = [CorsMiddleware, HelmetMiddleware, LoggerMiddleware];
+    const middlewares = [
+      CorsMiddleware,
+      HelmetMiddleware,
+      LoggerMiddleware,
+      RateLimitMiddleware,
+    ];
 
     consumer
       .apply(...middlewares)

src/app.service.ts

@@ -1,8 +1,42 @@
 import { Injectable } from '@nestjs/common';
+import pino from 'pino';
+
+const logger = pino();
+
+class LogData {
+  public message?: string;
+  public data?: any;
+}
 
 @Injectable()
 export class AppService {
   getHello(): string {
     return 'Application is up and running! ✅';
   }
+
+  private writeLog(logMethod: string, logData: LogData) {
+    logData = logData || { message: '', data: {} };
+    (logData as any).timeLocal = new Date().toISOString();
+    logger[logMethod](logData);
+  }
+
+  debug(logData: LogData) {
+    this.writeLog('debug', logData);
+  }
+
+  info(logData: LogData) {
+    this.writeLog('info', logData);
+  }
+
+  error(logData: LogData) {
+    this.writeLog('error', logData);
+  }
+
+  warn(logData: LogData) {
+    this.writeLog('warn', logData);
+  }
+
+  fatal(logData: LogData) {
+    this.writeLog('fatal', logData);
+  }
 }

src/config/cfg.default.ts

@@ -37,5 +37,7 @@ export default {
     passSalt: 'u5o2law8xi',
     tokenSecret: process.env.PRIVATE_KEY,
     tokenMaxAge: process.env.TOKEN_EXPIRATION,
+    rateLimitWindowMs: 15 * 60 * 1000, // 15 minutes
+    rateLimitMax: 1000, // limit each IP to rateLimitMax requests per windowMs
   },
 };

src/config/type/ServerConfig.ts

@@ -8,6 +8,8 @@ export class ServerConfig extends BaseConfig {
   readonly passSalt: string;
   readonly tokenSecret: string;
   readonly tokenMaxAge: number;
+  readonly rateLimitWindowMs: number;
+  readonly rateLimitMax: number;
 
   constructor(cfg) {
     super(cfg);