chore: suppression middleware.js et mise à jour yarn.lock

middleware.js fusionné dans proxy.js depuis le commit 8016c26. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-14 06:50:35 +04:00
parent 8016c26e32
commit a25a610d73
2 changed files with 2196 additions and 1112 deletions
@@ -1,59 +0,0 @@
 import {NextResponse} from 'next/server'
 import {createRateLimiter} from '@/lib/rate-limit.js'
 // 5 inscriptions max par IP toutes les 15 minutes
 const checkRegister = createRateLimiter({windowMs: 15 * 60 * 1000, max: 5})
 // 10 tentatives de connexion max par IP toutes les 5 minutes
 const checkSignin = createRateLimiter({windowMs: 5 * 60 * 1000, max: 10})
 const limiters = {
  '/api/auth/register': checkRegister,
  '/api/auth/callback/credentials': checkSignin,
 }
 /**
 * Extrait l'IP cliente depuis les headers HTTP.
 * Priorité à X-Real-IP (Nginx), puis X-Forwarded-For.
 */
 function getClientIp(request) {
  const realIp = request.headers.get('x-real-ip')
  if (realIp) {
    return realIp.trim()
  }
  const forwarded = request.headers.get('x-forwarded-for')
  if (forwarded) {
    return forwarded.split(',')[0].trim()
  }
  return 'unknown'
 }
 export function middleware(request) {
  const {pathname} = request.nextUrl
  const check = limiters[pathname]
  if (!check) {
    return NextResponse.next()
  }
  const ip = getClientIp(request)
  const result = check(`${ip}:${pathname}`)
  if (result.success) {
    return NextResponse.next()
  }
  return NextResponse.json(
    {message: 'Trop de tentatives. Veuillez réessayer dans quelques minutes.'},
    {
      status: 429,
      headers: {'Retry-After': String(result.retryAfter)},
    }
  )
 }
 export const config = {
  matcher: ['/api/auth/register', '/api/auth/callback/credentials'],
 }