Releases: AdamPflug/express-brute
Releases · AdamPflug/express-brute
v0.3.0
- NEW: Support for using custom keys to group requests further (e.g. grouping login requests by username)
- NEW: Support for middleware from multiple instances of
ExpressBrute
on the same route. - NEW: Tracking
lifetime
now has a reasonable default derived from the other settings for that instance ofExpressBrute
- NEW: Keys are now hashed before saving to a store, to prevent really long key names and reduce the possibility of collisions.
- NEW: There is now a convience method that gets attached to
req
object asreq.brute.reset
. It takes a single parameter (a callback), and will reset all the counters used byExpressBrute
middleware that was called for the current route. - CHANGED: Tracking
lifetime
is now specified onExpressBrute
instead ofMemcachedStore
. This also means lifetime is now supported by MemoryStore. - CHANGED: The function signature for
ExpressBrute.reset
has changed. It now requires an IP and key be passed instead of a request object. - IMPROVED: Efficiency for large values of
freeRetries
. - BUG: Removed a small chance of incorrectly triggering brute force protection.