Class RequestLimitsMiddleware

Kernel middleware that rejects requests carrying too many headers or cookies.

Defence-in-depth against denial-of-service. The Node HTTP server already bounds header count/size, but that protection is unavailable on serverless runtimes (AWS Lambda, edge), so this adapter-agnostic guard enforces the limits uniformly wherever an IncomingHttpEvent is processed. Limits come from stone.http.limits (0 disables a given check).

Template: TEvent

The incoming HTTP event type.

Template: UResponse

The outgoing HTTP response type.

Index

Constructors

constructor

Methods

handle

Constructors

constructor

new RequestLimitsMiddleware(
blueprint: { blueprint: IBlueprint },
): RequestLimitsMiddleware
Create a RequestLimitsMiddleware.
Parameters
- blueprint: { blueprint: IBlueprint }
  The configuration blueprint.
Returns RequestLimitsMiddleware

Methods

handle

handle(
event: IncomingHttpEvent,
next: NextMiddleware<IncomingHttpEvent, OutgoingHttpResponse>,
): Promise<OutgoingHttpResponse>
Reject over-sized requests, otherwise continue the pipeline.
Parameters
- event: IncomingHttpEvent
  The incoming HTTP event.
- next: NextMiddleware<IncomingHttpEvent, OutgoingHttpResponse>
  The next middleware.
Returns Promise<OutgoingHttpResponse>
The outgoing HTTP response.

Throws
431 when the header or cookie count exceeds the configured limit.

Class RequestLimitsMiddleware

Template: TEvent

Template: UResponse

Index

Constructors

Methods

Constructors

constructor

Parameters

Returns RequestLimitsMiddleware

Methods

handle

Parameters

Returns Promise<OutgoingHttpResponse>

Throws

Settings

On This Page