Function buildKeyGenerator

apps/api/src/config/security/security.ts:87–97

()

};

const buildKeyGenerator = (): Generator | undefined => {
  if (!env.TRUST_PROXY) {
    return undefined;
  }

  return (request, server) =>
    extractTrustedClientIp({
      forwardedFor: request.headers.get("x-forwarded-for"),
      socketAddress: server?.requestIP(request)?.address,
    });
};

/**
 * Per-IP rate limit. Storage is in-memory by default and Valkey-backed