update dependencies

add rate limiting

package.json

@@ -15,53 +15,54 @@
   "author": "Tadeas Kmenta",
   "license": "MIT",
   "dependencies": {
-    "@runonflux/aa-schnorr-multisig-sdk": "~1.0.4",
-    "@runonflux/utxo-lib": "~1.0.0",
-    "alchemy-sdk": "~3.4.7",
+    "@runonflux/aa-schnorr-multisig-sdk": "~1.1.1",
+    "@runonflux/utxo-lib": "~1.0.1",
+    "alchemy-sdk": "~3.5.1",
     "apicache": "~1.6.3",
-    "axios": "~1.7.7",
+    "axios": "~1.7.9",
     "bchaddrjs": "~0.5.2",
     "bignumber.js": "~9.1.2",
-    "bitcoinjs-lib": "~6.1.6",
+    "bitcoinjs-lib": "~6.1.7",
     "compression": "~1.7.5",
     "config": "~3.3.12",
     "cors": "~2.8.5",
-    "express": "~4.21.1",
-    "firebase-admin": "~12.7.0",
+    "express": "~4.21.2",
+    "express-rate-limit": "~7.5.0",
+    "firebase-admin": "~13.0.2",
     "freshdesk-client": "~1.9.1",
     "lru-cache": "~11.0.2",
-    "mongodb": "~6.10.0",
+    "mongodb": "~6.12.0",
     "morgan": "~1.10.0",
     "node-cmd": "~5.0.0",
-    "qs": "~6.13.0",
+    "qs": "~6.14.0",
     "socket.io": "~4.8.1",
-    "viem": "~2.21.44",
+    "viem": "~2.22.14",
     "zelcorejs": "https://github.com/zelcore-io/zelcorejs"
   },
   "devDependencies": {
-    "@eslint/js": "~9.14.0",
-    "@types/chai": "~4.3.20",
+    "@eslint/js": "~9.19.0",
+    "@types/chai": "~5.0.1",
     "@types/compression": "~1.7.5",
     "@types/cors": "~2.8.17",
-    "@types/express": "~4.17.21",
+    "@types/express": "~5.0.0",
     "@types/expect": "~24.3.2",
-    "@types/mocha": "~10.0.9",
+    "@types/mocha": "~10.0.10",
     "@types/morgan": "~1.9.9",
     "chai": "~4.5.0",
-    "eslint": "~9.14.0",
-    "eslint-config-prettier": "~9.1.0",
+    "eslint": "~9.19.0",
+    "eslint-config-prettier": "~10.0.1",
     "eslint-plugin-mocha": "~10.5.0",
-    "eslint-plugin-prettier": "~5.2.1",
-    "globals": "~15.12.0",
-    "mocha": "~10.8.2",
+    "eslint-plugin-prettier": "~5.2.3",
+    "globals": "~15.14.0",
+    "mocha": "~11.1.0",
     "nyc": "~17.1.0",
-    "prettier": "~3.3.3",
+    "prettier": "~3.4.2",
     "ts-mocha": "~10.0.0",
     "tsx": "~4.19.2",
-    "typescript": "~5.6.3",
-    "typescript-eslint": "~8.13.0",
+    "typescript": "~5.7.3",
+    "typescript-eslint": "~8.21.0",
     "sinon": "~19.0.2",
-    "node-mocks-http": "~1.16.1"
+    "node-mocks-http": "~1.16.2"
   },
   "engines": {
     "node": ">=20"

src/lib/server.ts

@@ -2,18 +2,29 @@ import express from 'express';
 import morgan from 'morgan';
 import cors from 'cors';
 import compression from 'compression';
+import { rateLimit } from 'express-rate-limit';
 import routes from '../routes';
 
 const nodeEnv = process.env.NODE_ENV;
 
 const app = express();
 
+app.set('trust proxy', 1);
+
 if (nodeEnv !== 'test') {
   app.use(morgan('combined'));
 }
 
+const limiter = rateLimit({
+  windowMs: 30 * 1000, // 30 seconds
+  max: 120, // Limit each IP to 120 requests per windowMs
+  standardHeaders: 'draft-8',
+  legacyHeaders: false,
+});
+
 app.use(compression());
 app.use(cors());
+app.use(limiter);
 routes(app);
 
 export default app;