Merge pull request #97 from Permissionless-Software-Foundation/ct-unstable

fix(bodyOrigin): Passing the original origin through the POST body

docker/mainnet/start-local-mainnet.sh

@@ -16,9 +16,10 @@ export RPC_USERNAME=bitcoin
 export RPC_PASSWORD=password
 
 # SLPDB
+export SLPDB_PASS_GP=somelongpassword
 export SLPDB_URL=http://172.17.0.1:12300/
-export SLPDB_PASS=somelongpassword
 # Use the same address as SLPDB_URL if you don't have a separate whitelist server.
+export SLPDB_PASS_WL=somelongpassword
 export SLPDB_WHITELIST_URL=http://172.17.0.1:12300/
 # slp-api alternative SLP validator using slp-validate:
 # https://github.com/Permissionless-Software-Foundation/slp-api
@@ -54,4 +55,10 @@ export ANON_RATE_LIMIT=50
 # 10 = 100 RPM
 export WHITELIST_RATE_LIMIT=10
 
+# Set logging parameters
+#1m means no more than 1 megabyte
+export LOG_MAX_SIZE=1m
+#5d means store no more than 5 days
+export LOG_MAX_FILES=5d
+
 npm start

package.json

@@ -29,7 +29,7 @@
     "node": ">=10.15.1"
   },
   "dependencies": {
-    "@psf/bch-js": "^4.11.1",
+    "@psf/bch-js": "^4.15.2",
     "apidoc": "^0.26.0",
     "axios": "^0.21.1",
     "bitcore-lib-cash": "^8.23.1",
@@ -69,7 +69,7 @@
     "nock": "^13.0.5",
     "nyc": "^15.0.0",
     "prettier": "^2.0.0",
-    "semantic-release": "^17.3.1",
+    "semantic-release": "^17.3.9",
     "sinon": "^9.0.0",
     "standard": "^14.3.1"
   },

src/middleware/route-ratelimit.js

@@ -147,6 +147,11 @@ class RateLimits {
 
           wlogger.info(`origin: ${origin}`)
 
+          const bodyOrigin = req.body.origin
+          if (bodyOrigin) {
+            console.log(`bodyOrigin: ${bodyOrigin}`)
+          }
+
           // If the request originates from one of the approved wallet apps, then
           // apply paid-access rate limits.
           // console.log(`origin: ${JSON.stringify(origin, null, 2)}`)

src/routes/v4/slp.js

@@ -1755,7 +1755,7 @@ class Slp {
     const username = 'BITBOX'
     const password = SLPDB_PASS_WL
     const combined = `${username}:${password}`
-    console.log(`combined: ${combined}`)
+    // console.log(`combined: ${combined}`)
     var base64Credential = Buffer.from(combined).toString('base64')
     var readyCredential = `Basic ${base64Credential}`
 
@@ -1979,6 +1979,9 @@ class Slp {
     try {
       const utxos = req.body.utxos
 
+      console.log(`req._remoteAddress: ${req._remoteAddress}`)
+      const origin = req._remoteAddress
+
       // Validate inputs
       if (!Array.isArray(utxos)) {
         res.status(422)
@@ -2013,7 +2016,7 @@ class Slp {
         const theseUtxos = utxos[i].utxos
 
         // Get SLP token details.
-        const details = await _this.bchjs.SLP.Utils.tokenUtxoDetails(theseUtxos)
+        const details = await _this.bchjs.SLP.Utils.tokenUtxoDetails(theseUtxos, origin)
         // console.log('details: ', details)
 
         // Replace the original UTXO data with the hydrated data.