Respond to threats instantly

1import { Replane } from '@replanejs/sdk'
2
3interface Configs {
4  'security-lockdown-enabled': boolean
5  'blocked-ips': string[]
6  'revoked-api-keys': string[]
7  'rate-limit-strict': number
8}
9
10const replane = new Replane<Configs>()
11
12await replane.connect({
13  baseUrl: 'https://replane.example.com',
14  sdkKey: process.env.REPLANE_SDK_KEY
15})
16
17// Security middleware
18app.use((req, res, next) => {
19  // Check lockdown mode
20  if (replane.get('security-lockdown-enabled')) {
21    return res.status(503).json({
22      error: 'System in maintenance mode'
23    })
24  }
25
26  // Check IP blocklist
27  const blockedIps = replane.get('blocked-ips')
28  if (blockedIps.includes(req.ip)) {
29    return res.status(403).json({
30      error: 'Access denied'
31    })
32  }
33
34  // Check API key revocation
35  const apiKey = req.headers['x-api-key']
36  const revokedKeys = replane.get('revoked-api-keys')
37  if (revokedKeys.includes(apiKey)) {
38    return res.status(401).json({
39      error: 'API key revoked'
40    })
41  }
42
43  next()
44})
45
46// Alert on lockdown activation
47replane.subscribe('security-lockdown-enabled', (config) => {
48  if (config.value) {
49    alertSecurityTeam('LOCKDOWN ACTIVATED')
50  }
51})