feat(rate-limiter): add IP allowlist and blocklist support

Author: rudra3007-pro

lib/rate-limit.ts

@@ -18,6 +18,8 @@ export class RateLimiter {
   private cache: TTLCache<number>;
   private limit: number;
   private windowMs: number;
+  private allowlist = new Set<string>();
+  private blocklist = new Set<string>();
 
   /**
    * Creates a new RateLimiter instance.
@@ -46,6 +48,8 @@ export class RateLimiter {
    * }
    */
   check(ip: string): boolean {
+    if (this.allowlist.has(ip)) return true; // for check()
+    if (this.blocklist.has(ip)) return false; // for check()
     const current = this.cache.get(ip) || 0;
     if (current >= this.limit) {
       return false;
@@ -54,6 +58,15 @@ export class RateLimiter {
     return true;
   }
   checkWithResult(ip: string): RateLimitResult {
+    if (this.allowlist.has(ip))
+      return {
+        success: true,
+        limit: this.limit,
+        remaining: this.limit,
+        reset: Date.now() + this.windowMs,
+      };
+    if (this.blocklist.has(ip))
+      return { success: false, limit: this.limit, remaining: 0, reset: Date.now() + this.windowMs };
     const now = Date.now();
     const current = this.cache.get(ip) ?? 0;
 
@@ -88,6 +101,24 @@ export class RateLimiter {
   reset(ip: string): void {
     this.cache.delete(ip);
   }
+
+  allow(ip: string): void {
+    this.allowlist.add(ip);
+    this.blocklist.delete(ip);
+  }
+
+  block(ip: string): void {
+    this.blocklist.add(ip);
+    this.allowlist.delete(ip);
+  }
+
+  unallow(ip: string): void {
+    this.allowlist.delete(ip);
+  }
+
+  unblock(ip: string): void {
+    this.blocklist.delete(ip);
+  }
 }
 
 // Global instance for track-user endpoint (5 requests per IP per minute)