@arcjet/deno

@arcjet/deno

Arcjet helps developers protect their apps in just a few lines of code. Implement rate limiting, bot protection, email verification & defense against common attacks.

This is the Arcjet SDK for Deno.

Rate limit + bot detection example

The Arcjet rate limit example below applies a token bucket rate limit rule to a route where we identify the user based on their ID e.g. if they are logged in. The bucket is configured with a maximum capacity of 10 tokens and refills by 5 tokens every 10 seconds. Each request consumes 5 tokens.

import "jsr:@std/dotenv/load";

import arcjet, { tokenBucket, detectBot } from "npm:@arcjet/deno";

const aj = arcjet({
  key: Deno.env.get("ARCJET_KEY")!, // Get your site key from https://app.arcjet.com
  characteristics: ["userId"], // track requests by a custom user ID
  rules: [
    // Create a token bucket rate limit. Other algorithms are supported.
    tokenBucket({
      mode: "LIVE", // will block requests. Use "DRY_RUN" to log only
      refillRate: 5, // refill 5 tokens per interval
      interval: 10, // refill every 10 seconds
      capacity: 10, // bucket maximum capacity of 10 tokens
    }),
    detectBot({
      mode: "LIVE", // will block requests. Use "DRY_RUN" to log only
      // configured with a list of bots to allow from
      // https://arcjet.com/bot-list
      allow: [], // "allow none" will block all detected bots
    }),
  ],
});

Deno.serve(
  aj.handler(async function (req: Request) {
    const userId = "user123"; // Replace with your authenticated user ID
    const decision = await aj.protect(req, { userId, requested: 5 }); // Deduct 5 tokens from the bucket
    console.log("Arcjet decision", decision);

    if (decision.isDenied()) {
      return Response.json({ error: "Forbidden" }, { status: 403 });
    } else {
      return Response.json({ message: "Hello world" });
    }
  }),
);

Shield example

Arcjet Shield protects your application against common attacks, including the OWASP Top 10. You can run Shield on every request with negligible performance impact.

import "jsr:@std/dotenv/load";

import arcjet, { shield } from "npm:@arcjet/deno";

const aj = arcjet({
  key: Deno.env.get("ARCJET_KEY")!, // Get your site key from https://app.arcjet.com
  rules: [
    shield({
      mode: "LIVE", // will block requests. Use "DRY_RUN" to log only
    }),
  ],
});

Deno.serve(
  aj.handler(async function (req: Request) {
    const decision = await aj.protect(req);

    if (decision.isDenied()) {
      return Response.json({ error: "Forbidden" }, { status: 403 });
    } else {
      return Response.json({ message: "Hello world" });
    }
  }),
);

License

Licensed under the Apache License, Version 2.0.

Changelog

1.0.0-beta.2 (2025-02-04)

🚀 New Features

• env: Support MODE environment variable for isDevelopment detection (#3012) (f3a45a7)
• Implement Astro integration (#2992) (a48eea8), closes #1075
• nestjs: Allow NestJS v11 as peerDependency (#3042) (4a75963), closes #2921
• redact: Pre-compile WebAssembly on module load (#3037) (c12bec5)

🪲 Bug Fixes

• analyze: Always lowercase headers and iterate in insertion order (#2865) (a9af1e4)
• arcjet: Ensure Characteristics are readonly type on protect signup options (#3013) (1f16a99)
• protocol: Double timeout when email rule configured (#2934) (23f9a9e), closes #1697

🧹 Miscellaneous Chores

• ci: Add dependabot for Astro example (#3068) (d4d8f82)
• ci: Avoid upgrading Tailwind where it breaks things (#3081) (5c25abe)
• ci: Restrict tailwind-merge where tailwind restricted (#3089) (a3437a5)
• docs: Add a link to the Redact reference page (#3038) (6095b6a)
• Refresh root & Next.js READMEs (#3066) (57a38d7)
• rollup-config: Consolidate wasmToModule plugin (#3039) (c3b8e36)