Enterprise Security

Learn about Tusflow's robust security measures for enterprise-grade file uploads

Overview

Tusflow implements a comprehensive set of security measures to ensure that your file uploads are protected at every step. From rate limiting to authentication and file validation, we've got you covered.

Our enterprise-grade security features are designed to protect your data and prevent abuse of your upload endpoints.

Key Security Features

Rate Limiting

Prevent abuse and ensure fair usage of your upload endpoints.

Authentication

Secure your uploads with robust API key authentication.

File Validation

Ensure only allowed file types and sizes are uploaded.

Secure Headers

Implement best practices for web security headers.

Detailed Security Measures

Rate Limiting

Our rate limiting feature uses Upstash Redis to implement a sliding window algorithm, providing flexible and efficient request throttling.

Customizable limits based on HTTP methods
Sliding window algorithm for accurate throttling
Automatic header setting for limit information

Authentication

We use Unkey for robust API key authentication, allowing for fine-grained access control and key management.

Ensure your UNKEY_API_ID is properly set in your environment variables for authentication to work correctly.

Features:

Path-based exclusions for public routes
Custom error handling
Flexible invalid key handling

File Validation

Our file validation middleware ensures that only allowed file types and sizes are processed, protecting your system from potential threats.

if (FILE_VALIDATION.ENABLE_TYPE_VALIDATION && filename) {
  const fileExt = path.extname(filename).toLowerCase();
  const allowedTypes = FILE_VALIDATION.ALLOWED_FILE_TYPES;
  if (allowedTypes && allowedTypes.length > 0 && !allowedTypes.includes(fileExt)) {
    throw new ValidationError(ERROR_MESSAGES.FILE_VALIDATION.INVALID_FILE_TYPE, {
      statusCode: 415,
      errorCode: 'INVALID_FILE_TYPE',
      details: {
        allowedTypes: FILE_VALIDATION.ALLOWED_FILE_TYPES,
        providedType: fileExt,
      },
    });
  }
}

Secure Headers

We implement a comprehensive set of secure headers to protect against various web vulnerabilities.

const secureHeadersMiddleware = secureHeaders({
  strictTransportSecurity: 'max-age=31536000; includeSubDomains',
  contentSecurityPolicy: {
    defaultSrc: ["'self'"],
    scriptSrc: ["'self'"],
    styleSrc: ["'self'"],
    imgSrc: ["'self'", 'data:'],
    fontSrc: ["'self'"],
    objectSrc: ["'none'"],
    frameAncestors: ["'none'"],
  },
  permissionsPolicy: {
    accelerometer: [],
    camera: [],
    geolocation: [],
    gyroscope: [],
    magnetometer: [],
    microphone: [],
    payment: [],
    usb: [],
  },
  crossOriginEmbedderPolicy: true,
  crossOriginOpenerPolicy: true,
  crossOriginResourcePolicy: true,
  referrerPolicy: 'strict-origin-when-cross-origin',
});

Best Practices

While our security measures are robust, it's important to follow best practices to ensure the highest level of protection for your uploads.

Regular Key Rotation
- Implement a policy for regular API key rotation
- Use short-lived keys for sensitive operations
Monitoring and Alerting
- Set up alerts for unusual upload patterns
- Monitor rate limit hits and authentication failures
Least Privilege Access
- Use fine-grained permissions for API keys
- Regularly audit and remove unused keys
Secure Configuration Management
- Use environment variables for sensitive configuration
- Implement a secure process for managing and updating security settings

By leveraging these enterprise-grade security features and following best practices, you can ensure that your file uploads remain secure and your system protected from potential threats.

Enterprise Security

On this page