IS
Iri Shield
Multi-Layer API Security
Research prototype

API security middleware for Node.js apps.

iri-shield monitors API traffic, detects suspicious behaviour, tracks client identity drift, redacts sensitive response data, stores events, and provides a dashboard for research evaluation.

Package

iri-shield

Author

ansari-in

Dashboard

admin/admin

Storage

sqlite

Monitoring

Captures IP, URL, method, user-agent, cookies, sessions, client id, device id, status and latency.

Detection

Flags SQL injection, XSS, path traversal, sensitive endpoint probes, rate abuse and identity changes.

Research Data

Use client_requests.json and replay scripts to generate normal and fake attacker traffic for evaluation.

Private Admin APIs

Stats and metrics are not public. First login, then use the Bearer token.

curl -X POST http://[REDACTED]/login \
  -H "content-type: application/json" \
  -d "{\"username\":\"admin\",\"password\":\"admin\"}"

curl http://[REDACTED]/api/stats \
  -H "authorization: Bearer YOUR_TOKEN"

Useful URLs

Dashboard: /iri-shield

Live docs/site: https://[REDACTED]/

Package docs: GitHub README

NPM package: npmjs.com/package/iri-shield

API Routes

MethodURLPurposeAccess
GET/api/publicPublic monitored endpointpublic
GET/api/productsPublic sample endpointpublic
GET/api/users/1Public endpoint with PII redaction examplepublic
GET/api/search?q=%27%20or%201%3D1Threat detection testtest threat
POST/loginReturns admin JWT for private APIspublic
GET/api/privateRequires x-api-key: iri-example-keyauthenticated
GET/api/jwt-profileRequires Bearer tokenauthenticated
GET/api/statsPrivate stats API, requires Bearer tokenauthenticated
GET/metricsPrivate metrics API, requires Bearer tokenauthenticated
POST/research/replayPrivate dataset replay, requires Bearer tokenauthenticated
GET/iri-shieldPrivate dashboard, admin/adminauthenticated