API REST para administrar el contrato inteligente MetaTxForwarder en Ethereum.

• ✅ Autenticación por API Key
• ✅ Rate limiting (100 requests por 15 minutos)
• ✅ Helmet.js para seguridad
• ✅ CORS habilitado
• ✅ Endpoints para todas las funciones administrativas del contrato
• ✅ Soporte para múltiples redes (Ethereum, Polygon, Arbitrum, Base, etc.)

# Clonar el repositorio
git clone <tu-repositorio>
cd metatxforwarder-api

# Instalar dependencias
npm install

# Configurar variables de entorno
cp .env.example .env
# Edita .env con tus valores

node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"

Edita el archivo .env con tus valores:

PORT=3000
API_KEY=tu_api_key_super_secreta
RPC_URL=https://eth-mainnet.g.alchemy.com/v2/TU_API_KEY
NETWORK=ethereum-mainnet
PRIVATE_KEY=0xtu_private_key_aqui
CONTRACT_ADDRESS=0xtu_contrato_aqui

⚠️ IMPORTANTE: Nunca compartas tu PRIVATE_KEY ni la subas a repositorios públicos.

npm run dev

npm start

La API estará disponible en http://localhost:3000

Todas las peticiones requieren autenticación por API Key. Puedes enviarla de dos formas:

GET http://localhost:3000/health?apikey=tu_api_key

GET http://localhost:3000/health
Headers:
  x-api-key: tu_api_key

GET /health?apikey=YOUR_API_KEY

Respuesta:

{
  "status": "ok",
  "contract": "0x...",
  "owner": "0x...",
  "network": "ethereum-mainnet",
  "blockNumber": 18500000
}

GET /config?apikey=YOUR_API_KEY

Respuesta:

{
  "owner": "0x...",
  "erc2771AppendSender": true,
  "gasAccountingOverhead": "15000",
  "defaultDeployGasBucketLimit": "10000000",
  "defaultDeployGasBucketDuration": "600"
}

GET /caller/0xADDRESS/allowed?apikey=YOUR_API_KEY

Respuesta:

{
  "address": "0x...",
  "isAllowed": true,
  "gasLimitPerBlock": "5000000",
  "gasUsedThisBlock": {
    "used": "120000",
    "limit": "5000000",
    "blockNumber": "18500000"
  }
}

GET /callers?apikey=YOUR_API_KEY

Respuesta:

{
  "count": 3,
  "callers": ["0x...", "0x...", "0x..."]
}

GET /deployer/0xADDRESS/allowed?apikey=YOUR_API_KEY

Respuesta:

{
  "address": "0x...",
  "isAllowed": true
}

GET /deployer/0xADDRESS/info?apikey=YOUR_API_KEY

Respuesta:

{
  "deployer": "0x...",
  "allowed": true,
  "gasUsedInWindow": "3000000",
  "windowStartedAt": "1700000000",
  "lastDeployBlock": "18499999",
  "gasBucketLimit": "10000000",
  "gasBucketDuration": "600",
  "useCustomConfig": false,
  "currentState": {
    "used": "3000000",
    "limit": "10000000",
    "startedAt": "1700000000",
    "duration": "600",
    "currentTimestamp": "1700000500"
  }
}

GET /deployers?apikey=YOUR_API_KEY

Respuesta:

{
  "count": 5,
  "deployers": ["0x...", "0x...", "0x..."]
}

POST /caller/set-allowed?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "caller": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
  "allowed": true
}

Respuesta:

{
  "success": true,
  "caller": "0x...",
  "allowed": true,
  "txHash": "0x...",
  "blockNumber": 18500001
}

POST /caller/set-gas-limit?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "caller": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
  "limit": "5000000"
}

POST /config/set-gas-overhead?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "overhead": "15000"
}

POST /config/set-erc2771?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "enabled": true
}

POST /config/set-default-deploy-bucket?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "limit": "10000000",
  "durationSeconds": "600"
}

POST /deployer/set-bucket-config?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "deployer": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
  "limit": "20000000",
  "durationSeconds": "1200",
  "useCustom": true
}

POST /deployer/set-allowed?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "deployer": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
  "allowed": true
}

POST /deployers/set-allowed-batch?apikey=YOUR_API_KEY
Content-Type: application/json

{
  "deployers": [
    "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
    "0x8626f6940E2eb28930eFb4CeF49B2d1F2C9C1199"
  ],
  "allowed": [true, true]
}

# Health check
curl "http://localhost:3000/health?apikey=tu_api_key"

# Obtener configuración
curl "http://localhost:3000/config?apikey=tu_api_key"

# Establecer caller permitido
curl -X POST "http://localhost:3000/caller/set-allowed?apikey=tu_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "caller": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
    "allowed": true
  }'

const API_URL = 'http://localhost:3000';
const API_KEY = 'tu_api_key';

// Función auxiliar
async function apiRequest(endpoint, method = 'GET', body = null) {
  const options = {
    method,
    headers: {
      'Content-Type': 'application/json',
      'x-api-key': API_KEY
    }
  };
  
  if (body) {
    options.body = JSON.stringify(body);
  }
  
  const response = await fetch(`${API_URL}${endpoint}`, options);
  return response.json();
}

// Health check
const health = await apiRequest('/health');
console.log(health);

// Establecer caller
const result = await apiRequest('/caller/set-allowed', 'POST', {
  caller: '0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1',
  allowed: true
});
console.log(result);

import requests

API_URL = 'http://localhost:3000'
API_KEY = 'tu_api_key'

# Health check
response = requests.get(
    f'{API_URL}/health',
    params={'apikey': API_KEY}
)
print(response.json())

# Establecer caller
response = requests.post(
    f'{API_URL}/caller/set-allowed',
    params={'apikey': API_KEY},
    json={
        'caller': '0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1',
        'allowed': True
    }
)
print(response.json())

1. API Key: Todas las peticiones requieren autenticación
2. Rate Limiting: Máximo 100 requests por 15 minutos
3. Helmet.js: Headers de seguridad HTTP
4. CORS: Configurado para permitir orígenes específicos
5. Variables de entorno: Credenciales nunca en código

• ✅ Usa HTTPS en producción
• ✅ Regenera el API_KEY periódicamente
• ✅ Usa un servicio de gestión de secretos (AWS Secrets Manager, Railway, etc.)
• ✅ Implementa logging y monitoreo
• ✅ Considera usar un reverse proxy (nginx)
• ✅ Implementa autenticación por token JWT para usuarios específicos

# Instalar Railway CLI
npm install -g @railway/cli

# Login
railway login

# Deploy
railway init
railway up

# Login
heroku login

# Crear app
heroku create tu-app-name

# Configurar variables
heroku config:set API_KEY=tu_api_key
heroku config:set RPC_URL=tu_rpc_url
heroku config:set PRIVATE_KEY=tu_private_key
heroku config:set CONTRACT_ADDRESS=tu_contrato

# Deploy
git push heroku main

FROM node:18-alpine

WORKDIR /app

COPY package*.json ./
RUN npm ci --only=production

COPY . .

EXPOSE 3000

CMD ["node", "server.js"]

# Build
docker build -t metatxforwarder-api .

# Run
docker run -p 3000:3000 --env-file .env metatxforwarder-api

Las contribuciones son bienvenidas. Por favor:

1. Fork el proyecto
2. Crea una rama para tu feature (git checkout -b feature/AmazingFeature)
3. Commit tus cambios (git commit -m 'Add some AmazingFeature')
4. Push a la rama (git push origin feature/AmazingFeature)
5. Abre un Pull Request

MIT

Luis - MetaTxForwarder Contract

Para reportar bugs o solicitar features, por favor abre un issue en GitHub.