DataDome Node Module

2.5.0 (2026-06-01)

General changes

• Improve the core logic of our DataDome integration to support future capabilities
• Increase length limit from 128 to 512 characters for DataDome cookie to support future capabilities

2.4.0 (2026-05-04)

General changes

• Collect Sec-Fetch-Storage-Access header from requests

2.3.1 (2026-01-28)

@datadome/module-express

• Use request copy in DataDome middleware to prevent req.url mutation

2.3.0 (2025-09-25)

• Add handlers optional parameter to allow overriding fields in payloads sent to the Bot Protect API
• Exclude empty fields from payloads sent to the Bot Protect API

2.2.0 (2025-06-23)

• Add CookiesList to payloads sent to Protection API

2.1.0 (2024-12-18)

General changes

• Add enableGraphQLSupport option to enable GraphQL support

2.0.1 (2024-11-05)

General changes

• Fix dependencies issue

2.0.0 (2024-11-04)

General changes

• Collect fetch metadata headers
• Raise runtime error when using invalid constructor arguments

Breaking changes

• Split @datadome/node-module into two separate packages:
  • @datadome/module-express for usage with Express
  • @datadome/module-http for usage with built-in HTTP module from Node.js
• Rename uriRegex option to urlPatternInclusion
• Rename uriRegexExclusion option to urlPatternExclusion
• Remove port, shouldUseSsl and path options from DatadomeClient
• Move and rename endpoint parameter from being the second argument in DataDomeClient class to being part of the options object, now called endpointHost

@datadome/common

• Create package to interface with @datadome/node-core

@datadome/module-express

• Rename authCallback method to handleRequest
• Add middleware method to return a request handler

@datadome/module-http

• Rename auth method to handleRequest
• Change the handleRequest signature to return a promise

1.5.2 (2024-08-09)

• Fix the JSDoc and the TypeScript definition file
• Update default export of DatadomeClient to support strict ES

1.5.1 (2024-06-21)

• Use req.originalUrl to get the request URL for express integration

1.5.0 (2023-08-29)

• Add a new params argument to both auth and authCallback methods for enhanced customization

1.4.3 (2022-12-01)

• Fixed potential double execution of callbacks

1.4.2 (2022-10-24)

• Truncated request headers exceeding size limits

1.4.1 (2022-10-21)

• Fixed bug for undefined x-datadome-request-headers

1.4.0 (2022-10-04)

• Added access to x-datadome-request-headers in block and auth callback

1.3.2 (2022-07-12)

• Update user agent client hint request header
• Fix vulnerabilities from dependencies

1.3.1 (2022-01-25)

• Fix bug with logger scope

1.3.0 (2022-01-19)

• Introduced support for custom logger
• Added typescript types

1.2.1 (2021-11-23)

• Revised module version

1.2.0 (2021-11-17)

• Added collection of client hints

1.1.7 (2021-08-31)

• Added support of header X-DataDome-ClientID

1.1.6 (2021-05-22)

• Added errors handlers

1.1.5 (2021-04-15)

• Introduced support of req.baseUrl

1.1.4 (2020-12-08)

• Changed default exclusion regex

1.1.3 (2019-11-20)

• Fixed 4xx status codes handling

1.1.2 (2019-04-08)

• Added support of headers: Content-Type, From, Via, X-Real-IP and True-Client-IP

1.1.1 (2019-04-08)

• Fixed empty ServerHostname

1.1.0 (2019-02-25)

• Introduced callback based way to use a module

1.0.1 (2019-01-26)

• Override all headers except of Set-Cookie

1.0.0 (2019-01-18)

• Initial public release