fix(core): spread storage options

src/module.ts

@@ -211,12 +211,12 @@ function registerRateLimiterStorage(nuxt: Nuxt, securityOptions: ModuleOptions)
       securityOptions.rateLimiter ? securityOptions.rateLimiter.driver : undefined,
       { name: 'lruCache' }
     )
-    const { name, options } = driver
+    const { name, options = {} } = driver
     config.storage = defu(
       {
         '#rate-limiter-storage': {
           driver: name,
-          options
+          ...options
         }
       },
       config.storage

test/fixtures/storageOptions/app.vue

@@ -0,0 +1,5 @@
+<template>
+  <div>
+    <NuxtPage />
+  </div>
+</template>

test/fixtures/storageOptions/nuxt.config.ts

@@ -0,0 +1,17 @@
+export default defineNuxtConfig({
+  modules: [
+    '../../../src/module'
+  ],
+  security: {
+    rateLimiter: {
+      tokensPerInterval: 3,
+      interval: 1000000,
+      driver: { 
+        name: 'fsLite',
+        options: {
+          base: './test/fixtures/storageOptions/.nuxt/test/.data/db'
+        }
+      }
+    }
+  }
+})

test/fixtures/storageOptions/package.json

@@ -0,0 +1,5 @@
+{
+  "private": true,
+  "name": "basic",
+  "type": "module"
+}

test/fixtures/storageOptions/pages/index.vue

@@ -0,0 +1,3 @@
+<template>
+  <div>basic</div>
+</template>

test/storageOptions.test.ts

@@ -0,0 +1,36 @@
+import { describe, it, expect } from 'vitest'
+import { fileURLToPath } from 'node:url'
+import { rm } from 'node:fs/promises'
+import { setup, fetch } from '@nuxt/test-utils'
+
+describe('[nuxt-security] Storage options', async () => {
+  await setup({
+    rootDir: fileURLToPath(new URL('./fixtures/storageOptions', import.meta.url)),
+  })
+
+  const dbPath = './test/fixtures/storageOptions/.nuxt/test/.data/db'
+  await rm(dbPath, { recursive: true, force: true })
+
+  it('should pass options to a custom driver', async () => {
+    const res1 = await fetch('/')
+    const res2 = await fetch('/')
+
+    expect(res1).toBeDefined()
+    expect(res1).toBeTruthy()
+    expect(res2.status).toBe(200)
+    expect(res2.statusText).toBe('OK')
+  })
+
+  it('should return 429 with the custom driver', async () => {
+    const res1 = await fetch('/')
+    await fetch('/')
+    await fetch('/')
+    await fetch('/')
+    const res5 = await fetch('/')
+
+    expect(res1).toBeDefined()
+    expect(res1).toBeTruthy()
+    expect(res5.status).toBe(429)
+    expect(res5.statusText).toBe('Too Many Requests')
+  })
+})