@auto-forge-org/stunly 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 auto-forge-org
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,18 @@
+# @auto-forge-org/stunly
+
+stunly is a lightweight STUN Binding server (RFC 5389) implemented in pure JavaScript. It provides a small, dependency-free server suitable for testing and lightweight deployments.
+
+Usage:
+
+```js
+const { StunServer } = require('@auto-forge-org/stunly');
+
+const s = new StunServer({ port: 3478, software: 'stunly/1.0' });
+s.start(() => console.log('stunly listening on 3478'));
+
+// stop with s.stop()
+```
+
+The server responds to STUN Binding requests with XOR-MAPPED-ADDRESS and SOFTWARE attributes plus FINGERPRINT.
+
+License: MIT

package/index.js

@@ -0,0 +1,119 @@
+const dgram = require('dgram');
+
+const MAGIC_COOKIE = 0x2112A442;
+
+function crc32(buf) {
+  const table = crc32.table || (crc32.table = (function() {
+    const t = new Uint32Array(256);
+    for (let i = 0; i < 256; i++) {
+      let c = i;
+      for (let k = 0; k < 8; k++) c = (c & 1) ? 0xEDB88320 ^ (c >>> 1) : (c >>> 1);
+      t[i] = c >>> 0;
+    }
+    return t;
+  })());
+  let crc = 0xFFFFFFFF;
+  for (let i = 0; i < buf.length; i++) crc = (crc >>> 8) ^ table[(crc ^ buf[i]) & 0xFF];
+  return (crc ^ 0xFFFFFFFF) >>> 0;
+}
+
+function buildXorMappedAttribute(addr, port, txid) {
+  const family = addr.includes(':') ? 0x02 : 0x01; // IPv6 not handled fully
+  const attrType = 0x0020; // XOR-MAPPED-ADDRESS
+  const portX = port ^ (MAGIC_COOKIE >>> 16);
+  const ip = addr.split('.').map(Number);
+  const ipBuf = Buffer.from(ip.map((b, i) => b ^ ((MAGIC_COOKIE >>> ((3 - i) * 8)) & 0xFF)));
+  const attrBuf = Buffer.alloc(4 + ipBuf.length);
+  attrBuf.writeUInt8(0, 0); // reserved
+  attrBuf.writeUInt8(family, 1);
+  attrBuf.writeUInt16BE(portX, 2);
+  ipBuf.copy(attrBuf, 4);
+
+  const header = Buffer.alloc(4);
+  header.writeUInt16BE(attrType, 0);
+  header.writeUInt16BE(attrBuf.length, 2);
+  return Buffer.concat([header, attrBuf]);
+}
+
+function buildSoftwareAttribute(text) {
+  const type = 0x8022;
+  const buf = Buffer.from(String(text || 'stunly/1.0'), 'utf8');
+  const pad = (4 - (buf.length % 4)) % 4;
+  const header = Buffer.alloc(4);
+  header.writeUInt16BE(type, 0);
+  header.writeUInt16BE(buf.length, 2);
+  if (pad) return Buffer.concat([header, buf, Buffer.alloc(pad)]);
+  return Buffer.concat([header, buf]);
+}
+
+function buildFingerprintAttr(msgWithoutFingerprint) {
+  const type = 0x8028;
+  const crc = crc32(msgWithoutFingerprint) ^ 0x5354554e;
+  const header = Buffer.alloc(4);
+  header.writeUInt16BE(type, 0);
+  header.writeUInt16BE(4, 2);
+  const val = Buffer.alloc(4);
+  val.writeUInt32BE(crc >>> 0, 0);
+  return Buffer.concat([header, val]);
+}
+
+function buildSuccessResponse(reqBuf, rinfo, software) {
+  if (!reqBuf || reqBuf.length < 20) return null;
+  const msgType = reqBuf.readUInt16BE(0);
+  const msgLen = reqBuf.readUInt16BE(2);
+  const cookie = reqBuf.readUInt32BE(4);
+  if (cookie !== MAGIC_COOKIE) return null;
+  const tx = reqBuf.slice(8, 20);
+  // Check Binding Request (0x0001)
+  if (msgType !== 0x0001) return null;
+
+  const xorAttr = buildXorMappedAttribute(rinfo.address, rinfo.port, tx);
+  const softwareAttr = buildSoftwareAttribute(software);
+  let attrs = Buffer.concat([xorAttr, softwareAttr]);
+
+  // Build header
+  const msgTypeRes = 0x0101; // Binding Success Response
+  const header = Buffer.alloc(20);
+  header.writeUInt16BE(msgTypeRes, 0);
+  header.writeUInt16BE(attrs.length + 8 /*fingerprint*/, 2); // will include fingerprint attr size
+  header.writeUInt32BE(MAGIC_COOKIE, 4);
+  tx.copy(header, 8);
+
+  const msgWithoutFingerprint = Buffer.concat([header, attrs]);
+  const fingerprint = buildFingerprintAttr(msgWithoutFingerprint);
+  const final = Buffer.concat([msgWithoutFingerprint, fingerprint]);
+  // Update length to actual attrs (without fingerprint attr length already included above), ensure correct
+  final.writeUInt16BE(attrs.length + 8, 2);
+  return final;
+}
+
+class StunServer {
+  constructor(opts = {}) {
+    this.port = opts.port || 3478;
+    this.host = opts.host || '0.0.0.0';
+    this.software = opts.software || 'stunly/1.0';
+    this.socket = dgram.createSocket('udp4');
+    this._onMessage = this._onMessage.bind(this);
+  }
+
+  _onMessage(msg, rinfo) {
+    try {
+      const res = buildSuccessResponse(msg, rinfo, this.software);
+      if (res) this.socket.send(res, rinfo.port, rinfo.address);
+    } catch (e) {
+      // silent
+    }
+  }
+
+  start(cb) {
+    this.socket.on('message', this._onMessage);
+    this.socket.bind(this.port, this.host, cb);
+  }
+
+  stop(cb) {
+    this.socket.removeListener('message', this._onMessage);
+    this.socket.close(cb);
+  }
+}
+
+module.exports = { StunServer, buildSuccessResponse };

package/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@auto-forge-org/stunly",
+  "version": "1.0.0",
+  "description": "Lightweight STUN Binding server (RFC 5389) implemented in pure JavaScript.",
+  "main": "index.js",
+  "keywords": ["stun","webrtc","udp","stun-server"],
+  "author": "auto-forge-org",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/auto-forge-org/stunly.git"
+  },
+  "files": ["index.js","README.md","LICENSE"],
+  "engines": { "node": ">=14" },
+  "scripts": {
+    "test": "node test.js"
+  }
+}