@bleedingdev/modern-js-create-request 3.5.0-ultramodern.6 → 3.5.0-ultramodern.76

package/dist/esm-node/browser.mjs

@@ -1,219 +1,27 @@
 import "node:module";
-import { compile } from "path-to-regexp";
-import { stringify } from "qs";
 import { handleRes } from "./handleRes.mjs";
-import { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, TRACEPARENT_HEADER, attachOperationContextHeaders, buildEnvelopeHeaderValue, deleteHeader, extractPathParamNames, isEmptyDomain, isSecuredRequestId, parseTraceparentValue, readHeader, resolveConfiguredRequest, toOrigin, writeHeader } from "./policyCore.mjs";
-import { executeWithResilience } from "./transport.mjs";
-import { BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS, BFF_ENVELOPE_HEADER, BFF_OPERATION_CONTEXT_DETAIL_HEADER, BFF_OPERATION_CONTEXT_HEADER } from "./types.mjs";
-import { getUploadPayload } from "./utiles.mjs";
+import { createRequestFactory } from "./requestFactory.mjs";
 export * from "./requestContext.mjs";
 export * from "./traceparent.mjs";
 export * from "./types.mjs";
-const realRequest = new Map();
-const realAllowedHeaders = new Map();
-const realRequireEnvelope = new Map();
-const realAllowCrossOriginEnvelope = new Map();
-const realTransportResilience = new Map();
-const realIdentityBinding = new Map();
-const realOperationContract = new Map();
-const domainMap = new Map();
-const OPERATION_CONTEXT_DETAIL_HEADER = BFF_OPERATION_CONTEXT_DETAIL_HEADER;
 const resolveBrowserOrigin = ()=>"u" > typeof window ? window.location.origin : void 0;
 const originFetch = (...params)=>{
     const [url, init] = params;
     if (init?.method?.toLowerCase() === 'get') init.body = void 0;
     return fetch(url, init).then(handleRes);
 };
-const attachEnvelopeHeaderIfRequired = (headers, requestId, finalURL)=>{
-    const shouldRequireEnvelope = realRequireEnvelope.get(requestId) ?? isSecuredRequestId(requestId);
-    if (!shouldRequireEnvelope) return;
-    headers[BFF_ENVELOPE_HEADER] = buildEnvelopeHeaderValue({
-        requestId,
-        target: 'browser',
-        sourceOrigin: resolveBrowserOrigin(),
-        targetOrigin: toOrigin(finalURL),
-        traceContext: parseTraceparentValue(readHeader(headers, TRACEPARENT_HEADER)),
-        allowCrossOriginEnvelope: realAllowCrossOriginEnvelope.get(requestId)
-    });
-};
-const attachSecuredOperationHeaders = (headers, requestId, method, path, operationContext)=>{
-    if (!isSecuredRequestId(requestId)) return;
-    attachOperationContextHeaders({
-        headers,
-        requestId,
-        target: 'browser',
-        method,
-        path,
-        operationContext,
-        operationContract: realOperationContract.get(requestId),
-        operationContextHeader: BFF_OPERATION_CONTEXT_HEADER,
-        operationContextDetailHeader: OPERATION_CONTEXT_DETAIL_HEADER
-    });
-};
-const configure = (options)=>{
-    const { request, interceptor, allowedHeaders, transport, requireEnvelope, allowCrossOriginEnvelope, identityBinding, operationContract, setDomain, requestId = 'default' } = options;
-    const hasExistingDomain = domainMap.has(requestId);
-    if ('default' !== requestId && !setDomain && !hasExistingDomain) throw new ProducerDomainNotConfiguredError(requestId);
-    let configuredRequest = request || originFetch;
-    if (interceptor && !request) configuredRequest = interceptor(fetch);
-    if (Array.isArray(allowedHeaders)) realAllowedHeaders.set(requestId, allowedHeaders);
-    if (transport && 'object' == typeof transport) realTransportResilience.set(requestId, transport);
-    if (identityBinding && 'object' == typeof identityBinding) realIdentityBinding.set(requestId, identityBinding);
-    if (operationContract && 'object' == typeof operationContract) realOperationContract.set(requestId, operationContract);
-    if ('boolean' == typeof requireEnvelope) realRequireEnvelope.set(requestId, requireEnvelope);
-    if ('boolean' == typeof allowCrossOriginEnvelope || 'function' == typeof allowCrossOriginEnvelope) realAllowCrossOriginEnvelope.set(requestId, allowCrossOriginEnvelope);
-    if (setDomain) {
-        const resolvedDomain = setDomain({
-            target: 'browser',
-            requestId
-        });
-        if ('default' !== requestId && isEmptyDomain(resolvedDomain)) throw new ProducerDomainNotConfiguredError(requestId);
-        if ('string' == typeof resolvedDomain) domainMap.set(requestId, resolvedDomain);
-    }
-    realRequest.set(requestId, configuredRequest);
-};
-const normalizeRequestOptions = (...args)=>{
-    if ('object' == typeof args[0] && null !== args[0]) return args[0];
-    const [path, method, port, httpMethodDecider, fetch1, requestId, operationContext] = args;
-    return {
-        path,
-        method,
-        port,
-        httpMethodDecider,
-        fetch: fetch1,
-        requestId,
-        operationContext
-    };
-};
-const createRequest = (...args)=>{
-    const { path, method, port, httpMethodDecider = 'functionName', fetch: fetch1 = originFetch, domain, requestId = 'default', operationContext } = normalizeRequestOptions(...args);
-    const getFinalPath = compile(path, {
-        encode: encodeURIComponent
-    });
-    const keyNames = extractPathParamNames(path);
-    const sender = async (...args)=>{
-        const fetcher = resolveConfiguredRequest(realRequest, requestId, fetch1);
-        let body;
-        let finalURL;
-        let headers;
-        if ('inputParams' === httpMethodDecider) {
-            finalURL = path;
-            body = JSON.stringify({
-                args
-            });
-            headers = {
-                'Content-Type': 'application/json'
-            };
-        } else {
-            const payload = 'object' == typeof args[args.length - 1] ? args[args.length - 1] : {};
-            payload.params = payload.params || {};
-            const requestParams = args[0];
-            if ('object' == typeof requestParams && requestParams.params) {
-                const { params } = requestParams;
-                keyNames.forEach((keyName)=>{
-                    payload.params[keyName] = params[keyName];
-                });
-            } else keyNames.forEach((keyName, index)=>{
-                payload.params[keyName] = args[index];
-            });
-            const finalPath = getFinalPath(payload.params);
-            finalURL = payload.query ? `${finalPath}?${stringify(payload.query)}` : finalPath;
-            headers = payload.headers ? {
-                ...payload.headers
-            } : {};
-            const identityBinding = realIdentityBinding.get(requestId);
-            const identityBindingEnabled = identityBinding?.enabled ?? isSecuredRequestId(requestId);
-            const identityBindingStrict = identityBinding?.strict ?? isSecuredRequestId(requestId);
-            const protectedIdentityHeaders = (identityBinding?.protectedHeaders || BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS).map((header)=>header.toLowerCase());
-            if (identityBindingEnabled) {
-                const derivedIdentityHeaders = {};
-                const customDerivedHeaders = identityBinding?.deriveHeaders?.({
-                    requestId,
-                    target: 'browser',
-                    incomingHeaders: {},
-                    protectedHeaders: [
-                        ...protectedIdentityHeaders
-                    ]
-                });
-                if (customDerivedHeaders && 'object' == typeof customDerivedHeaders) for (const header of protectedIdentityHeaders){
-                    const customValue = readHeader(customDerivedHeaders, header);
-                    if (void 0 !== customValue) writeHeader(derivedIdentityHeaders, header, customValue);
-                }
-                for (const header of protectedIdentityHeaders){
-                    const attemptedValue = readHeader(headers, header);
-                    if (void 0 === attemptedValue) continue;
-                    const violation = {
-                        requestId,
-                        target: 'browser',
-                        header,
-                        attemptedValue,
-                        derivedValue: readHeader(derivedIdentityHeaders, header),
-                        reason: identityBindingStrict ? 'client_override_rejected' : 'client_override_blocked'
-                    };
-                    identityBinding?.onViolation?.(violation);
-                    if (identityBindingStrict) throw new IdentityBindingViolationError(violation);
-                    deleteHeader(headers, header);
-                }
-                Object.keys(derivedIdentityHeaders).forEach((header)=>{
-                    writeHeader(headers, header, derivedIdentityHeaders[header]);
-                });
-            }
-            body = payload.data && 'object' == typeof payload.data ? JSON.stringify(payload.data) : payload.body;
-            if (payload.data) {
-                headers['Content-Type'] = 'application/json';
-                body = 'object' == typeof payload.data ? JSON.stringify(payload.data) : payload.body;
-            } else if (payload.body) {
-                headers['Content-Type'] = 'text/plain';
-                body = payload.body;
-            } else if (payload.formData) body = payload.formData;
-            else if (payload.formUrlencoded) {
-                headers['Content-Type'] = 'application/x-www-form-urlencoded';
-                body = 'object' != typeof payload.formUrlencoded || payload.formUrlencoded instanceof URLSearchParams ? payload.formUrlencoded : stringify(payload.formUrlencoded);
-            }
-        }
-        headers.accept = "application/json,*/*;q=0.8";
-        const configDomain = domainMap.get(requestId);
-        if ('default' !== requestId && isEmptyDomain(configDomain)) throw new ProducerDomainNotConfiguredError(requestId);
-        finalURL = `${configDomain || ''}${finalURL}`;
-        attachEnvelopeHeaderIfRequired(headers, requestId, finalURL);
-        attachSecuredOperationHeaders(headers, requestId, method, path, operationContext);
-        return executeWithResilience({
-            requestId,
-            target: 'browser',
-            method,
-            url: finalURL,
-            init: {
-                method,
-                body,
-                headers
-            },
-            fetcher,
-            transport: realTransportResilience.get(requestId)
-        });
-    };
-    return sender;
-};
-const createUploader = ({ path, domain, requestId = 'default', operationContext })=>{
-    const getFinalPath = compile(path, {
-        encode: encodeURIComponent
-    });
-    const sender = (...args)=>{
-        const fetcher = resolveConfiguredRequest(realRequest, requestId, originFetch);
-        const { body, headers: uploadHeaders, params } = getUploadPayload(args);
-        const headers = {
-            ...uploadHeaders
-        };
-        const finalPath = getFinalPath(params);
-        const configDomain = domainMap.get(requestId);
-        const finalURL = `${configDomain || domain || ''}${finalPath}`;
-        attachEnvelopeHeaderIfRequired(headers, requestId, finalURL);
-        attachSecuredOperationHeaders(headers, requestId, 'POST', path, operationContext);
-        return fetcher(finalURL, {
-            method: 'POST',
-            body,
-            headers
-        });
-    };
-    return sender;
-};
-export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, configure, createRequest, createUploader };
+const requestFactory = createRequestFactory({
+    target: 'browser',
+    getFetch: ()=>fetch,
+    originFetch: originFetch,
+    readIncomingHeaders: ()=>({}),
+    resolveSourceOrigin: resolveBrowserOrigin,
+    createInputParamsBody: (args)=>JSON.stringify({
+            args
+        }),
+    resolveRequestUrl: ({ configDomain, path })=>`${configDomain || ''}${path}`,
+    resolveUploadUrl: ({ configDomain, domain, path })=>`${configDomain || domain || ''}${path}`
+});
+const { configure: configure, createRequest: createRequest, createUploader: createUploader } = requestFactory;
+export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError } from "./policyCore.mjs";
+export { configure, createRequest, createUploader };

package/dist/esm-node/node.mjs

@@ -1,25 +1,11 @@
 import "node:module";
 import { storage } from "@modern-js/runtime-utils/node";
-import { compile } from "path-to-regexp";
-import { stringify } from "qs";
 import { handleRes } from "./handleRes.mjs";
-import { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, TRACEPARENT_HEADER, attachOperationContextHeaders, buildEnvelopeHeaderValue, deleteHeader, extractPathParamNames, firstHeaderValue, isEmptyDomain, isSecuredRequestId, parseTraceparentValue, readHeader, resolveConfiguredRequest, toOrigin, writeHeader } from "./policyCore.mjs";
-import { executeWithResilience } from "./transport.mjs";
-import { BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS, BFF_ENVELOPE_HEADER, BFF_OPERATION_CONTEXT_DETAIL_HEADER, BFF_OPERATION_CONTEXT_HEADER } from "./types.mjs";
-import { getUploadPayload } from "./utiles.mjs";
+import { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, firstHeaderValue, toOrigin } from "./policyCore.mjs";
+import { createRequestFactory } from "./requestFactory.mjs";
 export * from "./requestContext.mjs";
 export * from "./traceparent.mjs";
 export * from "./types.mjs";
-const realRequest = new Map();
-const realAllowedHeaders = new Map();
-const realResolveHeaders = new Map();
-const realRequireEnvelope = new Map();
-const realAllowCrossOriginEnvelope = new Map();
-const realTransportResilience = new Map();
-const realIdentityBinding = new Map();
-const realOperationContract = new Map();
-const domainMap = new Map();
-const OPERATION_CONTEXT_DETAIL_HEADER = BFF_OPERATION_CONTEXT_DETAIL_HEADER;
 const resolveSourceOrigin = (headers)=>{
     const origin = toOrigin(firstHeaderValue(headers.origin));
     if (origin) return origin;
@@ -42,225 +28,15 @@ const originFetch = (...params)=>{
     if (init?.method?.toLowerCase() === 'get') init.body = void 0;
     return fetch(...params).then(handleRes);
 };
-const attachEnvelopeHeaderIfRequired = (headers, requestId, url, webRequestHeaders)=>{
-    const shouldRequireEnvelope = realRequireEnvelope.get(requestId) ?? isSecuredRequestId(requestId);
-    if (!shouldRequireEnvelope) return;
-    headers[BFF_ENVELOPE_HEADER] = buildEnvelopeHeaderValue({
-        requestId,
-        target: 'server',
-        sourceOrigin: resolveSourceOrigin(webRequestHeaders),
-        targetOrigin: toOrigin(url),
-        traceContext: parseTraceparentValue(readHeader(headers, TRACEPARENT_HEADER)),
-        allowCrossOriginEnvelope: realAllowCrossOriginEnvelope.get(requestId)
-    });
-};
-const attachSecuredOperationHeaders = (headers, requestId, method, path, operationContext)=>{
-    if (!isSecuredRequestId(requestId)) return;
-    attachOperationContextHeaders({
-        headers,
-        requestId,
-        target: 'server',
-        method,
-        path,
-        operationContext,
-        operationContract: realOperationContract.get(requestId),
-        operationContextHeader: BFF_OPERATION_CONTEXT_HEADER,
-        operationContextDetailHeader: OPERATION_CONTEXT_DETAIL_HEADER
-    });
-};
-const configure = (options)=>{
-    const { request, interceptor, allowedHeaders, resolveHeaders, transport, requireEnvelope, allowCrossOriginEnvelope, identityBinding, operationContract, setDomain, requestId = 'default' } = options;
-    const hasExistingDomain = domainMap.has(requestId);
-    if ('default' !== requestId && !setDomain && !hasExistingDomain) throw new ProducerDomainNotConfiguredError(requestId);
-    let configuredRequest = request || originFetch;
-    if (interceptor && !request) configuredRequest = interceptor(fetch);
-    if (Array.isArray(allowedHeaders)) realAllowedHeaders.set(requestId, allowedHeaders);
-    if ('function' == typeof resolveHeaders) realResolveHeaders.set(requestId, resolveHeaders);
-    if (transport && 'object' == typeof transport) realTransportResilience.set(requestId, transport);
-    if (identityBinding && 'object' == typeof identityBinding) realIdentityBinding.set(requestId, identityBinding);
-    if (operationContract && 'object' == typeof operationContract) realOperationContract.set(requestId, operationContract);
-    if ('boolean' == typeof requireEnvelope) realRequireEnvelope.set(requestId, requireEnvelope);
-    if ('boolean' == typeof allowCrossOriginEnvelope || 'function' == typeof allowCrossOriginEnvelope) realAllowCrossOriginEnvelope.set(requestId, allowCrossOriginEnvelope);
-    if (setDomain) {
-        const resolvedDomain = setDomain({
-            target: 'server',
-            requestId
-        });
-        if ('default' !== requestId && isEmptyDomain(resolvedDomain)) throw new ProducerDomainNotConfiguredError(requestId);
-        if ('string' == typeof resolvedDomain) domainMap.set(requestId, resolvedDomain);
-    }
-    realRequest.set(requestId, configuredRequest);
-};
-const normalizeRequestOptions = (...args)=>{
-    if ('object' == typeof args[0] && null !== args[0]) return args[0];
-    const [path, method, port, httpMethodDecider, fetch1, requestId, operationContext] = args;
-    return {
-        path,
-        method,
-        port,
-        httpMethodDecider,
-        fetch: fetch1,
-        requestId,
-        operationContext
-    };
-};
-const createRequest = (...args)=>{
-    const { path, method, port, httpMethodDecider = 'functionName', fetch: fetch1 = originFetch, requestId = 'default', operationContext } = normalizeRequestOptions(...args);
-    const getFinalPath = compile(path, {
-        encode: encodeURIComponent
-    });
-    const keyNames = extractPathParamNames(path);
-    const sender = (...args)=>{
-        const fetcher = resolveConfiguredRequest(realRequest, requestId, fetch1);
-        const webRequestHeaders = readIncomingWebHeaders();
-        let body;
-        let headers;
-        let url;
-        if ('inputParams' === httpMethodDecider) {
-            const configDomain = domainMap.get(requestId);
-            if ('default' !== requestId && isEmptyDomain(configDomain)) throw new ProducerDomainNotConfiguredError(requestId);
-            url = `${configDomain || `http://127.0.0.1:${port}`}${path}`;
-            body = args;
-            headers = {
-                'Content-Type': 'application/json'
-            };
-        } else {
-            const payload = 'object' == typeof args[args.length - 1] ? args[args.length - 1] : {};
-            payload.params = payload.params || {};
-            const requestParams = args[0];
-            if ('object' == typeof requestParams && requestParams.params) {
-                const { params } = requestParams;
-                keyNames.forEach((keyName)=>{
-                    payload.params[keyName] = params[keyName];
-                });
-            } else keyNames.forEach((keyName, index)=>{
-                payload.params[keyName] = args[index];
-            });
-            const plainPath = getFinalPath(payload.params);
-            const finalPath = payload.query ? `${plainPath}?${stringify(payload.query)}` : plainPath;
-            headers = payload.headers ? {
-                ...payload.headers
-            } : {};
-            const identityBinding = realIdentityBinding.get(requestId);
-            const identityBindingEnabled = identityBinding?.enabled ?? isSecuredRequestId(requestId);
-            const identityBindingStrict = identityBinding?.strict ?? isSecuredRequestId(requestId);
-            const protectedIdentityHeaders = (identityBinding?.protectedHeaders || BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS).map((header)=>header.toLowerCase());
-            const targetAllowedHeaders = realAllowedHeaders.get(requestId) || [];
-            const forwardedHeaders = {};
-            for (const key of targetAllowedHeaders)if (void 0 !== webRequestHeaders[key]) forwardedHeaders[key] = webRequestHeaders[key];
-            if (identityBindingEnabled) {
-                const derivedIdentityHeaders = {};
-                for (const header of protectedIdentityHeaders){
-                    const incomingHeaderValue = readHeader(webRequestHeaders, header);
-                    if (void 0 !== incomingHeaderValue) writeHeader(derivedIdentityHeaders, header, incomingHeaderValue);
-                }
-                const customDerivedHeaders = identityBinding?.deriveHeaders?.({
-                    requestId,
-                    target: 'server',
-                    incomingHeaders: {
-                        ...webRequestHeaders
-                    },
-                    protectedHeaders: [
-                        ...protectedIdentityHeaders
-                    ]
-                });
-                if (customDerivedHeaders && 'object' == typeof customDerivedHeaders) for (const header of protectedIdentityHeaders){
-                    const customValue = readHeader(customDerivedHeaders, header);
-                    if (void 0 !== customValue) writeHeader(derivedIdentityHeaders, header, customValue);
-                }
-                for (const header of protectedIdentityHeaders){
-                    const attemptedValue = readHeader(headers, header);
-                    if (void 0 === attemptedValue) continue;
-                    const violation = {
-                        requestId,
-                        target: 'server',
-                        header,
-                        attemptedValue,
-                        derivedValue: readHeader(derivedIdentityHeaders, header),
-                        reason: identityBindingStrict ? 'client_override_rejected' : 'client_override_blocked'
-                    };
-                    identityBinding?.onViolation?.(violation);
-                    if (identityBindingStrict) throw new IdentityBindingViolationError(violation);
-                    deleteHeader(headers, header);
-                }
-                Object.keys(derivedIdentityHeaders).forEach((header)=>{
-                    writeHeader(forwardedHeaders, header, derivedIdentityHeaders[header]);
-                });
-            }
-            const resolveHeaders = realResolveHeaders.get(requestId);
-            if (resolveHeaders) {
-                const resolvedHeaders = resolveHeaders({
-                    requestId,
-                    allowedHeaders: targetAllowedHeaders,
-                    incomingHeaders: {
-                        ...forwardedHeaders
-                    }
-                });
-                if (resolvedHeaders && 'object' == typeof resolvedHeaders) {
-                    for (const key of targetAllowedHeaders)if (void 0 !== resolvedHeaders[key]) forwardedHeaders[key] = resolvedHeaders[key];
-                }
-            }
-            headers = {
-                ...headers,
-                ...forwardedHeaders
-            };
-            if (payload.data) {
-                headers['Content-Type'] = 'application/json';
-                body = 'object' == typeof payload.data ? JSON.stringify(payload.data) : payload.body;
-            } else if (payload.body) {
-                headers['Content-Type'] = 'text/plain';
-                body = payload.body;
-            } else if (payload.formData) body = payload.formData;
-            else if (payload.formUrlencoded) {
-                headers['Content-Type'] = 'application/x-www-form-urlencoded';
-                body = 'object' == typeof payload.formUrlencoded ? stringify(payload.formUrlencoded) : payload.formUrlencoded;
-            }
-            const configDomain = domainMap.get(requestId);
-            if ('default' !== requestId && isEmptyDomain(configDomain)) throw new ProducerDomainNotConfiguredError(requestId);
-            url = `${configDomain || `http://127.0.0.1:${port}`}${finalPath}`;
-        }
-        if (void 0 === readHeader(headers, TRACEPARENT_HEADER)) {
-            const incomingTraceparent = firstHeaderValue(readHeader(webRequestHeaders, TRACEPARENT_HEADER));
-            if ('string' == typeof incomingTraceparent) writeHeader(headers, TRACEPARENT_HEADER, incomingTraceparent);
-        }
-        if (void 0 === readHeader(headers, TRACEPARENT_HEADER) && operationContext?.traceparent) writeHeader(headers, TRACEPARENT_HEADER, operationContext.traceparent);
-        attachEnvelopeHeaderIfRequired(headers, requestId, url, webRequestHeaders);
-        attachSecuredOperationHeaders(headers, requestId, method, path, operationContext);
-        if ('get' === method.toLowerCase()) body = void 0;
-        headers.accept = "application/json,*/*;q=0.8";
-        return executeWithResilience({
-            requestId,
-            target: 'server',
-            method,
-            url,
-            init: {
-                method,
-                body,
-                headers
-            },
-            fetcher,
-            transport: realTransportResilience.get(requestId)
-        });
-    };
-    return sender;
-};
-const createUploader = ({ path, requestId = 'default', operationContext })=>{
-    const sender = (...args)=>{
-        const fetcher = resolveConfiguredRequest(realRequest, requestId, originFetch);
-        const { body, headers: uploadHeaders } = getUploadPayload(args);
-        const headers = {
-            ...uploadHeaders
-        };
-        const configDomain = domainMap.get(requestId);
-        const finalURL = `${configDomain || ''}${path}`;
-        attachEnvelopeHeaderIfRequired(headers, requestId, finalURL, readIncomingWebHeaders());
-        attachSecuredOperationHeaders(headers, requestId, 'POST', path, operationContext);
-        return fetcher(finalURL, {
-            method: 'POST',
-            body,
-            headers
-        });
-    };
-    return sender;
-};
+const requestFactory = createRequestFactory({
+    target: 'server',
+    getFetch: ()=>fetch,
+    originFetch: originFetch,
+    readIncomingHeaders: readIncomingWebHeaders,
+    resolveSourceOrigin: resolveSourceOrigin,
+    createInputParamsBody: (args)=>args,
+    resolveRequestUrl: ({ configDomain, path, port })=>`${configDomain || `http://127.0.0.1:${port}`}${path}`,
+    resolveUploadUrl: ({ configDomain, path })=>`${configDomain || ''}${path}`
+});
+const { configure: configure, createRequest: createRequest, createUploader: createUploader } = requestFactory;
 export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, configure, createRequest, createUploader };

package/dist/esm-node/policyCore.mjs

@@ -133,7 +133,7 @@ const resolveConfiguredRequest = (configuredRequests, requestId, fallback)=>{
 const buildEnvelopeHeaderValue = ({ requestId, target, sourceOrigin, targetOrigin, traceContext, allowCrossOriginEnvelope })=>{
     const isCrossOrigin = Boolean(sourceOrigin) && Boolean(targetOrigin) && sourceOrigin !== targetOrigin;
     if (isCrossOrigin) {
-        const isAllowed = 'function' == typeof allowCrossOriginEnvelope ? allowCrossOriginEnvelope({
+        const isAllowed = 'function' == typeof allowCrossOriginEnvelope ? true === allowCrossOriginEnvelope({
             requestId,
             sourceOrigin,
             targetOrigin,
@@ -172,4 +172,4 @@ const attachOperationContextHeaders = ({ headers, requestId, target, method, pat
     writeHeader(headers, operationContextDetailHeader, JSON.stringify(contextPayload));
     return contextPayload;
 };
-export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, TRACEPARENT_HEADER, attachOperationContextHeaders, buildEnvelopeHeaderValue, buildOperationContext, deleteHeader, extractPathParamNames, findHeaderKey, firstHeaderValue, isEmptyDomain, isSecuredRequestId, isStrictDefaultRequestIdEnabled, parseTraceparentValue, readHeader, resolveConfiguredRequest, toOrigin, validateOperationContract, writeHeader };
+export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, TRACEPARENT_HEADER, attachOperationContextHeaders, buildEnvelopeHeaderValue, buildOperationContext, deleteHeader, extractPathParamNames, findHeaderKey, firstHeaderValue, isEmptyDomain, isSecuredRequestId, parseTraceparentValue, readHeader, resolveConfiguredRequest, toOrigin, validateOperationContract, writeHeader };