@deepkit/http 1.0.1-alpha.100

package/src/http.ts

@@ -0,0 +1,828 @@
+/*
+ * Deepkit Framework
+ * Copyright (C) 2021 Deepkit UG, Marc J. Schmidt
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the MIT License.
+ *
+ * You should have received a copy of the MIT License along with this program.
+ */
+
+import { asyncOperation, ClassType, CustomError, getClassName, getClassTypeFromInstance, isArray, isClassInstance } from '@deepkit/core';
+import { OutgoingHttpHeaders, ServerResponse } from 'http';
+import { eventDispatcher } from '@deepkit/event';
+import { HttpRequest, HttpRequestPositionedParameters, HttpResponse } from './model.js';
+import { InjectorContext } from '@deepkit/injector';
+import { LoggerInterface } from '@deepkit/logger';
+import { HttpRouter, RouteConfig, RouteParameterResolverForInjector } from './router.js';
+import { createWorkflow, WorkflowEvent } from '@deepkit/workflow';
+import type { ElementStruct, render } from '@deepkit/template';
+import { FrameCategory, Stopwatch } from '@deepkit/stopwatch';
+import {
+    getSerializeFunction,
+    hasTypeInformation,
+    ReflectionKind,
+    resolveReceiveType,
+    SerializationError,
+    serialize,
+    serializer,
+    Type,
+    typeSettings,
+    UnpopulatedCheck,
+    ValidationError
+} from '@deepkit/type';
+import stream from 'stream';
+
+export function isElementStruct(v: any): v is ElementStruct {
+    return 'object' === typeof v && v.hasOwnProperty('render') && v.hasOwnProperty('attributes') && !v.slice;
+}
+
+let templateRender: typeof render;
+
+function getTemplateRender(): typeof render {
+    if (!templateRender) {
+        const template = require('@deepkit/template');
+        templateRender = template.render;
+    }
+
+    return templateRender;
+}
+
+export class Redirect {
+    public routeName?: string;
+    public routeParameters?: { [name: string]: any };
+    public url?: string;
+
+    constructor(
+        public statusCode: number = 302,
+    ) {
+    }
+
+    static toRoute(routeName: string, parameters: { [name: string]: any } = {}, statusCode: number = 302): Redirect {
+        const redirect = new Redirect(statusCode);
+        redirect.routeName = routeName;
+        redirect.routeParameters = parameters;
+        return redirect;
+    }
+
+    static toUrl(url: string, statusCode: number = 302): Redirect {
+        const redirect = new Redirect(statusCode);
+        redirect.url = url;
+        return redirect;
+    }
+}
+
+export class HttpError<T extends number> extends CustomError {
+    constructor(public message: string, public httpCode: T) {
+        super(message);
+    }
+}
+
+export function createHttpError<T extends number>(code: T, defaultMessage: string = ''): ClassType<HttpError<T>> {
+    return class extends HttpError<T> {
+        constructor(public message: string = defaultMessage) {
+            super(message, code);
+        }
+    } as any;
+}
+
+export class HttpBadRequestError extends createHttpError(400, 'Bad request') {
+}
+
+export class HttpUnauthorizedError extends createHttpError(401, 'Unauthorized') {
+}
+
+export class HttpAccessDeniedError extends createHttpError(403, 'Access denied') {
+}
+
+export class HttpNotFoundError extends createHttpError(404, 'Not found') {
+}
+
+export class HttpMethodNotAllowedError extends createHttpError(405, 'Method not allowed') {
+}
+
+export class HttpNotAcceptableError extends createHttpError(406, 'Not acceptable') {
+}
+
+export class HttpTimeoutError extends createHttpError(408, 'Request timeout') {
+}
+
+export class HttpConflictError extends createHttpError(409, 'Conflict') {
+}
+
+export class HttpGoneError extends createHttpError(410, 'Gone') {
+}
+
+export class HttpTooManyRequestsError extends createHttpError(429, 'Too many requests') {
+}
+
+export class HttpInternalServerError extends createHttpError(500, 'Internal server error') {
+}
+
+export class HttpNotImplementedError extends createHttpError(501, 'Not implemented') {
+}
+
+export class HttpWorkflowEvent {
+    propagationStopped = false;
+
+    stopPropagation() {
+        this.propagationStopped = true;
+    }
+
+    isPropagationStopped() {
+        return this.propagationStopped;
+    }
+
+    public nextState?: any;
+    public nextStateEvent?: any;
+
+    clearNext() {
+        this.nextState = undefined;
+        this.nextStateEvent = undefined;
+    }
+
+    /**
+     * @see WorkflowNextEvent.next
+     */
+    next(nextState: string, event?: any) {
+        this.nextState = nextState;
+        this.nextStateEvent = event;
+    }
+
+    /**
+     * Whether already a next workflow state has been scheduled.
+     */
+    hasNext(): boolean {
+        return this.nextState !== undefined;
+    }
+
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+    ) {
+    }
+
+    get url() {
+        return this.request.url || '/';
+    }
+
+    /**
+     * Whether a response has already been sent.
+     */
+    get sent() {
+        return this.response.headersSent;
+    }
+
+    send(response: any) {
+        this.next('response', new HttpResponseEvent(this.injectorContext, this.request, this.response, response));
+    }
+}
+
+export const HttpRequestEvent = HttpWorkflowEvent;
+export const HttpRouteNotFoundEvent = HttpWorkflowEvent;
+
+export class HttpWorkflowEventWithRoute extends HttpWorkflowEvent {
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public route: RouteConfig,
+    ) {
+        super(injectorContext, request, response);
+    }
+
+    send(response: any) {
+        this.next('response', new HttpResponseEvent(this.injectorContext, this.request, this.response, response, this.route));
+    }
+
+    accessDenied(error?: Error) {
+        this.next('accessDenied', new HttpAccessDeniedEvent(this.injectorContext, this.request, this.response, this.route, error));
+    }
+}
+
+export class HttpRouteEvent extends HttpWorkflowEvent {
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public parameterResolver?: RouteParameterResolverForInjector,
+        public route?: RouteConfig,
+    ) {
+        super(injectorContext, request, response);
+    }
+
+    routeFound(route: RouteConfig, parameterResolver: RouteParameterResolverForInjector) {
+        this.route = route;
+        this.next('auth', new HttpAuthEvent(this.injectorContext, this.request, this.response, this.route, parameterResolver));
+    }
+
+    notFound() {
+        this.next('routeNotFound', new HttpRouteNotFoundEvent(this.injectorContext, this.request, this.response));
+    }
+}
+
+export class HttpAuthEvent extends HttpWorkflowEventWithRoute {
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public route: RouteConfig,
+        public parameterResolver: RouteParameterResolverForInjector,
+    ) {
+        super(injectorContext, request, response, route);
+    }
+
+    success() {
+        this.next('resolveParameters', new HttpResolveParametersEvent(this.injectorContext, this.request, this.response, this.parameterResolver, this.route));
+    }
+}
+
+export class HttpAccessDeniedEvent extends HttpWorkflowEvent {
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public route: RouteConfig,
+        public error?: Error,
+    ) {
+        super(injectorContext, request, response);
+    }
+}
+
+export class HttpResolveParametersEvent extends HttpWorkflowEventWithRoute {
+    public parameters: HttpRequestPositionedParameters = { arguments: [], parameters: {} };
+
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public parameterResolver: RouteParameterResolverForInjector,
+        public route: RouteConfig,
+    ) {
+        super(injectorContext, request, response, route);
+    }
+
+    accessDenied() {
+        this.next('accessDenied', new HttpAccessDeniedEvent(this.injectorContext, this.request, this.response, this.route));
+    }
+}
+
+export class HttpControllerEvent extends HttpWorkflowEventWithRoute {
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public parameters: HttpRequestPositionedParameters = { arguments: [], parameters: {} },
+        public route: RouteConfig,
+    ) {
+        super(injectorContext, request, response, route);
+    }
+}
+
+export class HttpResponseEvent extends WorkflowEvent {
+    /**
+     * The time it took to call the controller action in milliseconds.
+     */
+    public controllerActionTime: number = 0;
+
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public result: any,
+        public route?: RouteConfig,
+    ) {
+        super();
+    }
+}
+
+export class HttpControllerErrorEvent extends HttpWorkflowEventWithRoute {
+    /**
+     * The time it took to call the controller action in milliseconds.
+     */
+    public controllerActionTime: number = 0;
+
+    constructor(
+        public injectorContext: InjectorContext,
+        public request: HttpRequest,
+        public response: HttpResponse,
+        public route: RouteConfig,
+        public error: Error,
+    ) {
+        super(injectorContext, request, response, route);
+    }
+}
+
+export const httpWorkflow = createWorkflow('http', {
+    start: WorkflowEvent,
+    request: HttpRequestEvent,
+    route: HttpRouteEvent,
+    routeNotFound: HttpRouteNotFoundEvent,
+    auth: HttpAuthEvent,
+    resolveParameters: HttpResolveParametersEvent,
+    accessDenied: HttpAccessDeniedEvent,
+    controller: HttpControllerEvent,
+    controllerError: HttpControllerErrorEvent,
+    parametersFailed: HttpControllerErrorEvent,
+    response: HttpResponseEvent,
+}, {
+    start: 'request',
+    request: 'route',
+    route: ['auth', 'routeNotFound'],
+    auth: ['resolveParameters', 'accessDenied'],
+    resolveParameters: ['controller', 'parametersFailed'],
+    accessDenied: 'response',
+    controller: ['accessDenied', 'controllerError', 'response'],
+    controllerError: 'response',
+    parametersFailed: 'response',
+    routeNotFound: 'response',
+});
+
+export class BaseResponse {
+    autoSerializing: boolean = true;
+
+    constructor(public _statusCode?: number, public _headers: OutgoingHttpHeaders = {}) {
+    }
+
+    status(code: number): this {
+        this._statusCode = code;
+        return this;
+    }
+
+    /**
+     * Per default a JSONResponse is serialized using the return type specified at the route.
+     * This disables that behaviour so that JSON.stringify is run on the result directly.
+     */
+    disableAutoSerializing() {
+        this.autoSerializing = false;
+        return this;
+    }
+
+    header(name: string, value: string | number): this {
+        this._headers[name] = value;
+        return this;
+    }
+
+    headers(headers: OutgoingHttpHeaders): this {
+        this._headers = headers;
+        return this;
+    }
+
+    contentType(type: string): this {
+        this._headers['content-type'] = type;
+        return this;
+    }
+}
+
+export class Response extends BaseResponse {
+    constructor(public content: string | Uint8Array, contentType: string, statusCode?: number) {
+        super(statusCode);
+        this.contentType(contentType);
+    }
+}
+
+export class HtmlResponse extends BaseResponse {
+    constructor(public html: string, statusCode?: number) {
+        super(statusCode);
+    }
+}
+
+export class JSONResponse extends BaseResponse {
+    constructor(public json: any, statusCode?: number) {
+        super(statusCode);
+    }
+}
+
+export type SupportedHttpResult =
+    undefined
+    | null
+    | number
+    | string
+    | Response
+    | JSONResponse
+    | HtmlResponse
+    | HttpResponse
+    | ServerResponse
+    | stream.Readable
+    | Redirect
+    | Uint8Array
+    | Error;
+
+export interface HttpResultFormatterContext {
+    request: HttpRequest;
+    response: HttpResponse;
+    route?: RouteConfig;
+}
+
+export class HttpResultFormatter {
+    protected jsonContentType: string = 'application/json; charset=utf-8';
+    protected htmlContentType: string = 'text/html; charset=utf-8';
+
+    constructor(protected router: HttpRouter) {
+    }
+
+    protected setContentTypeIfNotSetAlready(response: HttpResponse, contentType: string): void {
+        if (response.hasHeader('Content-Type')) return;
+
+        response.setHeader('Content-Type', contentType);
+    }
+
+    handleError(error: Error, context: HttpResultFormatterContext): void {
+
+    }
+
+    handleUndefined(result: undefined | null, context: HttpResultFormatterContext): void {
+        context.response.end(result);
+    }
+
+    handleRedirect(result: Redirect, context: HttpResultFormatterContext): void {
+        if (result.routeName) {
+            context.response.writeHead(result.statusCode, {
+                Location: this.router.resolveUrl(result.routeName, result.routeParameters)
+            });
+        } else {
+            context.response.writeHead(result.statusCode, {
+                Location: result.url
+            });
+        }
+        context.response.end();
+    }
+
+    handleUnknown(result: any, context: HttpResultFormatterContext): void {
+        const oldCheck = typeSettings.unpopulatedCheck;
+        try {
+            typeSettings.unpopulatedCheck = UnpopulatedCheck.None;
+            this.setContentTypeIfNotSetAlready(context.response, this.jsonContentType);
+            context.response.end(JSON.stringify(result));
+        } finally {
+            typeSettings.unpopulatedCheck = oldCheck;
+        }
+    }
+
+    handleHtmlResponse(result: HtmlResponse, context: HttpResultFormatterContext): void {
+        this.setContentTypeIfNotSetAlready(context.response, this.htmlContentType);
+        context.response.writeHead(result._statusCode || 200, result._headers);
+        context.response.end(result.html);
+    }
+
+    handleGenericResponse(result: Response, context: HttpResultFormatterContext): void {
+        context.response.writeHead(result._statusCode || 200, result._headers);
+        context.response.end(result.content);
+    }
+
+    handleJSONResponse(result: JSONResponse, context: HttpResultFormatterContext): void {
+        this.setContentTypeIfNotSetAlready(context.response, this.jsonContentType);
+        context.response.writeHead(result._statusCode || 200, result._headers);
+        context.response.end(JSON.stringify(result.json));
+    }
+
+    handleTypeEntity<T>(classType: ClassType<T>, instance: T, context: HttpResultFormatterContext, route?: RouteConfig): void {
+        this.handleType(resolveReceiveType(classType), instance, context, route);
+    }
+
+    handleType<T>(type: Type, instance: T, context: HttpResultFormatterContext, route?: RouteConfig): void {
+        this.setContentTypeIfNotSetAlready(context.response, this.jsonContentType);
+        const serializerToUse = route && route?.serializer ? route.serializer : serializer;
+        context.response.end(JSON.stringify(serialize(instance, route ? route.serializationOptions : undefined, serializerToUse, undefined, type)));
+    }
+
+    handleStream(stream: stream.Readable, context: HttpResultFormatterContext): void {
+        stream.pipe(context.response);
+    }
+
+    handleBinary(result: Uint8Array, context: HttpResultFormatterContext): void {
+        context.response.end(result);
+    }
+
+    handleResponse(context: HttpResultFormatterContext) {
+    }
+
+    handle(result: SupportedHttpResult, context: HttpResultFormatterContext): void {
+        if (result === null || result === undefined) {
+            this.handleUndefined(result, context);
+        } else if (result instanceof Error) {
+            this.handleError(result, context);
+        } else if (result instanceof Redirect) {
+            this.handleRedirect(result, context);
+        } else if (result instanceof ServerResponse) {
+            this.handleResponse(context);
+        } else if (result instanceof HtmlResponse) {
+            this.handleHtmlResponse(result, context);
+        } else if (result instanceof stream.Readable) {
+            this.handleStream(result, context);
+        } else if (result instanceof Uint8Array) {
+            this.handleBinary(result, context);
+        } else if (result instanceof JSONResponse) {
+            this.handleJSONResponse(result, context);
+        } else if (result instanceof Response) {
+            this.handleGenericResponse(result, context);
+        } else {
+            if (isClassInstance(result)) {
+                const classType = getClassTypeFromInstance(result);
+                if (hasTypeInformation(classType)) {
+                    this.handleTypeEntity(classType, result, context);
+                    return;
+                }
+            } else if (isArray(result) && result.length > 0 && isClassInstance(result[0])) {
+                const firstClassType = getClassTypeFromInstance(result[0]);
+                let allSameType = true;
+                for (const item of result) {
+                    if (!isClassInstance(item) || getClassTypeFromInstance(item) !== firstClassType) {
+                        allSameType = false;
+                        break;
+                    }
+                }
+                if (allSameType && hasTypeInformation(firstClassType)) {
+                    this.handleType({ kind: ReflectionKind.array, type: resolveReceiveType(firstClassType) }, result, context);
+                    return;
+                }
+            }
+
+            this.handleUnknown(result, context);
+        }
+    }
+}
+
+export class HttpListener {
+    constructor(
+        protected router: HttpRouter,
+        protected logger: LoggerInterface,
+        protected resultFormatter: HttpResultFormatter,
+        protected stopwatch?: Stopwatch,
+    ) {
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onRequest, 100)
+    onRequest(event: typeof httpWorkflow.onRequest.event): void {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+
+        event.next('route', new HttpRouteEvent(event.injectorContext, event.request, event.response,));
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onRoute, 100)
+    async onRoute(event: typeof httpWorkflow.onRoute.event) {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+        const logger = this.logger;
+
+        try {
+            const resolved = this.router.resolveRequest(event.request);
+
+            if (resolved) {
+                event.request.uploadedFiles = resolved.uploadedFiles;
+
+                //todo: embed that into the generated router code.
+                if (resolved.middlewares) {
+                    const middlewares = resolved.middlewares(event.injectorContext);
+                    if (middlewares.length) {
+                        await asyncOperation(async (resolve, reject) => {
+                            let lastTimer: any = undefined;
+
+                            function finish() {
+                                clearTimeout(lastTimer);
+                                resolve(undefined);
+                                //middleware finished the request. We end the workflow transition
+                            }
+
+                            event.response.once('finish', finish);
+                            let i = -1;
+
+                            async function next() {
+                                i++;
+
+                                if (i >= middlewares.length) {
+                                    event.response.off('finish', finish);
+                                    resolve(undefined);
+                                    return;
+                                }
+
+                                const timeout = middlewares[i].timeout;
+                                if (timeout !== undefined && timeout > 0) {
+                                    lastTimer = setTimeout(() => {
+                                        logger.warning(`Middleware timed out. Increase the timeout or fix the middleware. (${middlewares[i].fn})`);
+                                        next();
+                                    }, timeout);
+                                }
+
+                                try {
+                                    await middlewares[i].fn(event.request, event.response, (error?: any) => {
+                                        if (lastTimer) clearTimeout(lastTimer);
+                                        if (error) {
+                                            event.response.off('finish', finish);
+                                            reject(error);
+                                        } else {
+                                            next();
+                                        }
+                                    });
+                                } catch (error) {
+                                    reject(error);
+                                }
+                            }
+
+                            await next();
+                        });
+                    }
+                }
+
+                event.injectorContext.set(RouteConfig, resolved.routeConfig);
+                event.routeFound(resolved.routeConfig, resolved.parameters);
+            }
+        } catch (error) {
+            this.logger.error('Could not resolve request', error);
+            event.notFound();
+        }
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onRoute, 1000)
+    onRouteForward(event: typeof httpWorkflow.onRoute.event) {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+
+        if (!event.route) {
+            event.next('routeNotFound', new HttpRouteNotFoundEvent(event.injectorContext, event.request, event.response));
+        }
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onRouteNotFound, 100)
+    async routeNotFound(event: typeof httpWorkflow.onRouteNotFound.event): Promise<void> {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+
+        event.send(new HtmlResponse('Not found', 404));
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onAuth, 100)
+    onAuth(event: typeof httpWorkflow.onAuth.event): void {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+
+        event.next('resolveParameters', new HttpResolveParametersEvent(event.injectorContext, event.request, event.response, event.parameterResolver, event.route));
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onResolveParameters, 100)
+    async onResolveParameters(event: typeof httpWorkflow.onResolveParameters.event) {
+        if (event.response.finished) return;
+        if (event.hasNext()) return;
+
+        try {
+            event.parameters = await event.parameterResolver(event.injectorContext);
+            event.next('controller', new HttpControllerEvent(event.injectorContext, event.request, event.response, event.parameters, event.route));
+        } catch (error: any) {
+            event.next('parametersFailed', new HttpControllerErrorEvent(event.injectorContext, event.request, event.response, event.route, error));
+        }
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onAccessDenied, 100)
+    onAccessDenied(event: typeof httpWorkflow.onAccessDenied.event): void {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+
+        event.send(new HtmlResponse('Access denied', 403));
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onController, 100)
+    async onController(event: typeof httpWorkflow.onController.event) {
+        if (event.sent) return;
+        if (event.hasNext()) return;
+
+
+        const start = Date.now();
+        const stopWatchLabel = event.route.action.type === 'controller'
+            ? getClassName(event.route.action.controller) + '.' + event.route.action.methodName
+            : event.route.action.fn.name;
+
+        const frame = this.stopwatch ? this.stopwatch.start(stopWatchLabel, FrameCategory.httpController) : undefined;
+        try {
+            let result: any;
+            if (event.route.action.type === 'controller') {
+                const controllerInstance = event.injectorContext.get(event.route.action.controller, event.route.action.module);
+                const method = controllerInstance[event.route.action.methodName];
+                result = await method.apply(controllerInstance, event.parameters.arguments);
+            } else {
+                result = await event.route.action.fn(...event.parameters.arguments);
+            }
+
+            if (isElementStruct(result)) {
+                const html = await getTemplateRender()(event.injectorContext.getRootInjector(), result, this.stopwatch ? this.stopwatch : undefined);
+                result = new HtmlResponse(html, 200).header('Content-Type', 'text/html; charset=utf-8');
+            }
+            if (result instanceof stream.Readable) {
+                const stream = result as stream.Readable;
+                await new Promise((resolve, reject) => {
+                    stream.once('readable', resolve);
+                    stream.once('error', reject);
+                });
+            }
+            const responseEvent = new HttpResponseEvent(event.injectorContext, event.request, event.response, result, event.route);
+            responseEvent.controllerActionTime = Date.now() - start;
+            event.next('response', responseEvent);
+        } catch (error: any) {
+            if (frame) frame.end();
+            if (error instanceof HttpAccessDeniedError) {
+                event.next('accessDenied', new HttpAccessDeniedEvent(event.injectorContext, event.request, event.response, event.route, error));
+            } else {
+                const errorEvent = new HttpControllerErrorEvent(event.injectorContext, event.request, event.response, event.route, error);
+                errorEvent.controllerActionTime = Date.now() - start;
+                event.next('controllerError', errorEvent);
+            }
+        } finally {
+            if (frame) frame.end();
+        }
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onParametersFailed, 100)
+    onParametersFailed(event: typeof httpWorkflow.onParametersFailed.event): void {
+        if (event.response.finished) return;
+        if (event.sent) return;
+
+        if (event.error instanceof SerializationError) {
+            event.send(new JSONResponse({
+                message: event.error.message,
+                errors: [{
+                    path: event.error.path,
+                    code: 'serialization',
+                    message: event.error.originalMessage,
+                }]
+            }, 400).disableAutoSerializing());
+        } else if (event.error instanceof ValidationError) {
+            event.send(new JSONResponse({
+                message: event.error.message,
+                errors: event.error.errors
+            }, 400).disableAutoSerializing());
+        } else if (event.error instanceof HttpError) {
+            event.send(new JSONResponse({
+                message: event.error.message
+            }, event.error.httpCode).disableAutoSerializing());
+            return;
+        } else {
+            this.logger.error('Controller parameter resolving error:', event.error);
+
+            event.send(new HtmlResponse('Internal error', 500));
+        }
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onControllerError, 100)
+    onControllerError(event: typeof httpWorkflow.onControllerError.event): void {
+        if (event.response.finished) return;
+        if (event.sent) return;
+
+        if (event.error instanceof ValidationError) {
+            event.send(new JSONResponse({
+                message: event.error.message,
+                errors: event.error.errors
+            }, 400).disableAutoSerializing());
+            return;
+        } else if (event.error instanceof HttpError) {
+            event.send(new JSONResponse({
+                message: event.error.message
+            }, event.error.httpCode).disableAutoSerializing());
+            return;
+        }
+
+        this.logger.error('Controller error', event.error);
+
+        event.send(new HtmlResponse('Internal error', 500));
+    }
+
+    /**
+     * This happens before the result is sent.
+     */
+    @eventDispatcher.listen(httpWorkflow.onResponse, -100)
+    async onResultSerialization(event: typeof httpWorkflow.onResponse.event) {
+        if (!event.route) return;
+        if (event.response.headersSent) return;
+        if (event.result === undefined || event.result === null) return;
+
+        if (event.result instanceof HtmlResponse || event.result instanceof Response || event.result instanceof ServerResponse || event.result instanceof Redirect || event.result instanceof stream.Readable) {
+            // don't do anything
+        } else if (event.result instanceof JSONResponse) {
+            const schema = (event.result._statusCode && event.route.getSchemaForResponse(event.result._statusCode)) || event.route.returnType;
+
+            if (!schema || !event.result.autoSerializing) return;
+
+            const serializerToUse = event.route && event.route.serializer ? event.route.serializer : serializer;
+            const serialize = getSerializeFunction(schema, serializerToUse.serializeRegistry);
+            event.result.json = serialize(event.result.json, event.route.serializationOptions);
+        } else if (event.route.returnType && event.route.returnType.kind !== ReflectionKind.any) {
+            const serializerToUse = event.route && event.route.serializer ? event.route.serializer : serializer;
+            const serialize = getSerializeFunction(event.route.returnType, serializerToUse.serializeRegistry);
+            event.result = serialize(event.result, event.route.serializationOptions);
+        } else {
+            const schema = event.route.getSchemaForResponse(200);
+            if (!schema) return;
+
+            const serializerToUse = event.route && event.route.serializer ? event.route.serializer : serializer;
+            const serialize = getSerializeFunction(schema, serializerToUse.serializeRegistry);
+            event.result = serialize(event.result, event.route.serializationOptions);
+        }
+    }
+
+    @eventDispatcher.listen(httpWorkflow.onResponse, 100)
+    async onResponse(event: typeof httpWorkflow.onResponse.event) {
+        if (event.response.headersSent) return;
+
+        this.resultFormatter.handle(event.result, event);
+    }
+}