@eik/service 5.2.7 → 5.2.8

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [5.2.8](https://github.com/eik-lib/service/compare/v5.2.7...v5.2.8) (2026-08-17)
+
+
+### Bug Fixes
+
+* close stalled upload connections after configurable bodyTimeout ([#789](https://github.com/eik-lib/service/issues/789)) ([e765fe7](https://github.com/eik-lib/service/commit/e765fe74fae91b75467477f20110bf83f33b4e0e))
+
 ## [5.2.7](https://github.com/eik-lib/service/compare/v5.2.6...v5.2.7) (2026-08-17)
 
 

package/lib/main.js

@@ -23,6 +23,7 @@ import * as utils from "./utils.js";
  * @property {number} [pkgMaxFileSize=10000000] The limit in bytes before PUT /pkg/ starts returning 413 Content Too Large
  * @property {number} [mapMaxFileSize=1000000] The limit in bytes before PUT /map/ starts returning 413 Content Too Large
  * @property {number} [imgMaxFileSize=20000000] The limit in bytes before PUT /img/ starts returning 413 Content Too Large
+ * @property {number} [bodyTimeout=30000] Milliseconds before an upload request whose body has not been fully received is terminated with 408
  */
 
 const EikService = class EikService {
@@ -39,7 +40,9 @@ const EikService = class EikService {
 			pkgMaxFileSize = 10000000,
 			mapMaxFileSize = 1000000,
 			imgMaxFileSize = 20000000,
+			bodyTimeout = 30000,
 		} = options;
+		this._bodyTimeout = bodyTimeout;
 		this._notFoundCacheControl = notFoundCacheControl || "public, max-age=5";
 
 		if (!logger) {
@@ -215,6 +218,27 @@ const EikService = class EikService {
 	api() {
 		/** @param {import('fastify').FastifyInstance} app */
 		return async (app) => {
+			// Enforce a maximum idle time per connection so that slow or
+			// stalled uploads cannot hold busboy, the tar parser, and open
+			// sink write streams open indefinitely. When a socket is idle
+			// for longer than bodyTimeout ms the server closes the connection
+			// with 408 Request Timeout. The timer resets whenever data flows,
+			// so actively uploading connections are not affected.
+			if (this._bodyTimeout > 0) {
+				app.server.on("connection", (socket) => {
+					socket.setTimeout(this._bodyTimeout);
+					socket.on("timeout", () => {
+						if (!socket.destroyed) {
+							socket.end(
+								"HTTP/1.1 408 Request Timeout\r\n" +
+									"Content-Length: 0\r\n" +
+									"Connection: close\r\n\r\n",
+							);
+						}
+					});
+				});
+			}
+
 			if (!app.initialConfig.routerOptions?.ignoreTrailingSlash) {
 				this.logger.warn(
 					'Fastify is configured with "routerOptions.ignoreTrailingSlash" set to "false". Its adviced to set "routerOptions.ignoreTrailingSlash" to "true"',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eik/service",
-  "version": "5.2.7",
+  "version": "5.2.8",
   "description": "Eik REST API as a standalone HTTP service",
   "type": "module",
   "main": "./lib/main.js",

package/types/main.d.ts

@@ -24,6 +24,10 @@ export type EikServiceOptions = {
      * The limit in bytes before PUT /img/ starts returning 413 Content Too Large
      */
     imgMaxFileSize?: number | undefined;
+    /**
+     * Milliseconds before an upload request whose body has not been fully received is terminated with 408
+     */
+    bodyTimeout?: number | undefined;
 };
 /**
  * @typedef {object} EikServiceOptions
@@ -36,9 +40,11 @@ export type EikServiceOptions = {
  * @property {number} [pkgMaxFileSize=10000000] The limit in bytes before PUT /pkg/ starts returning 413 Content Too Large
  * @property {number} [mapMaxFileSize=1000000] The limit in bytes before PUT /map/ starts returning 413 Content Too Large
  * @property {number} [imgMaxFileSize=20000000] The limit in bytes before PUT /img/ starts returning 413 Content Too Large
+ * @property {number} [bodyTimeout=30000] Milliseconds before an upload request whose body has not been fully received is terminated with 408
  */
 declare const EikService: {
     new (options?: EikServiceOptions): {
+        _bodyTimeout: number;
         _notFoundCacheControl: string;
         _versionsGet: {
             _organizations: [string, string][];