@eik/service 5.2.7 → 5.2.9

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [5.2.9](https://github.com/eik-lib/service/compare/v5.2.8...v5.2.9) (2026-08-17)
+
+
+### Bug Fixes
+
+* bump @eik/core to 2.1.78 ([#793](https://github.com/eik-lib/service/issues/793)) ([1d77ad8](https://github.com/eik-lib/service/commit/1d77ad8a829c8d03df7c9ab0ecafa3b8522c0230))
+
+## [5.2.8](https://github.com/eik-lib/service/compare/v5.2.7...v5.2.8) (2026-08-17)
+
+
+### Bug Fixes
+
+* close stalled upload connections after configurable bodyTimeout ([#789](https://github.com/eik-lib/service/issues/789)) ([e765fe7](https://github.com/eik-lib/service/commit/e765fe74fae91b75467477f20110bf83f33b4e0e))
+
 ## [5.2.7](https://github.com/eik-lib/service/compare/v5.2.6...v5.2.7) (2026-08-17)
 
 

package/lib/main.js

@@ -23,6 +23,7 @@ import * as utils from "./utils.js";
  * @property {number} [pkgMaxFileSize=10000000] The limit in bytes before PUT /pkg/ starts returning 413 Content Too Large
  * @property {number} [mapMaxFileSize=1000000] The limit in bytes before PUT /map/ starts returning 413 Content Too Large
  * @property {number} [imgMaxFileSize=20000000] The limit in bytes before PUT /img/ starts returning 413 Content Too Large
+ * @property {number} [bodyTimeout=30000] Milliseconds before an upload request whose body has not been fully received is terminated with 408
  */
 
 const EikService = class EikService {
@@ -39,7 +40,9 @@ const EikService = class EikService {
 			pkgMaxFileSize = 10000000,
 			mapMaxFileSize = 1000000,
 			imgMaxFileSize = 20000000,
+			bodyTimeout = 30000,
 		} = options;
+		this._bodyTimeout = bodyTimeout;
 		this._notFoundCacheControl = notFoundCacheControl || "public, max-age=5";
 
 		if (!logger) {
@@ -215,6 +218,27 @@ const EikService = class EikService {
 	api() {
 		/** @param {import('fastify').FastifyInstance} app */
 		return async (app) => {
+			// Enforce a maximum idle time per connection so that slow or
+			// stalled uploads cannot hold busboy, the tar parser, and open
+			// sink write streams open indefinitely. When a socket is idle
+			// for longer than bodyTimeout ms the server closes the connection
+			// with 408 Request Timeout. The timer resets whenever data flows,
+			// so actively uploading connections are not affected.
+			if (this._bodyTimeout > 0) {
+				app.server.on("connection", (socket) => {
+					socket.setTimeout(this._bodyTimeout);
+					socket.on("timeout", () => {
+						if (!socket.destroyed) {
+							socket.end(
+								"HTTP/1.1 408 Request Timeout\r\n" +
+									"Content-Length: 0\r\n" +
+									"Connection: close\r\n\r\n",
+							);
+						}
+					});
+				});
+			}
+
 			if (!app.initialConfig.routerOptions?.ignoreTrailingSlash) {
 				this.logger.warn(
 					'Fastify is configured with "routerOptions.ignoreTrailingSlash" set to "false". Its adviced to set "routerOptions.ignoreTrailingSlash" to "true"',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eik/service",
-  "version": "5.2.7",
+  "version": "5.2.9",
   "description": "Eik REST API as a standalone HTTP service",
   "type": "module",
   "main": "./lib/main.js",
@@ -43,7 +43,7 @@
   },
   "homepage": "https://github.com/eik-lib/service#readme",
   "dependencies": {
-    "@eik/core": "2.1.77",
+    "@eik/core": "2.1.78",
     "@eik/sink": "1.2.7",
     "@eik/sink-file-system": "2.0.40",
     "@eik/sink-memory": "2.0.37",

package/types/main.d.ts

@@ -24,6 +24,10 @@ export type EikServiceOptions = {
      * The limit in bytes before PUT /img/ starts returning 413 Content Too Large
      */
     imgMaxFileSize?: number | undefined;
+    /**
+     * Milliseconds before an upload request whose body has not been fully received is terminated with 408
+     */
+    bodyTimeout?: number | undefined;
 };
 /**
  * @typedef {object} EikServiceOptions
@@ -36,9 +40,11 @@ export type EikServiceOptions = {
  * @property {number} [pkgMaxFileSize=10000000] The limit in bytes before PUT /pkg/ starts returning 413 Content Too Large
  * @property {number} [mapMaxFileSize=1000000] The limit in bytes before PUT /map/ starts returning 413 Content Too Large
  * @property {number} [imgMaxFileSize=20000000] The limit in bytes before PUT /img/ starts returning 413 Content Too Large
+ * @property {number} [bodyTimeout=30000] Milliseconds before an upload request whose body has not been fully received is terminated with 408
  */
 declare const EikService: {
     new (options?: EikServiceOptions): {
+        _bodyTimeout: number;
         _notFoundCacheControl: string;
         _versionsGet: {
             _organizations: [string, string][];
@@ -480,7 +486,36 @@ declare const EikService: {
             };
             readonly metrics: import("@metrics/client");
             _parser(incoming: any): Promise<any>;
-            _writeEikJson(incoming: any, capturedEikJson: Record<string, any> | null): Promise<void>;
+            _writeEikJson(incoming: any, capturedEikJson: Record<string, any> | null): Promise<InstanceType<new ({ pathname, version, name, type, org, }?: import("@eik/core/types/classes/asset.js").AssetOptions) => {
+                _mimeType: string;
+                _type: string;
+                _size: number;
+                _integrity: string;
+                _pathname: string;
+                _version: string;
+                _name: string;
+                _org: string;
+                get integrity(): string;
+                set integrity(value: string): any;
+                get pathname(): string;
+                get mimeType(): string;
+                get version(): string;
+                get asset(): string;
+                get name(): string;
+                get type(): string;
+                set type(value: string): any;
+                get size(): number;
+                set size(value: number): any;
+                get org(): string;
+                toJSON(): {
+                    integrity: string;
+                    pathname: string;
+                    mimeType: string;
+                    type: string;
+                    size: number;
+                };
+                get [Symbol.toStringTag](): string;
+            }>>;
             _readVersions(incoming: any): Promise<InstanceType<new ({ versions, type, name, org }?: {
                 versions?: [any, any][];
                 type?: string;
@@ -578,7 +613,36 @@ declare const EikService: {
             };
             readonly metrics: import("@metrics/client");
             _parser(incoming: any): Promise<any>;
-            _writeEikJson(incoming: any, capturedEikJson: Record<string, any> | null): Promise<void>;
+            _writeEikJson(incoming: any, capturedEikJson: Record<string, any> | null): Promise<InstanceType<new ({ pathname, version, name, type, org, }?: import("@eik/core/types/classes/asset.js").AssetOptions) => {
+                _mimeType: string;
+                _type: string;
+                _size: number;
+                _integrity: string;
+                _pathname: string;
+                _version: string;
+                _name: string;
+                _org: string;
+                get integrity(): string;
+                set integrity(value: string): any;
+                get pathname(): string;
+                get mimeType(): string;
+                get version(): string;
+                get asset(): string;
+                get name(): string;
+                get type(): string;
+                set type(value: string): any;
+                get size(): number;
+                set size(value: number): any;
+                get org(): string;
+                toJSON(): {
+                    integrity: string;
+                    pathname: string;
+                    mimeType: string;
+                    type: string;
+                    size: number;
+                };
+                get [Symbol.toStringTag](): string;
+            }>>;
             _readVersions(incoming: any): Promise<InstanceType<new ({ versions, type, name, org }?: {
                 versions?: [any, any][];
                 type?: string;