@flexent/ws-proxy 2.12.0

package/README.md

@@ -0,0 +1,25 @@
+# @flexent/ws-proxy
+
+Transparent WebSocket upgrade relay for Node.js HTTP servers.
+
+## Usage
+
+Subclass `WsProxy` and implement outbound connection handling:
+
+```ts
+import { Duplex } from 'node:stream';
+import { WsProxy, WsProxyContext } from '@flexent/ws-proxy';
+
+class MyProxy extends WsProxy {
+
+    protected override async processConnection(_ctx: WsProxyContext): Promise<void> {}
+
+    protected override async connectOutbound(_ctx: WsProxyContext): Promise<Duplex> {
+        // Return a TCP socket or other Duplex connected to the upstream server.
+        throw new Error('Not implemented');
+    }
+
+}
+```
+
+Call `onUpgrade` from your HTTP server's `upgrade` event to relay the WebSocket handshake and stream data bidirectionally.

package/out/main/WsProxy.d.ts

@@ -0,0 +1,16 @@
+import { IncomingMessage } from 'node:http';
+import { Duplex } from 'node:stream';
+import { OutboundUpgradeOptions, WsProxyContext } from './types.js';
+export declare abstract class WsProxy {
+    onUpgrade(request: IncomingMessage, socket: Duplex, head: Buffer): void;
+    protected abstract processConnection(ctx: WsProxyContext): Promise<void>;
+    protected abstract connectOutbound(ctx: WsProxyContext): Promise<Duplex>;
+    protected buildOutboundUpgrade(ctx: WsProxyContext): string;
+    protected onConnected(_ctx: WsProxyContext, _outbound: Duplex): void;
+    protected onError(error: unknown, ctx: WsProxyContext): void;
+    protected encodeForwardedUpgrade(request: IncomingMessage, options: OutboundUpgradeOptions): string;
+    private relay;
+    private runRelay;
+    private assertWebSocketUpgrade;
+    private reject;
+}

package/out/main/WsProxy.js

@@ -0,0 +1,134 @@
+import { STATUS_CODES } from 'node:http';
+import { WsProxyError } from './errors.js';
+import { pipeBidirectional } from './util/pipe.js';
+const FORWARDED_HEADER_NAMES = [
+    'connection',
+    'upgrade',
+    'sec-websocket-key',
+    'sec-websocket-version',
+    'sec-websocket-protocol',
+    'sec-websocket-extensions',
+    'origin',
+    'pragma',
+    'cache-control',
+];
+export class WsProxy {
+    onUpgrade(request, socket, head) {
+        const ctx = { request, socket, head };
+        socket.pause();
+        try {
+            this.assertWebSocketUpgrade(ctx);
+        }
+        catch (error) {
+            this.onError(error, ctx);
+            return;
+        }
+        this.relay(ctx);
+    }
+    buildOutboundUpgrade(ctx) {
+        return this.encodeForwardedUpgrade(ctx.request, {
+            path: ctx.request.url ?? '/',
+        });
+    }
+    onConnected(_ctx, _outbound) { }
+    onError(error, ctx) {
+        const status = error instanceof WsProxyError ? error.status : 502;
+        const message = error instanceof Error ? error.message : 'WebSocket proxy failed';
+        ctx.socket.resume();
+        this.reject(ctx.socket, status, message);
+    }
+    encodeForwardedUpgrade(request, options) {
+        const omitted = new Set((options.omitHeaders ?? []).map(name => name.toLowerCase()));
+        const headers = {};
+        for (const name of FORWARDED_HEADER_NAMES) {
+            if (omitted.has(name)) {
+                continue;
+            }
+            const value = request.headers[name];
+            if (value == null) {
+                continue;
+            }
+            headers[canonicalHeaderName(name)] = value;
+        }
+        if (options.host) {
+            headers.Host = options.host;
+        }
+        else if (request.headers.host) {
+            headers.Host = request.headers.host;
+        }
+        for (const [name, value] of Object.entries(options.headers ?? {})) {
+            if (value == null) {
+                delete headers[canonicalHeaderName(name)];
+                continue;
+            }
+            headers[canonicalHeaderName(name)] = value;
+        }
+        const lines = [`GET ${options.path} HTTP/${request.httpVersion}`];
+        for (const [name, value] of Object.entries(headers)) {
+            if (Array.isArray(value)) {
+                for (const item of value) {
+                    lines.push(`${name}: ${item}`);
+                }
+            }
+            else {
+                lines.push(`${name}: ${value}`);
+            }
+        }
+        return `${lines.join('\r\n')}\r\n\r\n`;
+    }
+    relay(ctx) {
+        this.runRelay(ctx).catch(error => {
+            this.onError(error, ctx);
+        });
+    }
+    async runRelay(ctx) {
+        await this.processConnection(ctx);
+        const outbound = await this.connectOutbound(ctx);
+        outbound.write(this.buildOutboundUpgrade(ctx));
+        ctx.socket.resume();
+        pipeBidirectional(ctx.socket, outbound);
+        if (ctx.head.length > 0) {
+            queueMicrotask(() => outbound.write(ctx.head));
+        }
+        this.onConnected(ctx, outbound);
+    }
+    assertWebSocketUpgrade(ctx) {
+        if (ctx.request.method !== 'GET') {
+            throw new WsProxyError(400, 'Not a WebSocket upgrade request');
+        }
+        if (ctx.request.headers.upgrade?.toLowerCase() !== 'websocket') {
+            throw new WsProxyError(400, 'Not a WebSocket upgrade request');
+        }
+        const connection = ctx.request.headers.connection?.toLowerCase() ?? '';
+        if (!connection.split(',').some(part => part.trim() === 'upgrade')) {
+            throw new WsProxyError(400, 'Not a WebSocket upgrade request');
+        }
+        const key = ctx.request.headers['sec-websocket-key'];
+        if (!key || Array.isArray(key)) {
+            throw new WsProxyError(400, 'Missing Sec-WebSocket-Key');
+        }
+    }
+    reject(socket, status, message) {
+        if (socket.destroyed || socket.writableEnded) {
+            return;
+        }
+        const statusText = STATUS_CODES[status] ?? 'Error';
+        const body = message ?? statusText;
+        const payload = [
+            `HTTP/1.1 ${status} ${statusText}`,
+            'Connection: close',
+            'Content-Type: text/plain; charset=utf-8',
+            `Content-Length: ${Buffer.byteLength(body)}`,
+            '',
+            body,
+        ].join('\r\n');
+        socket.end(payload);
+    }
+}
+function canonicalHeaderName(name) {
+    return name
+        .split('-')
+        .map(part => part ? `${part[0].toUpperCase()}${part.slice(1).toLowerCase()}` : part)
+        .join('-');
+}
+//# sourceMappingURL=WsProxy.js.map

package/out/main/WsProxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WsProxy.js","sourceRoot":"","sources":["../../src/main/WsProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,YAAY,EAAE,MAAM,WAAW,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,sBAAsB,GAAG;IAC3B,YAAY;IACZ,SAAS;IACT,mBAAmB;IACnB,uBAAuB;IACvB,wBAAwB;IACxB,0BAA0B;IAC1B,QAAQ;IACR,QAAQ;IACR,eAAe;CAClB,CAAC;AAEF,MAAM,OAAgB,OAAO;IAEzB,SAAS,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY;QAC5D,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzB,OAAO;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAMS,oBAAoB,CAAC,GAAmB;QAC9C,OAAO,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,EAAE;YAC5C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG;SAC/B,CAAC,CAAC;IACP,CAAC;IAES,WAAW,CACjB,IAAoB,EACpB,SAAiB,IACZ,CAAC;IAEA,OAAO,CAAC,KAAc,EAAE,GAAmB;QACjD,MAAM,MAAM,GAAG,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAClE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClF,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAES,sBAAsB,CAC5B,OAAwB,EACxB,OAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,SAAS;YACb,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAChB,SAAS;YACb,CAAC;YACD,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAChC,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAChE,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAChB,OAAO,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1C,SAAS;YACb,CAAC;YACD,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,SAAS,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACvB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,GAAmB;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAmB;QACtC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACjD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACpB,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAEO,sBAAsB,CAAC,GAAmB;QAC9C,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAC7D,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAAc,EAAE,MAAc,EAAE,OAAgB;QAC3D,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC;QACnD,MAAM,IAAI,GAAG,OAAO,IAAI,UAAU,CAAC;QACnC,MAAM,OAAO,GAAG;YACZ,YAAY,MAAM,IAAI,UAAU,EAAE;YAClC,mBAAmB;YACnB,yCAAyC;YACzC,mBAAmB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YAC5C,EAAE;YACF,IAAI;SACP,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;CAEJ;AAED,SAAS,mBAAmB,CAAC,IAAY;IACrC,OAAO,IAAI;SACN,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACnF,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC"}

package/out/main/errors.d.ts

@@ -0,0 +1,5 @@
+export declare class WsProxyError extends Error {
+    readonly status: number;
+    name: string;
+    constructor(status: number, message: string);
+}

package/out/main/errors.js

@@ -0,0 +1,8 @@
+export class WsProxyError extends Error {
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'WsProxyError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/out/main/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/main/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAInC,YACa,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QAHlB,SAAI,GAAG,cAAc,CAAC;IAO/B,CAAC;CAEJ"}

package/out/main/index.d.ts

@@ -0,0 +1,3 @@
+export * from './errors.js';
+export * from './types.js';
+export * from './WsProxy.js';

package/out/main/index.js

@@ -0,0 +1,4 @@
+export * from './errors.js';
+export * from './types.js';
+export * from './WsProxy.js';
+//# sourceMappingURL=index.js.map

package/out/main/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/main/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/out/main/types.d.ts

@@ -0,0 +1,13 @@
+import { IncomingMessage } from 'node:http';
+import { Duplex } from 'node:stream';
+export interface WsProxyContext {
+    readonly request: IncomingMessage;
+    readonly socket: Duplex;
+    readonly head: Buffer;
+}
+export interface OutboundUpgradeOptions {
+    path: string;
+    host?: string;
+    headers?: Record<string, string | string[]>;
+    omitHeaders?: string[];
+}

package/out/main/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/out/main/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/main/types.ts"],"names":[],"mappings":""}

package/out/main/util/pipe.d.ts

@@ -0,0 +1,2 @@
+import { Duplex } from 'node:stream';
+export declare function pipeBidirectional(left: Duplex, right: Duplex): void;

package/out/main/util/pipe.js

@@ -0,0 +1,22 @@
+export function pipeBidirectional(left, right) {
+    const onLeftError = (error) => destroyQuietly(right, error);
+    const onRightError = (error) => destroyQuietly(left, error);
+    const onClose = () => {
+        left.off('error', onLeftError);
+        right.off('error', onRightError);
+        left.off('close', onClose);
+        right.off('close', onClose);
+    };
+    left.on('error', onLeftError);
+    right.on('error', onRightError);
+    left.on('close', onClose);
+    right.on('close', onClose);
+    left.pipe(right, { end: false });
+    right.pipe(left, { end: false });
+}
+function destroyQuietly(socket, error) {
+    if (!socket.destroyed) {
+        socket.destroy(error);
+    }
+}
+//# sourceMappingURL=pipe.js.map

package/out/main/util/pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.js","sourceRoot":"","sources":["../../../src/main/util/pipe.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,KAAa;IACjD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACL,CAAC"}

package/out/test/ws-proxy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/out/test/ws-proxy.test.js

@@ -0,0 +1,48 @@
+import assert from 'node:assert/strict';
+import { PassThrough } from 'node:stream';
+import { WsProxy } from '../main/WsProxy.js';
+describe('@flexent/ws-proxy', () => {
+    it('rejects non-WebSocket upgrade requests', async () => {
+        const proxy = new TestProxy();
+        const socket = new PassThrough();
+        const chunks = [];
+        socket.on('data', chunk => chunks.push(chunk));
+        proxy.onUpgrade({
+            method: 'GET',
+            headers: { connection: 'keep-alive' },
+        }, socket, Buffer.alloc(0));
+        await new Promise(resolve => socket.on('end', () => resolve()));
+        assert.match(Buffer.concat(chunks).toString('utf8'), /400/);
+    });
+    it('encodes forwarded upgrade requests', () => {
+        const proxy = new TestProxy();
+        const payload = proxy.publicEncode({
+            method: 'GET',
+            httpVersion: '1.1',
+            url: '/lease?sessionId=foo',
+            headers: {
+                host: 'browser.example',
+                upgrade: 'websocket',
+                connection: 'Upgrade',
+                'sec-websocket-key': 'dGhlIHNhbXBsZSBub25jZQ==',
+                'sec-websocket-version': '13',
+            },
+        }, {
+            path: '/lease?t=token',
+            host: 'host.example',
+        });
+        assert.match(payload, /^GET \/lease\?t=token HTTP\/1\.1\r\n/);
+        assert.match(payload, /Host: host\.example\r\n/i);
+        assert.match(payload, /Sec-Websocket-Key: dGhlIHNhbXBsZSBub25jZQ==\r\n/i);
+    });
+});
+class TestProxy extends WsProxy {
+    async processConnection() { }
+    async connectOutbound() {
+        return new PassThrough();
+    }
+    publicEncode(request, options) {
+        return this.encodeForwardedUpgrade(request, options);
+    }
+}
+//# sourceMappingURL=ws-proxy.test.js.map

package/out/test/ws-proxy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-proxy.test.js","sourceRoot":"","sources":["../../src/test/ws-proxy.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAE/B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,KAAK,CAAC,SAAS,CAAC;YACZ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;SACrB,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;YAC/B,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE;gBACL,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,SAAS;gBACrB,mBAAmB,EAAE,0BAA0B;gBAC/C,uBAAuB,EAAE,IAAI;aAChC;SACe,EAAE;YAClB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,sCAAsC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,kDAAkD,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AAEP,CAAC,CAAC,CAAC;AAEH,MAAM,SAAU,SAAQ,OAAO;IAER,KAAK,CAAC,iBAAiB,KAAmB,CAAC;IAE3C,KAAK,CAAC,eAAe;QACpC,OAAO,IAAI,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,OAAwB,EAAE,OAAwC;QAC3E,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;CAEJ"}

package/package.json

@@ -0,0 +1,18 @@
+{
+    "name": "@flexent/ws-proxy",
+    "version": "2.12.0",
+    "description": "Transparent WebSocket upgrade relay for Node.js HTTP servers",
+    "author": "Boris Okunskiy",
+    "license": "MIT",
+    "type": "module",
+    "sideEffects": false,
+    "exports": {
+        ".": "./out/main/index.js"
+    },
+    "files": [
+        "out"
+    ],
+    "scripts": {
+        "test": "NODE_ENV=test mocha"
+    }
+}