@hono/node-server 1.10.0 → 1.11.0

package/dist/index.d.mts

@@ -1,5 +1,6 @@
 export { createAdaptorServer, serve } from './server.mjs';
 export { getRequestListener } from './listener.mjs';
+export { RequestError } from './request.mjs';
 export { Http2Bindings, HttpBindings } from './types.mjs';
 import 'node:net';
 import 'node:http';

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { createAdaptorServer, serve } from './server.js';
 export { getRequestListener } from './listener.js';
+export { RequestError } from './request.js';
 export { Http2Bindings, HttpBindings } from './types.js';
 import 'node:net';
 import 'node:http';

package/dist/index.js

@@ -30,6 +30,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  RequestError: () => RequestError,
   createAdaptorServer: () => createAdaptorServer,
   getRequestListener: () => getRequestListener,
   serve: () => serve
@@ -42,6 +43,18 @@ var import_node_http = require("http");
 // src/request.ts
 var import_node_http2 = require("http2");
 var import_node_stream = require("stream");
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -131,12 +144,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -299,6 +320,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -395,14 +419,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -410,10 +434,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }
@@ -433,6 +459,7 @@ var getRequestListener = (fetchCallback, options = {}) => {
 var createAdaptorServer = (options) => {
   const fetchCallback = options.fetch;
   const requestListener = getRequestListener(fetchCallback, {
+    hostname: options.hostname,
     overrideGlobalObjects: options.overrideGlobalObjects
   });
   const createServer = options.createServer || import_node_http.createServer;
@@ -449,6 +476,7 @@ var serve = (options, listeningListener) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  RequestError,
   createAdaptorServer,
   getRequestListener,
   serve

package/dist/index.mjs

@@ -4,6 +4,18 @@ import { createServer as createServerHTTP } from "http";
 // src/request.ts
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -93,12 +105,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -261,6 +281,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -357,14 +380,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -372,10 +395,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }
@@ -395,6 +420,7 @@ var getRequestListener = (fetchCallback, options = {}) => {
 var createAdaptorServer = (options) => {
   const fetchCallback = options.fetch;
   const requestListener = getRequestListener(fetchCallback, {
+    hostname: options.hostname,
     overrideGlobalObjects: options.overrideGlobalObjects
   });
   const createServer = options.createServer || createServerHTTP;
@@ -410,6 +436,7 @@ var serve = (options, listeningListener) => {
   return server;
 };
 export {
+  RequestError,
   createAdaptorServer,
   getRequestListener,
   serve

package/dist/listener.d.mts

@@ -4,6 +4,7 @@ import { FetchCallback, CustomErrorHandler } from './types.mjs';
 import 'node:https';
 
 declare const getRequestListener: (fetchCallback: FetchCallback, options?: {
+    hostname?: string;
     errorHandler?: CustomErrorHandler;
     overrideGlobalObjects?: boolean;
 }) => (incoming: IncomingMessage | Http2ServerRequest, outgoing: ServerResponse | Http2ServerResponse) => Promise<void>;

package/dist/listener.d.ts

@@ -4,6 +4,7 @@ import { FetchCallback, CustomErrorHandler } from './types.js';
 import 'node:https';
 
 declare const getRequestListener: (fetchCallback: FetchCallback, options?: {
+    hostname?: string;
     errorHandler?: CustomErrorHandler;
     overrideGlobalObjects?: boolean;
 }) => (incoming: IncomingMessage | Http2ServerRequest, outgoing: ServerResponse | Http2ServerResponse) => Promise<void>;

package/dist/listener.js

@@ -37,6 +37,18 @@ module.exports = __toCommonJS(listener_exports);
 // src/request.ts
 var import_node_http2 = require("http2");
 var import_node_stream = require("stream");
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -126,12 +138,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -294,6 +314,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -390,14 +413,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -405,10 +428,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }

package/dist/listener.mjs

@@ -1,6 +1,18 @@
 // src/request.ts
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -90,12 +102,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -258,6 +278,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -354,14 +377,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -369,10 +392,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }

package/dist/request.d.mts

@@ -1,6 +1,13 @@
 import { IncomingMessage } from 'node:http';
 import { Http2ServerRequest } from 'node:http2';
 
+declare class RequestError extends Error {
+    static name: string;
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+declare const toRequestError: (e: unknown) => RequestError;
 declare const GlobalRequest: {
     new (input: RequestInfo | URL, init?: RequestInit | undefined): globalThis.Request;
     prototype: globalThis.Request;
@@ -9,6 +16,6 @@ declare class Request extends GlobalRequest {
     constructor(input: string | Request, options?: RequestInit);
 }
 declare const getAbortController: unique symbol;
-declare const newRequest: (incoming: IncomingMessage | Http2ServerRequest) => any;
+declare const newRequest: (incoming: IncomingMessage | Http2ServerRequest, defaultHostname?: string) => any;
 
-export { GlobalRequest, Request, getAbortController, newRequest };
+export { GlobalRequest, Request, RequestError, getAbortController, newRequest, toRequestError };

package/dist/request.d.ts

@@ -1,6 +1,13 @@
 import { IncomingMessage } from 'node:http';
 import { Http2ServerRequest } from 'node:http2';
 
+declare class RequestError extends Error {
+    static name: string;
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+declare const toRequestError: (e: unknown) => RequestError;
 declare const GlobalRequest: {
     new (input: RequestInfo | URL, init?: RequestInit | undefined): globalThis.Request;
     prototype: globalThis.Request;
@@ -9,6 +16,6 @@ declare class Request extends GlobalRequest {
     constructor(input: string | Request, options?: RequestInit);
 }
 declare const getAbortController: unique symbol;
-declare const newRequest: (incoming: IncomingMessage | Http2ServerRequest) => any;
+declare const newRequest: (incoming: IncomingMessage | Http2ServerRequest, defaultHostname?: string) => any;
 
-export { GlobalRequest, Request, getAbortController, newRequest };
+export { GlobalRequest, Request, RequestError, getAbortController, newRequest, toRequestError };

package/dist/request.js

@@ -22,12 +22,26 @@ var request_exports = {};
 __export(request_exports, {
   GlobalRequest: () => GlobalRequest,
   Request: () => Request,
+  RequestError: () => RequestError,
   getAbortController: () => getAbortController,
-  newRequest: () => newRequest
+  newRequest: () => newRequest,
+  toRequestError: () => toRequestError
 });
 module.exports = __toCommonJS(request_exports);
 var import_node_http2 = require("http2");
 var import_node_stream = require("stream");
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -117,18 +131,28 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   GlobalRequest,
   Request,
+  RequestError,
   getAbortController,
-  newRequest
+  newRequest,
+  toRequestError
 });

package/dist/request.mjs

@@ -1,6 +1,18 @@
 // src/request.ts
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -90,17 +102,27 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 export {
   GlobalRequest,
   Request,
+  RequestError,
   getAbortController,
-  newRequest
+  newRequest,
+  toRequestError
 };

package/dist/server.js

@@ -39,6 +39,18 @@ var import_node_http = require("http");
 // src/request.ts
 var import_node_http2 = require("http2");
 var import_node_stream = require("stream");
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -128,12 +140,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -296,6 +316,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -392,14 +415,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -407,10 +430,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }
@@ -430,6 +455,7 @@ var getRequestListener = (fetchCallback, options = {}) => {
 var createAdaptorServer = (options) => {
   const fetchCallback = options.fetch;
   const requestListener = getRequestListener(fetchCallback, {
+    hostname: options.hostname,
     overrideGlobalObjects: options.overrideGlobalObjects
   });
   const createServer = options.createServer || import_node_http.createServer;

package/dist/server.mjs

@@ -4,6 +4,18 @@ import { createServer as createServerHTTP } from "http";
 // src/request.ts
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -93,12 +105,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -261,6 +281,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -357,14 +380,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -372,10 +395,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }
@@ -395,6 +420,7 @@ var getRequestListener = (fetchCallback, options = {}) => {
 var createAdaptorServer = (options) => {
   const fetchCallback = options.fetch;
   const requestListener = getRequestListener(fetchCallback, {
+    hostname: options.hostname,
     overrideGlobalObjects: options.overrideGlobalObjects
   });
   const createServer = options.createServer || createServerHTTP;

package/dist/vercel.js

@@ -37,6 +37,18 @@ module.exports = __toCommonJS(vercel_exports);
 // src/request.ts
 var import_node_http2 = require("http2");
 var import_node_stream = require("stream");
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -126,12 +138,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof import_node_http2.Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof import_node_http2.Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -294,6 +314,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -390,14 +413,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -405,10 +428,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }

package/dist/vercel.mjs

@@ -1,6 +1,18 @@
 // src/request.ts
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
+var RequestError = class extends Error {
+  static name = "RequestError";
+  constructor(message, options) {
+    super(message, options);
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
 var GlobalRequest = global.Request;
 var Request = class extends GlobalRequest {
   constructor(input, options) {
@@ -90,12 +102,20 @@ var requestPrototype = {
   });
 });
 Object.setPrototypeOf(requestPrototype, Request.prototype);
-var newRequest = (incoming) => {
+var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
-  req[urlKey] = new URL(
-    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host}${incoming.url}`
-  ).href;
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  const url = new URL(
+    `${incoming instanceof Http2ServerRequest || incoming.socket && incoming.socket.encrypted ? "https" : "http"}://${host}${incoming.url}`
+  );
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
   return req;
 };
 
@@ -258,6 +278,9 @@ global.fetch = (info, init) => {
 // src/listener.ts
 var regBuffer = /^no$/i;
 var regContentType = /^(application\/json\b|text\/(?!event-stream\b))/i;
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
 var handleFetchError = (e) => new Response(null, {
   status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
 });
@@ -354,14 +377,14 @@ var getRequestListener = (fetchCallback, options = {}) => {
     });
   }
   return async (incoming, outgoing) => {
-    let res;
-    const req = newRequest(incoming);
-    outgoing.on("close", () => {
-      if (incoming.destroyed) {
-        req[getAbortController]().abort();
-      }
-    });
+    let res, req;
     try {
+      req = newRequest(incoming, options.hostname);
+      outgoing.on("close", () => {
+        if (incoming.destroyed) {
+          req[getAbortController]().abort();
+        }
+      });
       res = fetchCallback(req, { incoming, outgoing });
       if (cacheKey in res) {
         return responseViaCache(res, outgoing);
@@ -369,10 +392,12 @@ var getRequestListener = (fetchCallback, options = {}) => {
     } catch (e) {
       if (!res) {
         if (options.errorHandler) {
-          res = await options.errorHandler(e);
+          res = await options.errorHandler(req ? e : toRequestError(e));
           if (!res) {
             return;
           }
+        } else if (!req) {
+          res = handleRequestError();
         } else {
           res = handleFetchError(e);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hono/node-server",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "Node.js Adapter for Hono",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",