@j3r3mcdev/oast-server 1.1.13 → 1.1.14

package/src/core/http/middleware.ts

@@ -1,160 +0,0 @@
-// src/http/middleware.ts
-
-import { Request } from "./request";
-import { Response } from "./response";
-
-export type Middleware = (
-  req: Request,
-  res: Response,
-  next: () => Promise<void>,
-) => Promise<void> | void;
-
-export class MiddlewarePipeline {
-  private middlewares: Middleware[] = [];
-
-  use(mw: Middleware): this {
-    this.middlewares.push(mw);
-    return this;
-  }
-
-  async run(req: Request, res: Response): Promise<void> {
-    let index = -1;
-
-    const next = async (): Promise<void> => {
-      index++;
-
-      if (index >= this.middlewares.length) return;
-
-      const mw = this.middlewares[index];
-
-      await Promise.resolve(mw(req, res, next));
-    };
-
-    await next();
-  }
-}
-
-/* ---------------------------------------------------------
-   JSON PARSER
---------------------------------------------------------- */
-export async function bodyParserJson(req: Request, res: Response) {
-  const raw = req.raw;
-  const contentType = raw.headers["content-type"] ?? "";
-
-  if (!contentType.includes("application/json")) {
-    return;
-  }
-
-  const chunks: Buffer[] = [];
-  for await (const chunk of raw) chunks.push(chunk);
-
-  const text = Buffer.concat(chunks).toString("utf8");
-
-  try {
-    req.body = text.length > 0 ? JSON.parse(text) : {};
-  } catch {
-    res.status(400).json({ error: "Invalid JSON" });
-  }
-}
-
-/* ---------------------------------------------------------
-   RAW PARSER
---------------------------------------------------------- */
-export async function bodyParserRaw(req: Request, res: Response) {
-  const raw = req.raw;
-  const contentType = raw.headers["content-type"] ?? "";
-
-  if (contentType.includes("application/json")) return;
-
-  const chunks: Buffer[] = [];
-  for await (const chunk of raw) chunks.push(chunk);
-
-  req.bodyRaw = Buffer.concat(chunks);
-}
-
-/* ---------------------------------------------------------
-   TEXT PARSER
---------------------------------------------------------- */
-export async function bodyParserText(req: Request, res: Response) {
-  const raw = req.raw;
-  const contentType = raw.headers["content-type"] ?? "";
-
-  const isText =
-    contentType.startsWith("text/") ||
-    contentType.includes("application/xml") ||
-    contentType.includes("application/xhtml+xml");
-
-  if (!isText) return;
-
-  const chunks: Buffer[] = [];
-  for await (const chunk of raw) chunks.push(chunk);
-
-  req.bodyText = Buffer.concat(chunks).toString("utf8");
-}
-
-/* ---------------------------------------------------------
-   MULTIPART PARSER
---------------------------------------------------------- */
-export async function bodyParserMultipart(req: Request, res: Response) {
-  const raw = req.raw;
-  const contentType = raw.headers["content-type"] ?? "";
-
-  if (!contentType.startsWith("multipart/form-data")) return;
-
-  const boundaryMatch = contentType.match(/boundary=(.+)$/);
-  if (!boundaryMatch) {
-    res.status(400).json({ error: "Missing multipart boundary" });
-    return;
-  }
-
-  const boundary = "--" + boundaryMatch[1];
-
-  const chunks: Buffer[] = [];
-  for await (const chunk of raw) chunks.push(chunk);
-
-  const buffer = Buffer.concat(chunks);
-  const parts = buffer.toString("binary").split(boundary);
-
-  req.files = [];
-  req.form = {};
-
-  for (const part of parts) {
-    if (part === "--\r\n" || part === "" || part === "\r\n") continue;
-
-    const [rawHeaders, rawBody] = part.split("\r\n\r\n");
-    if (!rawBody) continue;
-
-    // Nettoyage du body brut
-    const cleaned = rawBody.replace(/\r\n--$/, "");
-    const body = Buffer.from(cleaned, "binary");
-
-    const disposition = rawHeaders.match(/name="([^"]+)"/);
-    if (!disposition) continue;
-
-    const fieldname = disposition[1];
-    const filenameMatch = rawHeaders.match(/filename="([^"]+)"/);
-
-    if (filenameMatch) {
-      // ----------- FICHIER -----------
-      const filename = filenameMatch[1];
-      const contentTypeMatch = rawHeaders.match(/Content-Type: (.+)/);
-
-      req.files.push({
-        fieldname,
-        filename,
-        contentType: contentTypeMatch
-          ? contentTypeMatch[1]
-          : "application/octet-stream",
-
-        // 🔥 Correction : retirer le \r\n final
-        data: Buffer.from(
-          body.toString("binary").replace(/\r\n$/, ""),
-          "binary",
-        ),
-      });
-    } else {
-      // ----------- CHAMP TEXTE -----------
-      req.form[fieldname] = body.toString("utf8").replace(/\r\n$/, ""); // 🔥 Correction champ texte
-    }
-  }
-}

package/src/core/http/request.ts

@@ -1,55 +0,0 @@
-// src/http/request.ts
-
-export interface RequestContext {
-  // espace réservé pour les middlewares
-  [key: string]: any;
-}
-
-export class Request {
-  readonly method: string;
-  readonly path: string;
-  readonly headers: Record<string, string>;
-  readonly query: Record<string, string | string[]>;
-  readonly params: Record<string, string>;
-  body: any;
-  bodyRaw?: Buffer;
-  bodyText?: string;
-  files?: Array<{
-    fieldname: string;
-    filename: string;
-    contentType: string;
-    data: Buffer;
-  }>;
-  form?: Record<string, string>;
-
-  readonly ip: string;
-  readonly raw: any; // Node IncomingMessage ou autre selon l'adaptateur
-  readonly context: RequestContext;
-
-  constructor(options: {
-    method: string;
-    path: string;
-    headers: Record<string, string>;
-    query?: Record<string, string | string[]>;
-    params?: Record<string, string>;
-    body?: any;
-    ip?: string;
-    raw?: any;
-    context?: RequestContext;
-  }) {
-    this.method = options.method;
-    this.path = options.path;
-    this.headers = options.headers;
-    this.query = options.query ?? {};
-    this.params = options.params ?? {};
-    this.body = options.body ?? null;
-    this.ip = options.ip ?? "";
-    this.raw = options.raw ?? null;
-    this.context = options.context ?? {};
-  }
-
-  // Exemple d'utilitaire PRO
-  header(name: string): string | undefined {
-    return this.headers[name.toLowerCase()];
-  }
-}

package/src/core/http/response.ts

@@ -1,93 +0,0 @@
-// src/http/response.ts
-
-export class Response {
-  private _status = 200;
-  private _headers: Record<string, string> = {};
-  private _sent = false;
-  private _raw: any; // Node ServerResponse ou autre selon l'adaptateur
-
-  constructor(raw: any) {
-    this._raw = raw;
-  }
-
-  status(code: number): this {
-    this._status = code;
-    return this;
-  }
-
-  header(name: string, value: string): this {
-    this._headers[name.toLowerCase()] = value;
-    return this;
-  }
-
-  json(data: any): void {
-    this.ensureNotSent();
-    this.header("content-type", "application/json");
-    this.send(JSON.stringify(data));
-  }
-
-  text(data: string): void {
-    this.ensureNotSent();
-    this.header("content-type", "text/plain");
-    this.send(data);
-  }
-
-  send(data: any): void {
-    this.ensureNotSent();
-
-    for (const [name, value] of Object.entries(this._headers)) {
-      this._raw.setHeader(name, value);
-    }
-
-    this._raw.statusCode = this._status;
-    this._raw.end(data);
-
-    this._sent = true;
-  }
-
-  stream(readable: NodeJS.ReadableStream): void {
-    this.ensureNotSent();
-
-    for (const [name, value] of Object.entries(this._headers)) {
-      this._raw.setHeader(name, value);
-    }
-
-    this._raw.statusCode = this._status;
-    readable.pipe(this._raw);
-
-    this._sent = true;
-  }
-
-  sse(): void {
-    this.ensureNotSent();
-
-    this.header("content-type", "text/event-stream");
-    this.header("cache-control", "no-cache");
-    this.header("connection", "keep-alive");
-
-    for (const [name, value] of Object.entries(this._headers)) {
-      this._raw.setHeader(name, value);
-    }
-
-    this._raw.flushHeaders?.();
-
-    this._sent = false; // SSE reste ouvert
-  }
-
-  write(data: string): void {
-    this._raw.write(data);
-  }
-
-  end(): void {
-    if (!this._sent) {
-      this._raw.end();
-      this._sent = true;
-    }
-  }
-
-  private ensureNotSent() {
-    if (this._sent) {
-      throw new Error("Response already sent");
-    }
-  }
-}

package/src/core/http/router.ts

@@ -1,138 +0,0 @@
-// src/http/router.ts
-
-import { compilePath } from "./compile-path";
-import { Middleware } from "./middleware";
-
-export class Router {
-  private routes: Array<{
-    method: string;
-    path: string;
-    compiled: any[];
-    middlewares: Middleware[];
-    handler: Function;
-  }> = [];
-
-  /**
-   * Enregistre une route avec middlewares optionnels :
-   * router.get("/x", mw1, mw2, handler)
-   */
-  register(method: string, path: string, ...middlewaresAndHandler: any[]) {
-    const compiled = compilePath(path);
-
-    const handler = middlewaresAndHandler.pop();
-    const middlewares = middlewaresAndHandler as Middleware[];
-
-    this.routes.push({
-      method,
-      path,
-      compiled,
-      middlewares,
-      handler,
-    });
-  }
-
-  /**
-   * Trouve la route et extrait les params
-   */
-  match(method: string, urlPath: string) {
-    const urlSegments = urlPath.replace(/^\//, "").split("/");
-
-    for (const route of this.routes) {
-      if (route.method !== method) continue;
-
-      const params: Record<string, string> = {};
-      const compiled = route.compiled;
-
-      if (this.matchSegments(compiled, urlSegments, params)) {
-        return {
-          handler: route.handler,
-          middlewares: route.middlewares,
-          params,
-        };
-      }
-    }
-
-    return null;
-  }
-
-  /**
-   * Ton moteur de matching existant — inchangé
-   */
-  private matchSegments(
-    compiled: any[],
-    urlSegments: string[],
-    params: Record<string, string>,
-  ) {
-    let i = 0;
-
-    for (let j = 0; j < compiled.length; j++) {
-      const segment = compiled[j];
-      const part = urlSegments[i];
-
-      if (!part && segment.type !== "wildcard") {
-        return false;
-      }
-
-      if (segment.type === "static") {
-        if (segment.value !== part) return false;
-        i++;
-        continue;
-      }
-
-      if (segment.type === "param") {
-        if (!part) return false;
-        params[segment.name] = part;
-        i++;
-        continue;
-      }
-
-      if (segment.type === "wildcard") {
-        if (!part) return false;
-
-        const next = compiled[j + 1];
-        if (!next) return true;
-
-        while (i < urlSegments.length) {
-          if (next.type === "static" && urlSegments[i] === next.value) {
-            break;
-          }
-          i++;
-        }
-
-        if (i >= urlSegments.length) return false;
-
-        continue;
-      }
-    }
-
-    return i === urlSegments.length;
-  }
-
-  get(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("GET", path, ...middlewaresAndHandler);
-  }
-
-  post(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("POST", path, ...middlewaresAndHandler);
-  }
-
-  put(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("PUT", path, ...middlewaresAndHandler);
-  }
-
-  delete(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("DELETE", path, ...middlewaresAndHandler);
-  }
-
-  patch(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("PATCH", path, ...middlewaresAndHandler);
-  }
-
-  options(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("OPTIONS", path, ...middlewaresAndHandler);
-  }
-
-  head(path: string, ...middlewaresAndHandler: any[]) {
-    this.register("HEAD", path, ...middlewaresAndHandler);
-  }
-}

package/src/core/id-generator.ts

@@ -1,8 +0,0 @@
-import crypto from "crypto";
-
-export class IdGenerator {
-  static generate(): string {
-    // Token long, alphanumérique, très difficile à deviner
-    return crypto.randomBytes(16).toString("hex");
-  }
-}

package/src/core/logger.ts

@@ -1,113 +0,0 @@
-export type LogLevel = "debug" | "info" | "warn" | "error" | "fatal";
-
-export interface LoggerOptions {
-  level?: LogLevel;
-  context?: string;
-  enabled?: boolean;
-  hooks?: Array<(entry: LogEntry) => void>;
-}
-
-export interface LogEntry {
-  timestamp: string;
-  level: LogLevel;
-  message: string;
-  context?: string;
-  data?: any;
-}
-
-const COLORS = {
-  reset: "\x1b[0m",
-  gray: "\x1b[90m",
-  blue: "\x1b[34m",
-  yellow: "\x1b[33m",
-  red: "\x1b[31m",
-  magenta: "\x1b[35m",
-};
-
-const LEVEL_COLORS: Record<LogLevel, string> = {
-  debug: COLORS.gray,
-  info: COLORS.blue,
-  warn: COLORS.yellow,
-  error: COLORS.red,
-  fatal: COLORS.magenta,
-};
-
-const LEVEL_ORDER: Record<LogLevel, number> = {
-  debug: 10,
-  info: 20,
-  warn: 30,
-  error: 40,
-  fatal: 50,
-};
-
-export class Logger {
-  private level: LogLevel;
-  private context?: string;
-  private enabled: boolean;
-  private hooks: Array<(entry: LogEntry) => void>;
-
-  constructor(options: LoggerOptions = {}) {
-    this.level = options.level ?? "info";
-    this.context = options.context;
-    this.enabled = options.enabled ?? true;
-    this.hooks = options.hooks ?? [];
-  }
-
-  private shouldLog(level: LogLevel): boolean {
-    return this.enabled && LEVEL_ORDER[level] >= LEVEL_ORDER[this.level];
-  }
-
-  private emit(level: LogLevel, message: string, data?: any) {
-    if (!this.shouldLog(level)) return;
-
-    const entry: LogEntry = {
-      timestamp: new Date().toISOString(),
-      level,
-      message,
-      context: this.context,
-      data,
-    };
-
-    // Console output
-    const color = LEVEL_COLORS[level];
-    const ctx = this.context ? `[${this.context}] ` : "";
-    const formatted = `${color}${entry.timestamp} ${level.toUpperCase()} ${ctx}${message}${COLORS.reset}`;
-
-    console.log(formatted);
-
-    // Hooks (dashboard, file, webhook…)
-    for (const hook of this.hooks) {
-      hook(entry);
-    }
-  }
-
-  debug(msg: string, data?: any) {
-    this.emit("debug", msg, data);
-  }
-
-  info(msg: string, data?: any) {
-    this.emit("info", msg, data);
-  }
-
-  warn(msg: string, data?: any) {
-    this.emit("warn", msg, data);
-  }
-
-  error(msg: string, data?: any) {
-    this.emit("error", msg, data);
-  }
-
-  fatal(msg: string, data?: any) {
-    this.emit("fatal", msg, data);
-  }
-
-  // Créer un logger enfant avec un contexte différent
-  withContext(context: string): Logger {
-    return new Logger({
-      level: this.level,
-      enabled: this.enabled,
-      hooks: this.hooks,
-      context,
-    });
-  }
-}

package/src/core/router.ts

@@ -1,44 +0,0 @@
-import { Storage } from "../storage-adapters/storage.interface";
-import { Logger } from "./logger";
-import { AnyNormalizedEvent } from "../types/event.types";
-
-export type RouterHook = (event: AnyNormalizedEvent) => void | Promise<void>;
-
-export interface RouterOptions {
-  logger?: Logger;
-  hooks?: RouterHook[];
-}
-
-export class CoreRouter {
-  private logger: Logger;
-  private hooks: RouterHook[];
-
-  constructor(
-    private storage: Storage,
-    options: RouterOptions = {},
-  ) {
-    this.logger = options.logger ?? new Logger({ context: "CoreRouter" });
-    this.hooks = options.hooks ?? [];
-  }
-
-  async dispatch(event: AnyNormalizedEvent): Promise<void> {
-    this.logger.info(`Event received (${event.type})`, { id: event.id });
-    await this.storage.save(event);
-
-    for (const hook of this.hooks) {
-      try {
-        await hook(event);
-      } catch (err) {
-        this.logger.error("Hook error", err);
-      }
-    }
-  }
-
-  async route(event: AnyNormalizedEvent): Promise<void> {
-    return this.dispatch(event);
-  }
-
-  addHook(hook: RouterHook) {
-    this.hooks.push(hook);
-  }
-}

package/src/core/server.ts

@@ -1,85 +0,0 @@
-import { Logger } from "./logger";
-import { CoreRouter } from "./router";
-import { StorageManager } from "./storage";
-import { Listener } from "../listeners/listener.interface";
-export interface CoreServerOptions {
-  logger?: Logger;
-  storage?: StorageManager;
-  listeners?: Listener[];
-}
-
-export class CoreServer {
-  private logger: Logger;
-  private storage: StorageManager;
-  private router: CoreRouter;
-  private listeners: Listener[];
-
-  constructor(options: CoreServerOptions = {}) {
-    this.logger = options.logger ?? new Logger({ context: "CoreServer" });
-    this.storage =
-      options.storage ?? new StorageManager({ logger: this.logger });
-    this.router = new CoreRouter(this.storage, { logger: this.logger });
-    this.listeners = options.listeners ?? [];
-  }
-
-  getRouter() {
-    return this.router;
-  }
-
-  getStorage() {
-    return this.storage;
-  }
-
-  async start(): Promise<void> {
-    this.logger.info("Starting OAST server...");
-
-    // Démarrage des listeners
-    for (const listener of this.listeners) {
-      try {
-        await listener.start();
-        this.logger.info(`Listener started`, {
-          listener: listener.constructor.name,
-        });
-      } catch (err: any) {
-        this.logger.error("Listener failed to start", {
-          listener: listener.constructor.name,
-          error: err.message,
-        });
-      }
-    }
-
-    this.logger.info("OAST server started");
-  }
-
-  async stop(): Promise<void> {
-    this.logger.info("Stopping OAST server...");
-
-    for (const listener of this.listeners) {
-      try {
-        await listener.stop();
-        this.logger.info(`Listener stopped`, {
-          listener: listener.constructor.name,
-        });
-      } catch (err: any) {
-        this.logger.error("Listener failed to stop", {
-          listener: listener.constructor.name,
-          error: err.message,
-        });
-      }
-    }
-
-    this.logger.info("OAST server stopped");
-  }
-
-  /**
-   * Méthode appelée par CoreRouter après chaque event normalisé.
-   * Permet de diffuser l’event aux listeners SSE (ApiListener).
-   */
-  broadcast(event: any) {
-    for (const listener of this.listeners) {
-      if (typeof (listener as any).broadcastEvent === "function") {
-        (listener as any).broadcastEvent(event);
-      }
-    }
-  }
-}