@j3r3mcdev/oast-server 1.1.4 → 1.1.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/.github/workflows/ci.yml +29 -29
  2. package/.github/workflows/publish.yml +31 -31
  3. package/README.md +192 -192
  4. package/jest.config.js +14 -14
  5. package/package.json +45 -45
  6. package/sadmin list shadows +9 -9
  7. package/src/api/controllers/__tests__/tasks.controller.test.ts +74 -74
  8. package/src/api/controllers/events.controller.ts +10 -10
  9. package/src/api/controllers/health.controller.ts +7 -7
  10. package/src/api/controllers/tasks.controller.ts +41 -41
  11. package/src/api/dto/__tests__/create-task.dto.test.ts +41 -41
  12. package/src/api/dto/__tests__/filter-tasks.dto.test.ts +35 -35
  13. package/src/api/dto/create-task.dto.ts +33 -33
  14. package/src/api/dto/filter-tasks.dto.ts +33 -33
  15. package/src/api/services/__tests__/events.service.test.ts +41 -41
  16. package/src/api/services/__tests__/tasks.service.test.ts +41 -41
  17. package/src/api/services/events.service.ts +17 -17
  18. package/src/api/services/tasks.service.ts +79 -79
  19. package/src/api/sse/events.stream.ts +90 -90
  20. package/src/bootstrap.ts +89 -89
  21. package/src/core/__tests__/core-router.test.ts +30 -30
  22. package/src/core/__tests__/core-server.test.ts +44 -44
  23. package/src/core/__tests__/event.normalizer.test.ts +56 -56
  24. package/src/core/__tests__/event.router.test.ts +89 -89
  25. package/src/core/__tests__/logger.test.ts +32 -32
  26. package/src/core/__tests__/storage-manager.test.ts +74 -74
  27. package/src/core/event.normalizer.ts +147 -147
  28. package/src/core/event.router.ts +13 -13
  29. package/src/core/http/__tests__/adapter-node.test.ts +52 -52
  30. package/src/core/http/__tests__/body-parser-multipart.test.ts +41 -41
  31. package/src/core/http/__tests__/body-parser-raw.test.ts +28 -28
  32. package/src/core/http/__tests__/body-parser-text.test.ts +28 -28
  33. package/src/core/http/__tests__/compile-path.test.ts +39 -39
  34. package/src/core/http/__tests__/middleware-pipeline.test.ts +51 -51
  35. package/src/core/http/__tests__/request.test.ts +34 -34
  36. package/src/core/http/__tests__/response.test.ts +35 -35
  37. package/src/core/http/__tests__/router-match.test.ts +171 -171
  38. package/src/core/http/adapter-node.ts +51 -51
  39. package/src/core/http/buildRequest.ts +18 -18
  40. package/src/core/http/compile-path.ts +32 -32
  41. package/src/core/http/errors.ts +37 -37
  42. package/src/core/http/http-server.ts +52 -52
  43. package/src/core/http/middleware.ts +160 -160
  44. package/src/core/http/request.ts +55 -55
  45. package/src/core/http/response.ts +93 -93
  46. package/src/core/http/router.ts +138 -138
  47. package/src/core/id-generator.ts +8 -8
  48. package/src/core/logger.ts +113 -113
  49. package/src/core/router.ts +44 -44
  50. package/src/core/server.ts +85 -85
  51. package/src/core/storage.ts +64 -64
  52. package/src/index.ts +14 -12
  53. package/src/listeners/api/__tests__/api.controller.test.ts +116 -116
  54. package/src/listeners/api/__tests__/api.extractor.test.ts +46 -46
  55. package/src/listeners/api/__tests__/api.listener.test.ts +82 -82
  56. package/src/listeners/api/__tests__/api.routes.test.ts +155 -155
  57. package/src/listeners/api/__tests__/api.sse.test.ts +105 -105
  58. package/src/listeners/api/api.controllers.ts +67 -67
  59. package/src/listeners/api/api.extractor.ts +43 -43
  60. package/src/listeners/api/api.listener.ts +50 -50
  61. package/src/listeners/api/api.routes.ts +76 -76
  62. package/src/listeners/api/api.sse.ts +38 -38
  63. package/src/listeners/dns/__tests__/dns.test.ts +118 -118
  64. package/src/listeners/dns/dns.extractor.ts +14 -14
  65. package/src/listeners/dns/dns.listener.ts +61 -61
  66. package/src/listeners/http/__tests__/http.extractor.test.ts +59 -59
  67. package/src/listeners/http/__tests__/http.listener.test.ts +133 -133
  68. package/src/listeners/http/http.extractor.ts +15 -15
  69. package/src/listeners/http/http.listener.ts +110 -110
  70. package/src/listeners/listener.interface.ts +4 -4
  71. package/src/listeners/smtp/__tests__/smtp.extractor.test.ts +69 -69
  72. package/src/listeners/smtp/__tests__/smtp.listener.test.ts +150 -150
  73. package/src/listeners/smtp/smtp.extractor.ts +18 -18
  74. package/src/listeners/smtp/smtp.listener.ts +60 -60
  75. package/src/listeners/ssrf/__tests__/ssrf.extractor.test.ts +41 -41
  76. package/src/listeners/ssrf/__tests__/ssrf.listener.test.ts +87 -87
  77. package/src/listeners/ssrf/ssrf.extractor.ts +14 -14
  78. package/src/listeners/ssrf/ssrf.listener.ts +37 -37
  79. package/src/listeners/tcp/tcp.extractor.ts +16 -16
  80. package/src/listeners/tcp/tcp.listener.ts +61 -61
  81. package/src/listeners/webhook/__tests__/webhook.extractor.test.ts +35 -35
  82. package/src/listeners/webhook/__tests__/webhook.listener.test.ts +122 -122
  83. package/src/listeners/webhook/webhook.extractor.ts +12 -12
  84. package/src/listeners/webhook/webhook.listener.ts +58 -58
  85. package/src/listeners/websocket/__tests__/websocket.extractor.test.ts +33 -33
  86. package/src/listeners/websocket/__tests__/websocket.listener.test.ts +90 -90
  87. package/src/listeners/websocket/websocket.extractor.ts +11 -11
  88. package/src/listeners/websocket/websocket.listener.ts +40 -40
  89. package/src/storage-adapters/adapters/__tests__/memory.storage.test.ts +75 -75
  90. package/src/storage-adapters/adapters/memory.storage.ts +64 -64
  91. package/src/storage-adapters/storage.interface.ts +26 -26
  92. package/src/types/event.types.ts +147 -147
  93. package/tsconfig.json +21 -21
@@ -1,82 +1,82 @@
1
- import http from "http";
2
- import { ApiListener } from "../api.listener";
3
- import { StorageManager } from "../../../core/storage";
4
- import { Logger } from "../../../core/logger";
5
- import { describe, test, beforeEach, afterEach, expect } from "@jest/globals";
6
- import { ApiController } from "../api.controllers";
7
-
8
- describe("ApiListener", () => {
9
- let storage: StorageManager;
10
- let api: ApiListener;
11
-
12
- beforeEach(async () => {
13
- storage = new StorageManager();
14
-
15
- api = new ApiListener(storage, {
16
- port: 9999,
17
- logger: new Logger({ context: "ApiTest" }),
18
- });
19
-
20
- await api.start();
21
- });
22
-
23
- afterEach(async () => {
24
- await api.stop();
25
- });
26
-
27
- test("GET /events returns empty list", async () => {
28
- const res = await fetch("http://localhost:9999/events");
29
- const json = await res.json();
30
-
31
- expect(json.success).toBe(true);
32
- expect(json.events).toEqual([]);
33
- });
34
-
35
- test("GET /stats returns correct structure", async () => {
36
- const res = await fetch("http://localhost:9999/stats");
37
- const json = await res.json();
38
-
39
- expect(json.success).toBe(true);
40
- expect(json.stats.total).toBe(0);
41
- expect(json.stats.byType).toEqual({});
42
- });
43
-
44
- test("GET /events/:id returns 404 when not found", async () => {
45
- const res = await fetch("http://localhost:9999/events/unknown");
46
- const json = await res.json();
47
-
48
- expect(res.status).toBe(404);
49
- expect(json.success).toBe(false);
50
- });
51
-
52
- test("DELETE /events clears all events", async () => {
53
- // On ajoute un event dans le storage
54
- await storage.save({
55
- id: "1",
56
- type: "http",
57
- timestamp: Date.now(),
58
- sourceIp: "127.0.0.1",
59
- request: {
60
- method: "GET",
61
- path: "/",
62
- headers: {},
63
- query: {},
64
- body: "",
65
- },
66
- });
67
-
68
- let events = await storage.listEvents({});
69
- expect(events.length).toBe(1);
70
-
71
- // On appelle l'API réelle
72
- const res = await fetch("http://localhost:9999/events", {
73
- method: "DELETE",
74
- });
75
-
76
- const json = await res.json();
77
- expect(json.success).toBe(true);
78
-
79
- events = await storage.listEvents({});
80
- expect(events.length).toBe(0);
81
- });
82
- });
1
+ import http from "http";
2
+ import { ApiListener } from "../api.listener";
3
+ import { StorageManager } from "../../../core/storage";
4
+ import { Logger } from "../../../core/logger";
5
+ import { describe, test, beforeEach, afterEach, expect } from "@jest/globals";
6
+ import { ApiController } from "../api.controllers";
7
+
8
+ describe("ApiListener", () => {
9
+ let storage: StorageManager;
10
+ let api: ApiListener;
11
+
12
+ beforeEach(async () => {
13
+ storage = new StorageManager();
14
+
15
+ api = new ApiListener(storage, {
16
+ port: 9999,
17
+ logger: new Logger({ context: "ApiTest" }),
18
+ });
19
+
20
+ await api.start();
21
+ });
22
+
23
+ afterEach(async () => {
24
+ await api.stop();
25
+ });
26
+
27
+ test("GET /events returns empty list", async () => {
28
+ const res = await fetch("http://localhost:9999/events");
29
+ const json = await res.json();
30
+
31
+ expect(json.success).toBe(true);
32
+ expect(json.events).toEqual([]);
33
+ });
34
+
35
+ test("GET /stats returns correct structure", async () => {
36
+ const res = await fetch("http://localhost:9999/stats");
37
+ const json = await res.json();
38
+
39
+ expect(json.success).toBe(true);
40
+ expect(json.stats.total).toBe(0);
41
+ expect(json.stats.byType).toEqual({});
42
+ });
43
+
44
+ test("GET /events/:id returns 404 when not found", async () => {
45
+ const res = await fetch("http://localhost:9999/events/unknown");
46
+ const json = await res.json();
47
+
48
+ expect(res.status).toBe(404);
49
+ expect(json.success).toBe(false);
50
+ });
51
+
52
+ test("DELETE /events clears all events", async () => {
53
+ // On ajoute un event dans le storage
54
+ await storage.save({
55
+ id: "1",
56
+ type: "http",
57
+ timestamp: Date.now(),
58
+ sourceIp: "127.0.0.1",
59
+ request: {
60
+ method: "GET",
61
+ path: "/",
62
+ headers: {},
63
+ query: {},
64
+ body: "",
65
+ },
66
+ });
67
+
68
+ let events = await storage.listEvents({});
69
+ expect(events.length).toBe(1);
70
+
71
+ // On appelle l'API réelle
72
+ const res = await fetch("http://localhost:9999/events", {
73
+ method: "DELETE",
74
+ });
75
+
76
+ const json = await res.json();
77
+ expect(json.success).toBe(true);
78
+
79
+ events = await storage.listEvents({});
80
+ expect(events.length).toBe(0);
81
+ });
82
+ });
@@ -1,155 +1,155 @@
1
- import { handleApiRequest } from "../api.routes";
2
- import { StorageManager } from "../../../core/storage";
3
- import { ApiSse } from "../api.sse";
4
- import { ApiController } from "../api.controllers";
5
- import { Logger } from "../../../core/logger";
6
- import { IncomingMessage, ServerResponse } from "http";
7
- import { Socket } from "net";
8
- import { describe, it, expect, beforeEach, jest } from "@jest/globals";
9
-
10
- // Helpers pour mocker req/res
11
- function mockReq(method: string, url: string): IncomingMessage {
12
- const socket = new Socket();
13
- const req = new IncomingMessage(socket);
14
- req.method = method;
15
- req.url = url;
16
- req.headers = { host: "localhost" };
17
- return req;
18
- }
19
-
20
- function mockRes(): ServerResponse {
21
- const socket = new Socket();
22
- const req = new IncomingMessage(socket);
23
- const res = new ServerResponse(req);
24
-
25
- jest.spyOn(res, "writeHead");
26
- jest.spyOn(res, "end");
27
-
28
- return res;
29
- }
30
-
31
- describe("handleApiRequest", () => {
32
- let storage: StorageManager;
33
- let sse: ApiSse;
34
- let logger: Logger;
35
-
36
- beforeEach(() => {
37
- storage = new StorageManager();
38
- sse = new ApiSse(new Logger({ context: "SSETest" }));
39
- logger = new Logger({ context: "ApiTest" });
40
-
41
- jest.spyOn(ApiController, "listEvents").mockResolvedValue(undefined);
42
- jest.spyOn(ApiController, "getEvent").mockResolvedValue(undefined);
43
- jest.spyOn(ApiController, "deleteAll").mockResolvedValue(undefined);
44
- jest.spyOn(ApiController, "deleteOne").mockResolvedValue(undefined);
45
- jest.spyOn(ApiController, "stats").mockResolvedValue(undefined);
46
-
47
- jest.spyOn(sse, "handle").mockReturnValue(undefined as any);
48
- });
49
-
50
- it("route GET /events → ApiController.listEvents", async () => {
51
- const req = mockReq("GET", "/events");
52
- const res = mockRes();
53
-
54
- await expect(
55
- handleApiRequest(req, res, storage, sse, logger),
56
- ).resolves.toBeUndefined();
57
-
58
- expect(ApiController.listEvents).toHaveBeenCalled();
59
- });
60
-
61
- it("route GET /events/:id → ApiController.getEvent", async () => {
62
- const req = mockReq("GET", "/events/123");
63
- const res = mockRes();
64
-
65
- await expect(
66
- handleApiRequest(req, res, storage, sse, logger),
67
- ).resolves.toBeUndefined();
68
-
69
- expect(ApiController.getEvent).toHaveBeenCalledWith("123", res, storage);
70
- });
71
-
72
- it("route DELETE /events → ApiController.deleteAll", async () => {
73
- const req = mockReq("DELETE", "/events");
74
- const res = mockRes();
75
-
76
- await expect(
77
- handleApiRequest(req, res, storage, sse, logger),
78
- ).resolves.toBeUndefined();
79
-
80
- expect(ApiController.deleteAll).toHaveBeenCalled();
81
- });
82
-
83
- it("route DELETE /events/:id → ApiController.deleteOne", async () => {
84
- const req = mockReq("DELETE", "/events/abc");
85
- const res = mockRes();
86
-
87
- await expect(
88
- handleApiRequest(req, res, storage, sse, logger),
89
- ).resolves.toBeUndefined();
90
-
91
- expect(ApiController.deleteOne).toHaveBeenCalledWith("abc", res, storage);
92
- });
93
-
94
- it("route GET /stats → ApiController.stats", async () => {
95
- const req = mockReq("GET", "/stats");
96
- const res = mockRes();
97
-
98
- await expect(
99
- handleApiRequest(req, res, storage, sse, logger),
100
- ).resolves.toBeUndefined();
101
-
102
- expect(ApiController.stats).toHaveBeenCalled();
103
- });
104
-
105
- it("route GET /events/stream → SSE", async () => {
106
- const req = mockReq("GET", "/events/stream");
107
- const res = mockRes();
108
-
109
- await expect(
110
- handleApiRequest(req, res, storage, sse, logger),
111
- ).resolves.toBeUndefined();
112
-
113
- expect(sse.handle).toHaveBeenCalledWith(res);
114
- });
115
-
116
- it("404 → renvoie Not found", async () => {
117
- const req = mockReq("GET", "/unknown");
118
- const res = mockRes();
119
-
120
- await expect(
121
- handleApiRequest(req, res, storage, sse, logger),
122
- ).resolves.toBeUndefined();
123
-
124
- expect(res.writeHead).toHaveBeenCalledWith(404, {
125
- "Content-Type": "application/json",
126
- });
127
-
128
- const raw = String((res.end as jest.Mock).mock.calls[0][0]);
129
- const body = JSON.parse(raw);
130
- expect(body.success).toBe(false);
131
- });
132
-
133
- it("500 → renvoie Internal Server Error", async () => {
134
- const req = mockReq("GET", "/events");
135
-
136
- jest
137
- .spyOn(ApiController, "listEvents")
138
- .mockRejectedValue(new Error("Boom"));
139
-
140
- const res = mockRes();
141
-
142
- await expect(
143
- handleApiRequest(req, res, storage, sse, logger),
144
- ).resolves.toBeUndefined();
145
-
146
- expect(res.writeHead).toHaveBeenCalledWith(500, {
147
- "Content-Type": "application/json",
148
- });
149
-
150
- const raw = String((res.end as jest.Mock).mock.calls[0][0]);
151
- const body = JSON.parse(raw);
152
- expect(body.success).toBe(false);
153
- expect(body.error).toBe("Boom");
154
- });
155
- });
1
+ import { handleApiRequest } from "../api.routes";
2
+ import { StorageManager } from "../../../core/storage";
3
+ import { ApiSse } from "../api.sse";
4
+ import { ApiController } from "../api.controllers";
5
+ import { Logger } from "../../../core/logger";
6
+ import { IncomingMessage, ServerResponse } from "http";
7
+ import { Socket } from "net";
8
+ import { describe, it, expect, beforeEach, jest } from "@jest/globals";
9
+
10
+ // Helpers pour mocker req/res
11
+ function mockReq(method: string, url: string): IncomingMessage {
12
+ const socket = new Socket();
13
+ const req = new IncomingMessage(socket);
14
+ req.method = method;
15
+ req.url = url;
16
+ req.headers = { host: "localhost" };
17
+ return req;
18
+ }
19
+
20
+ function mockRes(): ServerResponse {
21
+ const socket = new Socket();
22
+ const req = new IncomingMessage(socket);
23
+ const res = new ServerResponse(req);
24
+
25
+ jest.spyOn(res, "writeHead");
26
+ jest.spyOn(res, "end");
27
+
28
+ return res;
29
+ }
30
+
31
+ describe("handleApiRequest", () => {
32
+ let storage: StorageManager;
33
+ let sse: ApiSse;
34
+ let logger: Logger;
35
+
36
+ beforeEach(() => {
37
+ storage = new StorageManager();
38
+ sse = new ApiSse(new Logger({ context: "SSETest" }));
39
+ logger = new Logger({ context: "ApiTest" });
40
+
41
+ jest.spyOn(ApiController, "listEvents").mockResolvedValue(undefined);
42
+ jest.spyOn(ApiController, "getEvent").mockResolvedValue(undefined);
43
+ jest.spyOn(ApiController, "deleteAll").mockResolvedValue(undefined);
44
+ jest.spyOn(ApiController, "deleteOne").mockResolvedValue(undefined);
45
+ jest.spyOn(ApiController, "stats").mockResolvedValue(undefined);
46
+
47
+ jest.spyOn(sse, "handle").mockReturnValue(undefined as any);
48
+ });
49
+
50
+ it("route GET /events → ApiController.listEvents", async () => {
51
+ const req = mockReq("GET", "/events");
52
+ const res = mockRes();
53
+
54
+ await expect(
55
+ handleApiRequest(req, res, storage, sse, logger),
56
+ ).resolves.toBeUndefined();
57
+
58
+ expect(ApiController.listEvents).toHaveBeenCalled();
59
+ });
60
+
61
+ it("route GET /events/:id → ApiController.getEvent", async () => {
62
+ const req = mockReq("GET", "/events/123");
63
+ const res = mockRes();
64
+
65
+ await expect(
66
+ handleApiRequest(req, res, storage, sse, logger),
67
+ ).resolves.toBeUndefined();
68
+
69
+ expect(ApiController.getEvent).toHaveBeenCalledWith("123", res, storage);
70
+ });
71
+
72
+ it("route DELETE /events → ApiController.deleteAll", async () => {
73
+ const req = mockReq("DELETE", "/events");
74
+ const res = mockRes();
75
+
76
+ await expect(
77
+ handleApiRequest(req, res, storage, sse, logger),
78
+ ).resolves.toBeUndefined();
79
+
80
+ expect(ApiController.deleteAll).toHaveBeenCalled();
81
+ });
82
+
83
+ it("route DELETE /events/:id → ApiController.deleteOne", async () => {
84
+ const req = mockReq("DELETE", "/events/abc");
85
+ const res = mockRes();
86
+
87
+ await expect(
88
+ handleApiRequest(req, res, storage, sse, logger),
89
+ ).resolves.toBeUndefined();
90
+
91
+ expect(ApiController.deleteOne).toHaveBeenCalledWith("abc", res, storage);
92
+ });
93
+
94
+ it("route GET /stats → ApiController.stats", async () => {
95
+ const req = mockReq("GET", "/stats");
96
+ const res = mockRes();
97
+
98
+ await expect(
99
+ handleApiRequest(req, res, storage, sse, logger),
100
+ ).resolves.toBeUndefined();
101
+
102
+ expect(ApiController.stats).toHaveBeenCalled();
103
+ });
104
+
105
+ it("route GET /events/stream → SSE", async () => {
106
+ const req = mockReq("GET", "/events/stream");
107
+ const res = mockRes();
108
+
109
+ await expect(
110
+ handleApiRequest(req, res, storage, sse, logger),
111
+ ).resolves.toBeUndefined();
112
+
113
+ expect(sse.handle).toHaveBeenCalledWith(res);
114
+ });
115
+
116
+ it("404 → renvoie Not found", async () => {
117
+ const req = mockReq("GET", "/unknown");
118
+ const res = mockRes();
119
+
120
+ await expect(
121
+ handleApiRequest(req, res, storage, sse, logger),
122
+ ).resolves.toBeUndefined();
123
+
124
+ expect(res.writeHead).toHaveBeenCalledWith(404, {
125
+ "Content-Type": "application/json",
126
+ });
127
+
128
+ const raw = String((res.end as jest.Mock).mock.calls[0][0]);
129
+ const body = JSON.parse(raw);
130
+ expect(body.success).toBe(false);
131
+ });
132
+
133
+ it("500 → renvoie Internal Server Error", async () => {
134
+ const req = mockReq("GET", "/events");
135
+
136
+ jest
137
+ .spyOn(ApiController, "listEvents")
138
+ .mockRejectedValue(new Error("Boom"));
139
+
140
+ const res = mockRes();
141
+
142
+ await expect(
143
+ handleApiRequest(req, res, storage, sse, logger),
144
+ ).resolves.toBeUndefined();
145
+
146
+ expect(res.writeHead).toHaveBeenCalledWith(500, {
147
+ "Content-Type": "application/json",
148
+ });
149
+
150
+ const raw = String((res.end as jest.Mock).mock.calls[0][0]);
151
+ const body = JSON.parse(raw);
152
+ expect(body.success).toBe(false);
153
+ expect(body.error).toBe("Boom");
154
+ });
155
+ });