@j3r3mcdev/oast-server 1.1.5 → 1.1.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/.github/workflows/ci.yml +29 -29
  2. package/.github/workflows/publish.yml +31 -31
  3. package/README.md +192 -192
  4. package/jest.config.js +14 -14
  5. package/package.json +45 -45
  6. package/sadmin list shadows +9 -9
  7. package/src/api/controllers/__tests__/tasks.controller.test.ts +74 -74
  8. package/src/api/controllers/events.controller.ts +10 -10
  9. package/src/api/controllers/health.controller.ts +7 -7
  10. package/src/api/controllers/tasks.controller.ts +41 -41
  11. package/src/api/dto/__tests__/create-task.dto.test.ts +41 -41
  12. package/src/api/dto/__tests__/filter-tasks.dto.test.ts +35 -35
  13. package/src/api/dto/create-task.dto.ts +33 -33
  14. package/src/api/dto/filter-tasks.dto.ts +33 -33
  15. package/src/api/services/__tests__/events.service.test.ts +41 -41
  16. package/src/api/services/__tests__/tasks.service.test.ts +41 -41
  17. package/src/api/services/events.service.ts +17 -17
  18. package/src/api/services/tasks.service.ts +79 -79
  19. package/src/api/sse/events.stream.ts +90 -90
  20. package/src/bootstrap.ts +89 -89
  21. package/src/core/__tests__/core-router.test.ts +30 -30
  22. package/src/core/__tests__/core-server.test.ts +44 -44
  23. package/src/core/__tests__/event.normalizer.test.ts +56 -56
  24. package/src/core/__tests__/event.router.test.ts +89 -89
  25. package/src/core/__tests__/logger.test.ts +32 -32
  26. package/src/core/__tests__/storage-manager.test.ts +74 -74
  27. package/src/core/event.normalizer.ts +147 -147
  28. package/src/core/event.router.ts +13 -13
  29. package/src/core/http/__tests__/adapter-node.test.ts +52 -52
  30. package/src/core/http/__tests__/body-parser-multipart.test.ts +41 -41
  31. package/src/core/http/__tests__/body-parser-raw.test.ts +28 -28
  32. package/src/core/http/__tests__/body-parser-text.test.ts +28 -28
  33. package/src/core/http/__tests__/compile-path.test.ts +39 -39
  34. package/src/core/http/__tests__/middleware-pipeline.test.ts +51 -51
  35. package/src/core/http/__tests__/request.test.ts +34 -34
  36. package/src/core/http/__tests__/response.test.ts +35 -35
  37. package/src/core/http/__tests__/router-match.test.ts +171 -171
  38. package/src/core/http/adapter-node.ts +51 -51
  39. package/src/core/http/buildRequest.ts +18 -18
  40. package/src/core/http/compile-path.ts +32 -32
  41. package/src/core/http/errors.ts +37 -37
  42. package/src/core/http/http-server.ts +52 -52
  43. package/src/core/http/middleware.ts +160 -160
  44. package/src/core/http/request.ts +55 -55
  45. package/src/core/http/response.ts +93 -93
  46. package/src/core/http/router.ts +138 -138
  47. package/src/core/id-generator.ts +8 -8
  48. package/src/core/logger.ts +113 -113
  49. package/src/core/router.ts +44 -44
  50. package/src/core/server.ts +85 -85
  51. package/src/core/storage.ts +64 -64
  52. package/src/index.ts +14 -14
  53. package/src/listeners/api/__tests__/api.controller.test.ts +116 -116
  54. package/src/listeners/api/__tests__/api.extractor.test.ts +46 -46
  55. package/src/listeners/api/__tests__/api.listener.test.ts +82 -82
  56. package/src/listeners/api/__tests__/api.routes.test.ts +155 -155
  57. package/src/listeners/api/__tests__/api.sse.test.ts +105 -105
  58. package/src/listeners/api/api.controllers.ts +67 -67
  59. package/src/listeners/api/api.extractor.ts +43 -43
  60. package/src/listeners/api/api.listener.ts +50 -50
  61. package/src/listeners/api/api.routes.ts +76 -76
  62. package/src/listeners/api/api.sse.ts +38 -38
  63. package/src/listeners/dns/__tests__/dns.test.ts +118 -118
  64. package/src/listeners/dns/dns.extractor.ts +14 -14
  65. package/src/listeners/dns/dns.listener.ts +61 -61
  66. package/src/listeners/http/__tests__/http.extractor.test.ts +59 -59
  67. package/src/listeners/http/__tests__/http.listener.test.ts +133 -133
  68. package/src/listeners/http/http.extractor.ts +15 -15
  69. package/src/listeners/http/http.listener.ts +110 -110
  70. package/src/listeners/listener.interface.ts +4 -4
  71. package/src/listeners/smtp/__tests__/smtp.extractor.test.ts +69 -69
  72. package/src/listeners/smtp/__tests__/smtp.listener.test.ts +150 -150
  73. package/src/listeners/smtp/smtp.extractor.ts +18 -18
  74. package/src/listeners/smtp/smtp.listener.ts +60 -60
  75. package/src/listeners/ssrf/__tests__/ssrf.extractor.test.ts +41 -41
  76. package/src/listeners/ssrf/__tests__/ssrf.listener.test.ts +87 -87
  77. package/src/listeners/ssrf/ssrf.extractor.ts +14 -14
  78. package/src/listeners/ssrf/ssrf.listener.ts +37 -37
  79. package/src/listeners/tcp/tcp.extractor.ts +16 -16
  80. package/src/listeners/tcp/tcp.listener.ts +61 -61
  81. package/src/listeners/webhook/__tests__/webhook.extractor.test.ts +35 -35
  82. package/src/listeners/webhook/__tests__/webhook.listener.test.ts +122 -122
  83. package/src/listeners/webhook/webhook.extractor.ts +12 -12
  84. package/src/listeners/webhook/webhook.listener.ts +58 -58
  85. package/src/listeners/websocket/__tests__/websocket.extractor.test.ts +33 -33
  86. package/src/listeners/websocket/__tests__/websocket.listener.test.ts +90 -90
  87. package/src/listeners/websocket/websocket.extractor.ts +11 -11
  88. package/src/listeners/websocket/websocket.listener.ts +40 -40
  89. package/src/storage-adapters/adapters/__tests__/memory.storage.test.ts +75 -75
  90. package/src/storage-adapters/adapters/memory.storage.ts +64 -64
  91. package/src/storage-adapters/storage.interface.ts +26 -26
  92. package/src/types/event.types.ts +147 -147
  93. package/tsconfig.json +20 -21
@@ -1,105 +1,105 @@
1
- import { ApiSse } from "../api.sse";
2
- import { Logger } from "../../../core/logger";
3
- import { ServerResponse, IncomingMessage } from "http";
4
- import { Socket } from "net";
5
- import { describe, it, expect, jest } from "@jest/globals";
6
-
7
- function mockRes(): ServerResponse {
8
- const socket = new Socket();
9
- const req = new IncomingMessage(socket);
10
- const res = new ServerResponse(req);
11
- return res;
12
- }
13
-
14
- describe("ApiSse", () => {
15
- it("connecte un client SSE", () => {
16
- const sse = new ApiSse(new Logger({ context: "Test" }));
17
- const res = mockRes();
18
-
19
- // On espionne writeHead et write
20
- const writeHeadSpy = jest.spyOn(res, "writeHead");
21
- const writeSpy = jest.spyOn(res, "write");
22
-
23
- sse.handle(res);
24
-
25
- expect(writeHeadSpy).toHaveBeenCalledWith(200, {
26
- "Content-Type": "text/event-stream",
27
- "Cache-Control": "no-cache",
28
- Connection: "keep-alive",
29
- });
30
-
31
- expect(writeSpy).toHaveBeenCalled();
32
- });
33
-
34
- it("broadcast un event à tous les clients", () => {
35
- const sse = new ApiSse(new Logger({ context: "Test" }));
36
-
37
- const res1 = mockRes();
38
- const res2 = mockRes();
39
-
40
- const spy1 = jest.spyOn(res1, "write");
41
- const spy2 = jest.spyOn(res2, "write");
42
-
43
- sse.handle(res1);
44
- sse.handle(res2);
45
-
46
- sse.broadcast({ id: "123", type: "http" });
47
-
48
- expect(spy1).toHaveBeenCalled();
49
- expect(spy2).toHaveBeenCalled();
50
-
51
- const payload = spy1.mock.calls[spy1.mock.calls.length - 1][0];
52
- expect(payload).toContain("event: event");
53
- expect(payload).toContain('"id":"123"');
54
- });
55
-
56
- it("supprime un client à la fermeture", () => {
57
- const sse = new ApiSse(new Logger({ context: "Test" }));
58
- const res = mockRes();
59
-
60
- sse.handle(res);
61
-
62
- expect((sse as any).clients.size).toBe(1);
63
-
64
- res.emit("close");
65
-
66
- expect((sse as any).clients.size).toBe(0);
67
- });
68
-
69
- it("envoie un event SSE avec le bon format", () => {
70
- const sse = new ApiSse(new Logger({ context: "Test" }));
71
- const res = mockRes();
72
-
73
- const spy = jest.spyOn(res, "write");
74
-
75
- sse.handle(res);
76
- sse.broadcast({ id: "abc", type: "dns" });
77
-
78
- const payload = spy.mock.calls[spy.mock.calls.length - 1][0];
79
-
80
- expect(payload).toContain("event: event");
81
- expect(payload).toContain("data:");
82
- expect(payload).toContain('"id":"abc"');
83
- expect(payload.endsWith("\n\n")).toBe(true);
84
- });
85
-
86
- it("broadcast ne plante pas s'il n'y a aucun client", () => {
87
- const sse = new ApiSse(new Logger({ context: "Test" }));
88
-
89
- expect(() => {
90
- sse.broadcast({ id: "x", type: "http" });
91
- }).not.toThrow();
92
- });
93
-
94
- it("ne duplique pas un client déjà enregistré", () => {
95
- const sse = new ApiSse(new Logger({ context: "Test" }));
96
- const res = mockRes();
97
-
98
- sse.handle(res);
99
-
100
- // simulate duplicate registration attempt
101
- (sse as any).clients.add(res);
102
-
103
- expect((sse as any).clients.size).toBe(1);
104
- });
105
- });
1
+ import { ApiSse } from "../api.sse";
2
+ import { Logger } from "../../../core/logger";
3
+ import { ServerResponse, IncomingMessage } from "http";
4
+ import { Socket } from "net";
5
+ import { describe, it, expect, jest } from "@jest/globals";
6
+
7
+ function mockRes(): ServerResponse {
8
+ const socket = new Socket();
9
+ const req = new IncomingMessage(socket);
10
+ const res = new ServerResponse(req);
11
+ return res;
12
+ }
13
+
14
+ describe("ApiSse", () => {
15
+ it("connecte un client SSE", () => {
16
+ const sse = new ApiSse(new Logger({ context: "Test" }));
17
+ const res = mockRes();
18
+
19
+ // On espionne writeHead et write
20
+ const writeHeadSpy = jest.spyOn(res, "writeHead");
21
+ const writeSpy = jest.spyOn(res, "write");
22
+
23
+ sse.handle(res);
24
+
25
+ expect(writeHeadSpy).toHaveBeenCalledWith(200, {
26
+ "Content-Type": "text/event-stream",
27
+ "Cache-Control": "no-cache",
28
+ Connection: "keep-alive",
29
+ });
30
+
31
+ expect(writeSpy).toHaveBeenCalled();
32
+ });
33
+
34
+ it("broadcast un event à tous les clients", () => {
35
+ const sse = new ApiSse(new Logger({ context: "Test" }));
36
+
37
+ const res1 = mockRes();
38
+ const res2 = mockRes();
39
+
40
+ const spy1 = jest.spyOn(res1, "write");
41
+ const spy2 = jest.spyOn(res2, "write");
42
+
43
+ sse.handle(res1);
44
+ sse.handle(res2);
45
+
46
+ sse.broadcast({ id: "123", type: "http" });
47
+
48
+ expect(spy1).toHaveBeenCalled();
49
+ expect(spy2).toHaveBeenCalled();
50
+
51
+ const payload = spy1.mock.calls[spy1.mock.calls.length - 1][0];
52
+ expect(payload).toContain("event: event");
53
+ expect(payload).toContain('"id":"123"');
54
+ });
55
+
56
+ it("supprime un client à la fermeture", () => {
57
+ const sse = new ApiSse(new Logger({ context: "Test" }));
58
+ const res = mockRes();
59
+
60
+ sse.handle(res);
61
+
62
+ expect((sse as any).clients.size).toBe(1);
63
+
64
+ res.emit("close");
65
+
66
+ expect((sse as any).clients.size).toBe(0);
67
+ });
68
+
69
+ it("envoie un event SSE avec le bon format", () => {
70
+ const sse = new ApiSse(new Logger({ context: "Test" }));
71
+ const res = mockRes();
72
+
73
+ const spy = jest.spyOn(res, "write");
74
+
75
+ sse.handle(res);
76
+ sse.broadcast({ id: "abc", type: "dns" });
77
+
78
+ const payload = spy.mock.calls[spy.mock.calls.length - 1][0];
79
+
80
+ expect(payload).toContain("event: event");
81
+ expect(payload).toContain("data:");
82
+ expect(payload).toContain('"id":"abc"');
83
+ expect(payload.endsWith("\n\n")).toBe(true);
84
+ });
85
+
86
+ it("broadcast ne plante pas s'il n'y a aucun client", () => {
87
+ const sse = new ApiSse(new Logger({ context: "Test" }));
88
+
89
+ expect(() => {
90
+ sse.broadcast({ id: "x", type: "http" });
91
+ }).not.toThrow();
92
+ });
93
+
94
+ it("ne duplique pas un client déjà enregistré", () => {
95
+ const sse = new ApiSse(new Logger({ context: "Test" }));
96
+ const res = mockRes();
97
+
98
+ sse.handle(res);
99
+
100
+ // simulate duplicate registration attempt
101
+ (sse as any).clients.add(res);
102
+
103
+ expect((sse as any).clients.size).toBe(1);
104
+ });
105
+ });
@@ -1,67 +1,67 @@
1
- import { ServerResponse } from "http";
2
- import { StorageManager } from "../../core/storage";
3
-
4
- export class ApiController {
5
- static async listEvents(
6
- url: URL,
7
- res: ServerResponse,
8
- storage: StorageManager,
9
- ): Promise<void> {
10
- const type = url.searchParams.get("type") ?? undefined;
11
- const page = Number(url.searchParams.get("page") ?? 1);
12
- const limit = Number(url.searchParams.get("limit") ?? 50);
13
-
14
- const events = await storage.listEvents({ type, page, limit });
15
-
16
- res.writeHead(200, { "Content-Type": "application/json" });
17
- res.end(JSON.stringify({ success: true, events }));
18
- }
19
-
20
- static async getEvent(
21
- id: string,
22
- res: ServerResponse,
23
- storage: StorageManager,
24
- ): Promise<void> {
25
- const event = await storage.getEvent(id);
26
-
27
- if (!event) {
28
- res.writeHead(404, { "Content-Type": "application/json" });
29
- res.end(JSON.stringify({ success: false, error: "Not found" }));
30
- return;
31
- }
32
-
33
- res.writeHead(200, { "Content-Type": "application/json" });
34
- res.end(JSON.stringify({ success: true, event }));
35
- }
36
-
37
- static async deleteAll(
38
- res: ServerResponse,
39
- storage: StorageManager,
40
- ): Promise<void> {
41
- await storage.clearEvents();
42
-
43
- res.writeHead(200, { "Content-Type": "application/json" });
44
- res.end(JSON.stringify({ success: true }));
45
- }
46
-
47
- static async deleteOne(
48
- id: string,
49
- res: ServerResponse,
50
- storage: StorageManager,
51
- ): Promise<void> {
52
- const ok = await storage.deleteEvent(id);
53
-
54
- res.writeHead(200, { "Content-Type": "application/json" });
55
- res.end(JSON.stringify({ success: ok }));
56
- }
57
-
58
- static async stats(
59
- res: ServerResponse,
60
- storage: StorageManager,
61
- ): Promise<void> {
62
- const stats = await storage.getStats();
63
-
64
- res.writeHead(200, { "Content-Type": "application/json" });
65
- res.end(JSON.stringify({ success: true, stats }));
66
- }
67
- }
1
+ import { ServerResponse } from "http";
2
+ import { StorageManager } from "../../core/storage";
3
+
4
+ export class ApiController {
5
+ static async listEvents(
6
+ url: URL,
7
+ res: ServerResponse,
8
+ storage: StorageManager,
9
+ ): Promise<void> {
10
+ const type = url.searchParams.get("type") ?? undefined;
11
+ const page = Number(url.searchParams.get("page") ?? 1);
12
+ const limit = Number(url.searchParams.get("limit") ?? 50);
13
+
14
+ const events = await storage.listEvents({ type, page, limit });
15
+
16
+ res.writeHead(200, { "Content-Type": "application/json" });
17
+ res.end(JSON.stringify({ success: true, events }));
18
+ }
19
+
20
+ static async getEvent(
21
+ id: string,
22
+ res: ServerResponse,
23
+ storage: StorageManager,
24
+ ): Promise<void> {
25
+ const event = await storage.getEvent(id);
26
+
27
+ if (!event) {
28
+ res.writeHead(404, { "Content-Type": "application/json" });
29
+ res.end(JSON.stringify({ success: false, error: "Not found" }));
30
+ return;
31
+ }
32
+
33
+ res.writeHead(200, { "Content-Type": "application/json" });
34
+ res.end(JSON.stringify({ success: true, event }));
35
+ }
36
+
37
+ static async deleteAll(
38
+ res: ServerResponse,
39
+ storage: StorageManager,
40
+ ): Promise<void> {
41
+ await storage.clearEvents();
42
+
43
+ res.writeHead(200, { "Content-Type": "application/json" });
44
+ res.end(JSON.stringify({ success: true }));
45
+ }
46
+
47
+ static async deleteOne(
48
+ id: string,
49
+ res: ServerResponse,
50
+ storage: StorageManager,
51
+ ): Promise<void> {
52
+ const ok = await storage.deleteEvent(id);
53
+
54
+ res.writeHead(200, { "Content-Type": "application/json" });
55
+ res.end(JSON.stringify({ success: ok }));
56
+ }
57
+
58
+ static async stats(
59
+ res: ServerResponse,
60
+ storage: StorageManager,
61
+ ): Promise<void> {
62
+ const stats = await storage.getStats();
63
+
64
+ res.writeHead(200, { "Content-Type": "application/json" });
65
+ res.end(JSON.stringify({ success: true, stats }));
66
+ }
67
+ }
@@ -1,43 +1,43 @@
1
- import { IncomingMessage } from "http";
2
- import { RawEvent } from "../../types/event.types";
3
-
4
- export class ApiExtractor {
5
- static async extract(req: IncomingMessage): Promise<RawEvent> {
6
- const ip = req.socket.remoteAddress ?? "";
7
- const method = req.method ?? "";
8
- const url = new URL(req.url ?? "", `http://${req.headers.host}`);
9
- const path = url.pathname;
10
-
11
- const query: Record<string, string> = {};
12
- for (const [key, value] of url.searchParams.entries()) {
13
- query[key] = value;
14
- }
15
-
16
- // Lecture du body (si POST/PUT/PATCH)
17
- let body: any = null;
18
-
19
- if (method !== "GET" && method !== "HEAD") {
20
- body = await new Promise((resolve) => {
21
- let data = "";
22
- req.on("data", (chunk) => (data += chunk));
23
- req.on("end", () => {
24
- try {
25
- resolve(JSON.parse(data));
26
- } catch {
27
- resolve(data);
28
- }
29
- });
30
- });
31
- }
32
-
33
- return {
34
- ip,
35
- method,
36
- path,
37
- headers: req.headers,
38
- query,
39
- body,
40
- raw: req,
41
- };
42
- }
43
- }
1
+ import { IncomingMessage } from "http";
2
+ import { RawEvent } from "../../types/event.types";
3
+
4
+ export class ApiExtractor {
5
+ static async extract(req: IncomingMessage): Promise<RawEvent> {
6
+ const ip = req.socket.remoteAddress ?? "";
7
+ const method = req.method ?? "";
8
+ const url = new URL(req.url ?? "", `http://${req.headers.host}`);
9
+ const path = url.pathname;
10
+
11
+ const query: Record<string, string> = {};
12
+ for (const [key, value] of url.searchParams.entries()) {
13
+ query[key] = value;
14
+ }
15
+
16
+ // Lecture du body (si POST/PUT/PATCH)
17
+ let body: any = null;
18
+
19
+ if (method !== "GET" && method !== "HEAD") {
20
+ body = await new Promise((resolve) => {
21
+ let data = "";
22
+ req.on("data", (chunk) => (data += chunk));
23
+ req.on("end", () => {
24
+ try {
25
+ resolve(JSON.parse(data));
26
+ } catch {
27
+ resolve(data);
28
+ }
29
+ });
30
+ });
31
+ }
32
+
33
+ return {
34
+ ip,
35
+ method,
36
+ path,
37
+ headers: req.headers,
38
+ query,
39
+ body,
40
+ raw: req,
41
+ };
42
+ }
43
+ }
@@ -1,50 +1,50 @@
1
- import { createServer, IncomingMessage, Server, ServerResponse } from "http";
2
- import { Logger } from "../../core/logger";
3
- import { StorageManager } from "../../core/storage";
4
- import { handleApiRequest } from "./api.routes";
5
- import { ApiSse } from "./api.sse";
6
-
7
- export interface ApiListenerOptions {
8
- port: number;
9
- logger?: Logger;
10
- }
11
-
12
- export class ApiListener {
13
- private logger: Logger;
14
- private server: Server | null = null;
15
- private sse: ApiSse;
16
-
17
- constructor(
18
- private storage: StorageManager,
19
- private options: ApiListenerOptions,
20
- ) {
21
- this.logger = options.logger ?? new Logger({ context: "ApiListener" });
22
- this.sse = new ApiSse(this.logger);
23
- }
24
-
25
- async start() {
26
- this.server = createServer((req: IncomingMessage, res: ServerResponse) => {
27
- void handleApiRequest(req, res, this.storage, this.sse, this.logger);
28
- });
29
-
30
- this.server.listen(this.options.port, () => {
31
- this.logger.info(`API Listener started on port ${this.options.port}`);
32
- });
33
- }
34
-
35
- async stop() {
36
- this.sse.closeAll();
37
-
38
- if (this.server) {
39
- this.server.close();
40
- this.server = null;
41
- }
42
-
43
- this.logger.info("API Listener stopped");
44
- }
45
-
46
- // Méthode appelée par ton CoreRouter / CoreServer après chaque event
47
- public broadcastEvent(event: any) {
48
- this.sse.broadcast(event);
49
- }
50
- }
1
+ import { createServer, IncomingMessage, Server, ServerResponse } from "http";
2
+ import { Logger } from "../../core/logger";
3
+ import { StorageManager } from "../../core/storage";
4
+ import { handleApiRequest } from "./api.routes";
5
+ import { ApiSse } from "./api.sse";
6
+
7
+ export interface ApiListenerOptions {
8
+ port: number;
9
+ logger?: Logger;
10
+ }
11
+
12
+ export class ApiListener {
13
+ private logger: Logger;
14
+ private server: Server | null = null;
15
+ private sse: ApiSse;
16
+
17
+ constructor(
18
+ private storage: StorageManager,
19
+ private options: ApiListenerOptions,
20
+ ) {
21
+ this.logger = options.logger ?? new Logger({ context: "ApiListener" });
22
+ this.sse = new ApiSse(this.logger);
23
+ }
24
+
25
+ async start() {
26
+ this.server = createServer((req: IncomingMessage, res: ServerResponse) => {
27
+ void handleApiRequest(req, res, this.storage, this.sse, this.logger);
28
+ });
29
+
30
+ this.server.listen(this.options.port, () => {
31
+ this.logger.info(`API Listener started on port ${this.options.port}`);
32
+ });
33
+ }
34
+
35
+ async stop() {
36
+ this.sse.closeAll();
37
+
38
+ if (this.server) {
39
+ this.server.close();
40
+ this.server = null;
41
+ }
42
+
43
+ this.logger.info("API Listener stopped");
44
+ }
45
+
46
+ // Méthode appelée par ton CoreRouter / CoreServer après chaque event
47
+ public broadcastEvent(event: any) {
48
+ this.sse.broadcast(event);
49
+ }
50
+ }