@middy/http-router 7.2.2 → 7.3.0

package/index.d.ts

@@ -51,4 +51,8 @@ declare function httpRouterHandler<
 		  },
 ): middy.MiddyfiedHandler<TEvent, TResult>;
 
+export declare function httpRouterValidateOptions(
+	options?: Record<string, unknown>,
+): void;
+
 export default httpRouterHandler;

package/index.js

@@ -1,6 +1,6 @@
 // Copyright 2017 - 2026 will Farrell, Luciano Mammino, and Middy contributors.
 // SPDX-License-Identifier: MIT
-import { createError } from "@middy/util";
+import { createError, validateOptions } from "@middy/util";
 
 const defaults = {
 	routes: [],
@@ -12,6 +12,14 @@ const defaults = {
 	},
 };
 
+const optionSchema = {
+	routes: "array?",
+	notFoundResponse: "function?",
+};
+
+export const httpRouterValidateOptions = (options) =>
+	validateOptions("@middy/http-router", optionSchema, options);
+
 const methods = ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"]; // ANY excluded by design
 
 const httpRouteHandler = (opts = {}) => {
@@ -54,14 +62,20 @@ const httpRouteHandler = (opts = {}) => {
 		const { method, path } = getVersionRoute[pickVersion(event)](event);
 
 		if (!method) {
-			throw new Error("Unknown HTTP event format", {
-				cause: { package: "@middy/http-router", data: { method } },
-			});
+			throw new Error(
+				"Unknown HTTP event format: missing HTTP method. Expected 'httpMethod' (v1), 'requestContext.http.method' (v2), or 'method' (VPC)",
+				{
+					cause: { package: "@middy/http-router", data: { method } },
+				},
+			);
 		}
 		if (!path) {
-			throw new Error("Unknown HTTP event format", {
-				cause: { package: "@middy/http-router", data: { path } },
-			});
+			throw new Error(
+				"Unknown HTTP event format: missing path. Expected 'path' (v1), 'requestContext.http.path' (v2), or 'raw_path' (VPC)",
+				{
+					cause: { package: "@middy/http-router", data: { path } },
+				},
+			);
 		}
 
 		// Static
@@ -90,8 +104,9 @@ const httpRouteHandler = (opts = {}) => {
 	return handler;
 };
 
-const regExpDynamicWildcards = /\/\{(proxy)\+\}$/;
-const regExpDynamicParameters = /\/\{([^/]+)\}/g;
+const regExpEscapeChars = /[.+?^${}()|[\]\\]/g;
+const regExpDynamicWildcards = /\/\\\{(proxy)\\\+\\\}$/;
+const regExpDynamicParameters = /\/\\\{([^/]+)\\\}/g;
 
 const attachStaticRoute = (method, path, handler, routesType) => {
 	if (method === "ANY") {
@@ -101,6 +116,7 @@ const attachStaticRoute = (method, path, handler, routesType) => {
 		return;
 	}
 	routesType[method] ??= {};
+	// TODO v8 when duplicates throw error
 	routesType[method][path] = handler;
 	routesType[method][`${path}/`] = handler; // Optional `/`
 };
@@ -114,6 +130,7 @@ const attachDynamicRoute = (method, path, handler, routesType) => {
 	}
 	routesType[method] ??= [];
 	const pathPartialRegExp = path
+		.replace(regExpEscapeChars, "\\$&")
 		.replace(regExpDynamicWildcards, "/?(?<$1>.*)")
 		.replace(regExpDynamicParameters, "/(?<$1>[^/]+)");
 	// SAST Skipped: Not accessible by users

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@middy/http-router",
-	"version": "7.2.2",
+	"version": "7.3.0",
 	"description": "HTTP event router for the middy framework",
 	"type": "module",
 	"engines": {
@@ -17,9 +17,6 @@
 			"import": {
 				"types": "./index.d.ts",
 				"default": "./index.js"
-			},
-			"require": {
-				"default": "./index.js"
 			}
 		}
 	},
@@ -65,10 +62,10 @@
 		"url": "https://github.com/sponsors/willfarrell"
 	},
 	"dependencies": {
-		"@middy/util": "7.2.2"
+		"@middy/util": "7.3.0"
 	},
 	"devDependencies": {
-		"@middy/core": "7.2.2",
+		"@middy/core": "7.3.0",
 		"@types/aws-lambda": "^8.0.0",
 		"@types/node": "^22.0.0"
 	}