@morojs/moro 1.8.11 → 1.8.13

package/dist/core/http/http-server.js

@@ -1,3 +1,4 @@
+import { bodyIsText } from './utils/body-type.js';
 import { createRequire } from 'module';
 import { promisify } from 'util';
 import { randomUUID } from 'crypto';
@@ -115,6 +116,10 @@ export class MoroIncomingMessage extends http.IncomingMessage {
     body = null;
     path = '';
     _queryString = null;
+    /** The request body exactly as received, before any parsing; null when empty. */
+    get rawBody() {
+        return this._rawBody ?? null;
+    }
     // Single slot for every lazily-computed/assigned helper value (query,
     // cookies, requestId, hostname, ...). Allocated on first access - a plain
     // JSON GET that never touches the helpers never allocates it, and the
@@ -1562,6 +1567,8 @@ export class MoroHttpServer {
                     const body = chunks.length === 1 && firstChunk !== undefined
                         ? firstChunk
                         : Buffer.concat(chunks, totalLength);
+                    if (totalLength > 0)
+                        req._rawBody = body;
                     if (contentType.includes('application/json')) {
                         // Empty JSON body -> null (parity with the engine/uWS servers, and
                         // avoids JSON.parse('') throwing and 500ing an empty POST).
@@ -1574,7 +1581,9 @@ export class MoroHttpServer {
                         resolve(this.parseMultipart(body, contentType));
                     }
                     else {
-                        resolve(body.toString());
+                        // Text decodes to a string; binary (octet-stream, images, protobuf,
+                        // ...) stays a Buffer - decoding it would corrupt it irreversibly.
+                        resolve(bodyIsText(contentType) ? body.toString() : body);
                     }
                 }
                 catch (error) {
@@ -1788,6 +1797,17 @@ export class MoroHttpServer {
     forceCleanup() {
         this.forceCleanupPools();
     }
+    /**
+     * Replace the TLS certificate/key for new handshakes (node's
+     * tls.Server#setSecureContext). Throws when the server is plain HTTP.
+     */
+    updateSsl(ssl) {
+        const server = this.server;
+        if (typeof server.setSecureContext !== 'function') {
+            throw new Error('updateSsl: this server was not started with TLS (server.ssl)');
+        }
+        server.setSecureContext(ssl);
+    }
     getServer() {
         return this.server;
     }