@reldens/server-utils 0.33.0 → 0.34.0

package/README.md

@@ -9,6 +9,8 @@ A Node.js server toolkit providing secure application server creation, file hand
 ### AppServerFactory
 - Complete Express.js server configuration with modular security
 - HTTPS/HTTP server creation with SSL certificate management
+- HTTP/2 support via spdy with automatic HTTP/1.1 fallback
+- Optimized static asset caching for CSS, JS, fonts, and images
 - SNI (Server Name Indication) support for multi-domain hosting
 - Virtual host management with domain mapping
 - Development mode detection with appropriate configurations
@@ -99,6 +101,40 @@ if(serverResult){
 }
 ```
 
+### HTTP/2 Server with Optimized Caching
+
+```javascript
+let appServerFactory = new AppServerFactory();
+let serverResult = appServerFactory.createAppServer({
+    port: 443,
+    useHttps: true,
+    useHttp2: true,
+    keyPath: '/ssl/server.key',
+    certPath: '/ssl/server.crt',
+    autoListen: true
+});
+```
+
+Cache configuration is automatic with defaults:
+- CSS/JS: 1 year
+- Fonts: 1 year
+- Images: 30 days
+
+Override cache settings if needed:
+
+```javascript
+let appServerFactory = new AppServerFactory();
+appServerFactory.cacheConfig = {
+    '.css': 86400,
+    '.js': 86400,
+    '.png': 604800
+};
+let serverResult = appServerFactory.createAppServer({
+    useHttps: true,
+    useHttp2: true
+});
+```
+
 ### File Operations
 
 ```javascript
@@ -193,6 +229,7 @@ appServerFactory.addDomain({
 
 let serverResult = appServerFactory.createAppServer({
     useHttps: true,
+    useHttp2: true,
     useVirtualHosts: true,
     keyPath: '/ssl/default.key',
     certPath: '/ssl/default.crt',
@@ -328,6 +365,9 @@ Configurable rate limiting with development mode detection for appropriate thres
 ### HTTPS Support
 Full SSL/TLS support with SNI for multi-domain hosting and automatic certificate management.
 
+### HTTP/2 Support
+HTTP/2 support via spdy with multiplexing for improved performance and automatic HTTP/1.1 fallback for older clients.
+
 ### Input Validation
 Built-in validators for common input types including email, username, strong passwords, alphanumeric strings, and IP addresses.
 

package/lib/app-server-factory.js

@@ -12,6 +12,7 @@ const { CorsConfigurer } = require('./app-server-factory/cors-configurer');
 const { RateLimitConfigurer } = require('./app-server-factory/rate-limit-configurer');
 const http = require('http');
 const https = require('https');
+const spdy = require('spdy');
 const express = require('express');
 const bodyParser = require('body-parser');
 const session = require('express-session');
@@ -34,6 +35,7 @@ class AppServerFactory
         this.useUrlencoded = true;
         this.encoding = 'utf-8';
         this.useHttps = false;
+        this.useHttp2 = false;
         this.passphrase = '';
         this.httpsChain = '';
         this.keyPath = '';
@@ -61,15 +63,28 @@ class AppServerFactory
         this.defaultDomain = '';
         this.maxRequestSize = '10mb';
         this.sanitizeOptions = {allowedTags: [], allowedAttributes: {}};
+        this.cacheConfig = {
+            '.css': 31536000,
+            '.js': 31536000,
+            '.woff': 31536000,
+            '.woff2': 31536000,
+            '.ttf': 31536000,
+            '.eot': 31536000,
+            '.jpg': 2592000,
+            '.jpeg': 2592000,
+            '.png': 2592000,
+            '.gif': 2592000,
+            '.webp': 2592000,
+            '.svg': 2592000,
+            '.ico': 2592000
+        };
         this.staticOptions = {
             maxAge: '1d',
+            immutable: false,
             etag: true,
             lastModified: true,
             index: false,
-            setHeaders: function(res){
-                res.set('X-Content-Type-Options', 'nosniff');
-                res.set('X-Frame-Options', 'DENY');
-            }
+            setHeaders: this.buildStaticHeaders.bind(this)
         };
         this.isDevelopmentMode = false;
         this.developmentDomains = [];
@@ -98,6 +113,28 @@ class AppServerFactory
         };
     }
 
+    buildStaticHeaders(res, path)
+    {
+        res.set('X-Content-Type-Options', 'nosniff');
+        res.set('X-Frame-Options', 'DENY');
+        res.set('Vary', 'Accept-Encoding');
+        let cacheMaxAge = this.getCacheConfigForPath(path);
+        if(cacheMaxAge){
+            res.set('Cache-Control', 'public, max-age='+cacheMaxAge+', immutable');
+        }
+    }
+
+    getCacheConfigForPath(path)
+    {
+        let cacheKeys = Object.keys(this.cacheConfig);
+        for(let ext of cacheKeys){
+            if(path.endsWith(ext)){
+                return this.cacheConfig[ext];
+            }
+        }
+        return false;
+    }
+
     createAppServer(appServerConfig)
     {
         if(appServerConfig){
@@ -117,7 +154,7 @@ class AppServerFactory
         try {
             this.appServer = this.createServer();
         } catch (error) {
-            this.error = {message: 'Server creation exception: ' + error.message};
+            this.error = {message: 'Server creation exception: '+error.message};
             return false;
         }
         if(!this.appServer){
@@ -172,12 +209,14 @@ class AppServerFactory
         if(!this.isDevelopmentMode){
             return;
         }
-        this.staticOptions.setHeaders = (res) => {
+        this.staticOptions.immutable = false;
+        this.staticOptions.setHeaders = (res, path) => {
             res.set('X-Content-Type-Options', 'nosniff');
             res.set('X-Frame-Options', 'SAMEORIGIN');
             res.set('Cache-Control', 'no-cache, no-store, must-revalidate');
             res.set('Pragma', 'no-cache');
             res.set('Expires', '0');
+            res.set('Vary', 'Accept-Encoding');
         };
     }
 
@@ -313,7 +352,7 @@ class AppServerFactory
                     req.domain = this.defaultDomain;
                     return next();
                 }
-                this.error = {message: 'Unknown domain: ' + hostname};
+                this.error = {message: 'Unknown domain: '+hostname};
                 return res.status(404).send('Domain not found');
             }
             req.domain = domain;
@@ -343,6 +382,10 @@ class AppServerFactory
     createServer()
     {
         if(!this.useHttps){
+            if(this.useHttp2){
+                this.error = {message: 'HTTP/2 requires HTTPS to be enabled'};
+                return false;
+            }
             return http.createServer(this.app);
         }
         if(this.useVirtualHosts && 0 < this.domains.length){
@@ -355,12 +398,12 @@ class AppServerFactory
     {
         let key = FileHandler.readFile(this.keyPath, 'Key');
         if(!key){
-            this.error = {message: 'Could not read SSL key file: ' + this.keyPath};
+            this.error = {message: 'Could not read SSL key file: '+this.keyPath};
             return false;
         }
         let cert = FileHandler.readFile(this.certPath, 'Cert');
         if(!cert){
-            this.error = {message: 'Could not read SSL certificate file: ' + this.certPath};
+            this.error = {message: 'Could not read SSL certificate file: '+this.certPath};
             return false;
         }
         let credentials = {key, cert, passphrase: this.passphrase};
@@ -370,6 +413,10 @@ class AppServerFactory
                 credentials.ca = ca;
             }
         }
+        if(this.useHttp2){
+            credentials.spdy = {protocols: ['h2', 'http/1.1']};
+            return spdy.createServer(credentials, this.app);
+        }
         return https.createServer(credentials, this.app);
     }
 
@@ -398,6 +445,10 @@ class AppServerFactory
             let ctx = tls.createSecureContext({key, cert});
             callback(null, ctx);
         };
+        if(this.useHttp2){
+            httpsOptions.spdy = {protocols: ['h2', 'http/1.1']};
+            return spdy.createServer(httpsOptions, this.app);
+        }
         return https.createServer(httpsOptions, this.app);
     }
 

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@reldens/server-utils",
     "scope": "@reldens",
-    "version": "0.33.0",
+    "version": "0.34.0",
     "description": "Reldens - Server Utils",
     "author": "Damian A. Pastorini",
     "license": "MIT",
@@ -17,17 +17,18 @@
         "utils",
         "shortcuts",
         "system",
-        "game",
-        "mmorpg",
-        "rpg",
+        "server",
+        "http",
+        "https",
         "dwd",
-        "colyseus",
-        "phaser",
-        "parcel",
+        "http2",
+        "file",
+        "encrypt",
+        "uploader",
+        "upload",
+        "cors",
         "nodejs",
-        "mmo",
-        "multiplayer",
-        "rol",
+        "protocol",
         "platform",
         "framework"
     ],
@@ -43,6 +44,7 @@
         "express-session": "1.18.2",
         "helmet": "8.1.0",
         "multer": "2.0.2",
-        "sanitize-html": "2.17.0"
+        "sanitize-html": "2.17.0",
+        "spdy": "^4.0.2"
     }
 }