@thymian/rules-rfc-9110 0.0.0-PLACEHOLDER

package/dist/rules/routing/upgrade/sender-must-send-upgrade-connection-option.rule.js

@@ -0,0 +1,20 @@
+import { and, getHeader, not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-send-upgrade-connection-option')
+    .severity('error')
+    .type('analytics', 'static')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A sender of Upgrade MUST also send an "Upgrade" connection option in the Connection header field to inform intermediaries not to forward this field. This ensures the Upgrade header is treated as a hop-by-hop header.')
+    .summary('Sender MUST include "Upgrade" in Connection header.')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(requestHeader('upgrade'), (req) => {
+    const connectionHeader = getHeader(req.headers, 'connection');
+    if (!connectionHeader) {
+        return true;
+    }
+    const connectionHeaderValues = Array.isArray(connectionHeader)
+        ? connectionHeader
+        : [connectionHeader];
+    return !connectionHeaderValues.find((value) => value.toLowerCase().trim() === 'upgrade');
+}))
+    .done();
+//# sourceMappingURL=sender-must-send-upgrade-connection-option.rule.js.map

package/dist/rules/routing/upgrade/sender-must-send-upgrade-connection-option.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-send-upgrade-connection-option.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/sender-must-send-upgrade-connection-option.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,oDAAoD,CAAC;KAC1E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;KAC3B,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,yNAAyN,CAC1N;KACA,OAAO,CAAC,qDAAqD,CAAC;KAC9D,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IAC7D,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC5D,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAEvB,OAAO,CAAC,sBAAsB,CAAC,IAAI,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,CACpD,CAAC;AACJ,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-may-ignore-client-protocol-preference-order.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-may-ignore-client-protocol-preference-order.rule.d.ts.map

package/dist/rules/routing/upgrade/server-may-ignore-client-protocol-preference-order.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-ignore-client-protocol-preference-order.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-may-ignore-client-protocol-preference-order.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/upgrade/server-may-ignore-client-protocol-preference-order.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-may-ignore-client-protocol-preference-order')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server MAY choose to ignore the order of preference indicated by the client and select the new protocol(s) based on other factors, such as the nature of the request or the current load on the server.')
+    .summary('Server MAY ignore client protocol preference order.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-may-ignore-client-protocol-preference-order.rule.js.map

package/dist/rules/routing/upgrade/server-may-ignore-client-protocol-preference-order.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-ignore-client-protocol-preference-order.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-may-ignore-client-protocol-preference-order.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4DAA4D,CAC7D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,2MAA2M,CAC5M;KACA,OAAO,CAAC,qDAAqD,CAAC;KAC9D,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-may-ignore-upgrade-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-may-ignore-upgrade-header.rule.d.ts.map

package/dist/rules/routing/upgrade/server-may-ignore-upgrade-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-ignore-upgrade-header.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-may-ignore-upgrade-header.rule.ts"],"names":[],"mappings":";AAEA,wBASU"}

package/dist/rules/routing/upgrade/server-may-ignore-upgrade-header.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-may-ignore-upgrade-header')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server MAY ignore a received Upgrade header field if it wishes to continue using the current protocol on that connection. Upgrade cannot be used to insist on a protocol change.')
+    .summary('Server MAY ignore Upgrade header.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-may-ignore-upgrade-header.rule.js.map

package/dist/rules/routing/upgrade/server-may-ignore-upgrade-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-ignore-upgrade-header.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-may-ignore-upgrade-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,0CAA0C,CAAC;KAChE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,oLAAoL,CACrL;KACA,OAAO,CAAC,mCAAmC,CAAC;KAC5C,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-may-send-upgrade-header-in-other-responses.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-may-send-upgrade-header-in-other-responses.rule.d.ts.map

package/dist/rules/routing/upgrade/server-may-send-upgrade-header-in-other-responses.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-send-upgrade-header-in-other-responses.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-may-send-upgrade-header-in-other-responses.rule.ts"],"names":[],"mappings":";AAGA,wBAcU"}

package/dist/rules/routing/upgrade/server-may-send-upgrade-header-in-other-responses.rule.js

@@ -0,0 +1,12 @@
+import { not, responseHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-may-send-upgrade-header-in-other-responses')
+    .severity('hint')
+    .type('analytics', 'static')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server MAY send an Upgrade header field in any other response to advertise that it implements support for upgrading to the listed protocols, in order of descending preference, when appropriate for a future request.')
+    .summary('Server MAY send Upgrade header in responses to advertise support.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(not(responseHeader('upgrade'))))
+    .done();
+//# sourceMappingURL=server-may-send-upgrade-header-in-other-responses.rule.js.map

package/dist/rules/routing/upgrade/server-may-send-upgrade-header-in-other-responses.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-send-upgrade-header-in-other-responses.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-may-send-upgrade-header-in-other-responses.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,2DAA2D,CAC5D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;KAC3B,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,0NAA0N,CAC3N;KACA,OAAO,CAAC,mEAAmE,CAAC;KAC5E,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CACnE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-ignore-upgrade-in-http-1.0-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-ignore-upgrade-in-http-1.0-request.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-ignore-upgrade-in-http-1.0-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-ignore-upgrade-in-http-1.0-request.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-ignore-upgrade-in-http-1.0-request.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/upgrade/server-must-ignore-upgrade-in-http-1.0-request.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-ignore-upgrade-in-http-1.0-request')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server that receives an Upgrade header field in an HTTP/1.0 request MUST ignore that Upgrade field. Protocol switching is only supported in HTTP/1.1 and later versions.')
+    .summary('Server MUST ignore Upgrade header in HTTP/1.0 requests.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-must-ignore-upgrade-in-http-1.0-request.rule.js.map

package/dist/rules/routing/upgrade/server-must-ignore-upgrade-in-http-1.0-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-ignore-upgrade-in-http-1.0-request.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-ignore-upgrade-in-http-1.0-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wDAAwD,CACzD;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,4KAA4K,CAC7K;KACA,OAAO,CAAC,yDAAyD,CAAC;KAClE,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-list-protocols-in-layer-ascending-order.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-list-protocols-in-layer-ascending-order.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-list-protocols-in-layer-ascending-order.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-list-protocols-in-layer-ascending-order.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-list-protocols-in-layer-ascending-order.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/routing/upgrade/server-must-list-protocols-in-layer-ascending-order.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-list-protocols-in-layer-ascending-order')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('If multiple protocol layers are being switched in a 101 (Switching Protocols) response, the sender MUST list the protocols in layer-ascending order. This ensures proper protocol stacking and negotiation.')
+    .summary('Server MUST list protocols in layer-ascending order in Upgrade header.')
+    .done();
+//# sourceMappingURL=server-must-list-protocols-in-layer-ascending-order.rule.js.map

package/dist/rules/routing/upgrade/server-must-list-protocols-in-layer-ascending-order.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-list-protocols-in-layer-ascending-order.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-list-protocols-in-layer-ascending-order.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6DAA6D,CAC9D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,6MAA6M,CAC9M;KACA,OAAO,CACN,wEAAwE,CACzE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-not-switch-to-non-indicated-protocol.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-not-switch-to-non-indicated-protocol.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-not-switch-to-non-indicated-protocol.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-switch-to-non-indicated-protocol.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-not-switch-to-non-indicated-protocol.rule.ts"],"names":[],"mappings":";AAGA,wBAwCU"}

package/dist/rules/routing/upgrade/server-must-not-switch-to-non-indicated-protocol.rule.js

@@ -0,0 +1,32 @@
+import { getHeader, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-not-switch-to-non-indicated-protocol')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description("A server MUST NOT switch to a protocol that was not indicated by the client in the corresponding request's Upgrade header field. The server can only switch to protocols explicitly requested by the client.")
+    .summary('Server MUST NOT switch to protocol not indicated by client.')
+    .rule((ctx) => ctx.validateHttpTransactions(requestHeader('upgrade'), (req, res) => {
+    const reqUpgradeHeader = getHeader(req.headers, 'upgrade');
+    const resUpgradeHeader = getHeader(res.headers, 'upgrade');
+    if (reqUpgradeHeader && resUpgradeHeader) {
+        const reqUpgradeHeaderArray = Array.isArray(reqUpgradeHeader)
+            ? reqUpgradeHeader
+            : [reqUpgradeHeader];
+        const resUpgradeHeaderArray = Array.isArray(resUpgradeHeader)
+            ? resUpgradeHeader
+            : [resUpgradeHeader];
+        const reqUpgradeProtocols = reqUpgradeHeaderArray
+            .join(', ')
+            .split(',')
+            .map((protocol) => protocol.trim().toLowerCase());
+        const resUpgradeProtocols = resUpgradeHeaderArray
+            .join(', ')
+            .split(',')
+            .map((protocol) => protocol.trim().toLowerCase());
+        return resUpgradeProtocols.some((protocol) => !reqUpgradeProtocols.includes(protocol));
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=server-must-not-switch-to-non-indicated-protocol.rule.js.map

package/dist/rules/routing/upgrade/server-must-not-switch-to-non-indicated-protocol.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-switch-to-non-indicated-protocol.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-not-switch-to-non-indicated-protocol.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,8MAA8M,CAC/M;KACA,OAAO,CAAC,6DAA6D,CAAC;KACtE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAClE,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE3D,IAAI,gBAAgB,IAAI,gBAAgB,EAAE,CAAC;QACzC,MAAM,qBAAqB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC3D,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACvB,MAAM,qBAAqB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC3D,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAEvB,MAAM,mBAAmB,GAAG,qBAAqB;aAC9C,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,MAAM,mBAAmB,GAAG,qBAAqB;aAC9C,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEpD,OAAO,mBAAmB,CAAC,IAAI,CAC7B,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-not-switch-unless-semantics-can-be-honored.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-not-switch-unless-semantics-can-be-honored.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-not-switch-unless-semantics-can-be-honored.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-switch-unless-semantics-can-be-honored.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-not-switch-unless-semantics-can-be-honored.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/upgrade/server-must-not-switch-unless-semantics-can-be-honored.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-not-switch-unless-semantics-can-be-honored')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server MUST NOT switch protocols unless the received message semantics can be honored by the new protocol. An OPTIONS request can be honored by any protocol. This allows a connection to be upgraded to protocols with the same semantics as HTTP without the latency cost of an additional round trip.')
+    .summary('Server MUST NOT switch unless message semantics can be honored.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-must-not-switch-unless-semantics-can-be-honored.rule.js.map

package/dist/rules/routing/upgrade/server-must-not-switch-unless-semantics-can-be-honored.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-switch-unless-semantics-can-be-honored.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-not-switch-unless-semantics-can-be-honored.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,gEAAgE,CACjE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,4SAA4S,CAC7S;KACA,OAAO,CAAC,iEAAiE,CAAC;KAC1E,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-send-100-before-101-with-expect-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-send-100-before-101-with-expect-header.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-send-100-before-101-with-expect-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-100-before-101-with-expect-header.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-send-100-before-101-with-expect-header.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/upgrade/server-must-send-100-before-101-with-expect-header.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-send-100-before-101-with-expect-header')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('If a server receives both an Upgrade and an Expect header field with the "100-continue" expectation, the server MUST send a 100 (Continue) response before sending a 101 (Switching Protocols) response. This ensures proper handling of the expect-continue mechanism before protocol switching.')
+    .summary('Server MUST send 100 response before 101 when Expect: 100-continue is present.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-must-send-100-before-101-with-expect-header.rule.js.map

package/dist/rules/routing/upgrade/server-must-send-100-before-101-with-expect-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-100-before-101-with-expect-header.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-send-100-before-101-with-expect-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4DAA4D,CAC7D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,mSAAmS,CACpS;KACA,OAAO,CACN,gFAAgF,CACjF;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-101-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-send-upgrade-header-in-101-response.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-101-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-upgrade-header-in-101-response.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-send-upgrade-header-in-101-response.rule.ts"],"names":[],"mappings":";AAGA,wBAgBU"}

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-101-response.rule.js

@@ -0,0 +1,12 @@
+import { and, not, responseHeader, statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-send-upgrade-header-in-101-response')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server that sends a 101 (Switching Protocols) response MUST send an Upgrade header field to indicate the new protocol(s) to which the connection is being switched. This informs the client which protocol is now in use.')
+    .summary('Server MUST send Upgrade header in 101 response.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateHttpTransactions(and(statusCode(101), not(responseHeader('upgrade')))))
+    .done();
+//# sourceMappingURL=server-must-send-upgrade-header-in-101-response.rule.js.map

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-101-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-upgrade-header-in-101-response.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-send-upgrade-header-in-101-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,6NAA6N,CAC9N;KACA,OAAO,CAAC,kDAAkD,CAAC;KAC3D,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CACrD,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-426-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-send-upgrade-header-in-426-response.rule.d.ts.map

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-426-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-upgrade-header-in-426-response.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-send-upgrade-header-in-426-response.rule.ts"],"names":[],"mappings":";AAGA,wBAgBU"}

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-426-response.rule.js

@@ -0,0 +1,12 @@
+import { and, not, responseHeader, statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-send-upgrade-header-in-426-response')
+    .severity('error')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A server that sends a 426 (Upgrade Required) response MUST send an Upgrade header field to indicate the acceptable protocols, in order of descending preference. This informs the client which protocols it should use.')
+    .summary('Server MUST send Upgrade header in 426 response.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(statusCode(426), not(responseHeader('upgrade')))))
+    .done();
+//# sourceMappingURL=server-must-send-upgrade-header-in-426-response.rule.js.map

package/dist/rules/routing/upgrade/server-must-send-upgrade-header-in-426-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-upgrade-header-in-426-response.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/server-must-send-upgrade-header-in-426-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,yNAAyN,CAC1N;KACA,OAAO,CAAC,kDAAkD,CAAC;KAC3D,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CACrD,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/user-agent-must-generate-host-or-authority-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-must-generate-host-or-authority-header.rule.d.ts.map

package/dist/rules/routing/user-agent-must-generate-host-or-authority-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-generate-host-or-authority-header.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/routing/user-agent-must-generate-host-or-authority-header.rule.ts"],"names":[],"mappings":";AAGA,wBAeU"}

package/dist/rules/routing/user-agent-must-generate-host-or-authority-header.rule.js

@@ -0,0 +1,11 @@
+import { and, not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-must-generate-host-or-authority-header')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-host-and-authority')
+    .description('A user agent MUST generate a Host header field in a request unless it sends that information as an ":authority" pseudo-header field. The target URI\'s authority information is critical for handling a request.')
+    .appliesTo('user-agent')
+    .rule((ctx) => ctx.validateHttpTransactions(and(not(requestHeader('host')), not(requestHeader(':authority')))))
+    .done();
+//# sourceMappingURL=user-agent-must-generate-host-or-authority-header.rule.js.map

package/dist/rules/routing/user-agent-must-generate-host-or-authority-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-generate-host-or-authority-header.rule.js","sourceRoot":"","sources":["../../../src/rules/routing/user-agent-must-generate-host-or-authority-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,2DAA2D,CAC5D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CACV,kNAAkN,CACnN;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAClE,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/user-agent-should-send-host-as-first-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-send-host-as-first-header.rule.d.ts.map

package/dist/rules/routing/user-agent-should-send-host-as-first-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-send-host-as-first-header.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/routing/user-agent-should-send-host-as-first-header.rule.ts"],"names":[],"mappings":";AAGA,wBAQU"}

package/dist/rules/routing/user-agent-should-send-host-as-first-header.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+// we could test this if we would have access to the raw request
+export default httpRule('rfc9110/user-agent-should-send-host-as-first-header')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-host-and-authority')
+    .description('A user agent that sends Host SHOULD send it as the first field in the header section of a request.')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-should-send-host-as-first-header.rule.js.map

package/dist/rules/routing/user-agent-should-send-host-as-first-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-send-host-as-first-header.rule.js","sourceRoot":"","sources":["../../../src/rules/routing/user-agent-should-send-host-as-first-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,gEAAgE;AAChE,eAAe,QAAQ,CAAC,qDAAqD,CAAC;KAC3E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CACV,oGAAoG,CACrG;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/401/server-must-send-www-authenticate-header-for-401-response.rule.d.ts

@@ -0,0 +1,6 @@
+type Options = {
+    checkAllSecured?: boolean;
+};
+declare const _default: import("@thymian/core").Rule<Options>;
+export default _default;
+//# sourceMappingURL=server-must-send-www-authenticate-header-for-401-response.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/401/server-must-send-www-authenticate-header-for-401-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-www-authenticate-header-for-401-response.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/401/server-must-send-www-authenticate-header-for-401-response.rule.ts"],"names":[],"mappings":"AAcA,KAAK,OAAO,GAAG;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;;AAcF,wBAkCU"}

package/dist/rules/status-codes/client-error-4xx/401/server-must-send-www-authenticate-header-for-401-response.rule.js

@@ -0,0 +1,29 @@
+import {} from '@thymian/core';
+import { and, authorization, constant, method, not, or, responseHeader, responseWith, statusCode, } from '@thymian/core';
+import { httpRule, singleTestCase } from '@thymian/core';
+const optionSchema = {
+    type: 'object',
+    additionalProperties: false,
+    properties: {
+        checkAllSecured: {
+            nullable: true,
+            type: 'boolean',
+            default: false,
+        },
+    },
+};
+export default httpRule('rfc9110/server-must-send-www-authenticate-header-for-401-response')
+    .severity('error')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-401-unauthorized')
+    .options(optionSchema)
+    .description('The server generating a 401 response MUST send a WWW-Authenticate header field containing at least one challenge applicable to the target resource.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(statusCode(401), not(responseHeader('www-authenticate'))))
+    .overrideTest((testContext, options) => testContext.httpTest(singleTestCase()
+    .forTransactionsWith(and(not(method('HEAD')), or(and(authorization(), constant(options.checkAllSecured ?? false)), responseWith(statusCode(401)))))
+    .run({ authorize: false })
+    .expectForTransactions(responseHeader('www-authenticate'))
+    .done()))
+    .done();
+//# sourceMappingURL=server-must-send-www-authenticate-header-for-401-response.rule.js.map

package/dist/rules/status-codes/client-error-4xx/401/server-must-send-www-authenticate-header-for-401-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-www-authenticate-header-for-401-response.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/401/server-must-send-www-authenticate-header-for-401-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,GAAG,EACH,aAAa,EACb,QAAQ,EACR,MAAM,EACN,GAAG,EACH,EAAE,EACF,cAAc,EACd,YAAY,EACZ,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMzD,MAAM,YAAY,GAA4B;IAC5C,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,eAAe,EAAE;YACf,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK;SACf;KACF;CACF,CAAC;AAEF,eAAe,QAAQ,CACrB,mEAAmE,CACpE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,mEAAmE,CAAC;KACxE,OAAO,CAAU,YAAY,CAAC;KAC9B,WAAW,CACV,qJAAqJ,CACtJ;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,UAAU,CAAC,GAAG,CAAC,EACf,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CACxC,CACF;KACA,YAAY,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CACrC,WAAW,CAAC,QAAQ,CAClB,cAAc,EAAE;KACb,mBAAmB,CAClB,GAAG,CACD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACnB,EAAE,CACA,GAAG,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC,EAChE,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAC9B,CACF,CACF;KACA,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;KACzB,qBAAqB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;KACzD,IAAI,EAAE,CACV,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/401/user-agent-may-repeat-request-with-new-authorization-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-may-repeat-request-with-new-authorization-header.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/401/user-agent-may-repeat-request-with-new-authorization-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-may-repeat-request-with-new-authorization-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/401/user-agent-may-repeat-request-with-new-authorization-header.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/status-codes/client-error-4xx/401/user-agent-may-repeat-request-with-new-authorization-header.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-may-repeat-request-with-new-authorization-header')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-401-unauthorized')
+    .summary('The user agent MAY repeat the request with a new or replaced Authorization header field.')
+    .description('If the request included authentication credentials, then the 401 response indicates that authorization has been refused for those credentials. The user agent MAY repeat the request with a new or replaced Authorization header field. ')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-may-repeat-request-with-new-authorization-header.rule.js.map

package/dist/rules/status-codes/client-error-4xx/401/user-agent-may-repeat-request-with-new-authorization-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-may-repeat-request-with-new-authorization-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/401/user-agent-may-repeat-request-with-new-authorization-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,mEAAmE,CAAC;KACxE,OAAO,CACN,0FAA0F,CAC3F;KACA,WAAW,CACV,0OAA0O,CAC3O;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/401/user-agent-should-present-error-representation-to-user.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-present-error-representation-to-user.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/401/user-agent-should-present-error-representation-to-user.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-present-error-representation-to-user.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/401/user-agent-should-present-error-representation-to-user.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/status-codes/client-error-4xx/401/user-agent-should-present-error-representation-to-user.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-present-error-representation-to-user')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-401-unauthorized')
+    .description('If the 401 response contains the same challenge as the prior response, and the user agent has already attempted authentication at least once, then the user agent SHOULD present the enclosed representation to the user, since it usually contains relevant diagnostic information.')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-should-present-error-representation-to-user.rule.js.map

package/dist/rules/status-codes/client-error-4xx/401/user-agent-should-present-error-representation-to-user.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-present-error-representation-to-user.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/401/user-agent-should-present-error-representation-to-user.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,gEAAgE,CACjE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,mEAAmE,CAAC;KACxE,WAAW,CACV,sRAAsR,CACvR;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/402/402-status-code-is-reserved.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=402-status-code-is-reserved.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/402/402-status-code-is-reserved.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"402-status-code-is-reserved.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/402/402-status-code-is-reserved.rule.ts"],"names":[],"mappings":";AAGA,wBASU"}

package/dist/rules/status-codes/client-error-4xx/402/402-status-code-is-reserved.rule.js

@@ -0,0 +1,11 @@
+import { statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/402-status-code-is-reserved')
+    .severity('error')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-402-payment-required')
+    .description('The 402 (Payment Required) status code is reserved for future use.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(statusCode(402)))
+    .done();
+//# sourceMappingURL=402-status-code-is-reserved.rule.js.map

package/dist/rules/status-codes/client-error-4xx/402/402-status-code-is-reserved.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"402-status-code-is-reserved.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/402/402-status-code-is-reserved.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,qCAAqC,CAAC;KAC3D,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,uEAAuE,CAAC;KAC5E,WAAW,CACV,oEAAoE,CACrE;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;KAClE,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/403/client-may-repeat-request-with-new-credentials-for-403-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-may-repeat-request-with-new-credentials-for-403-response.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/403/client-may-repeat-request-with-new-credentials-for-403-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-may-repeat-request-with-new-credentials-for-403-response.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/403/client-may-repeat-request-with-new-credentials-for-403-response.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/status-codes/client-error-4xx/403/client-may-repeat-request-with-new-credentials-for-403-response.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-may-repeat-request-with-new-credentials-for-403-response')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-403-forbidden')
+    .description('The client MAY repeat the request with new or different credentials.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-may-repeat-request-with-new-credentials-for-403-response.rule.js.map

package/dist/rules/status-codes/client-error-4xx/403/client-may-repeat-request-with-new-credentials-for-403-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-may-repeat-request-with-new-credentials-for-403-response.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/403/client-may-repeat-request-with-new-credentials-for-403-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,gEAAgE,CAAC;KACrE,WAAW,CACV,sEAAsE,CACvE;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/403/client-should-not-automatically-repeat-request-for-403-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-should-not-automatically-repeat-request-for-403-response.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/403/client-should-not-automatically-repeat-request-for-403-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-automatically-repeat-request-for-403-response.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/403/client-should-not-automatically-repeat-request-for-403-response.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/status-codes/client-error-4xx/403/client-should-not-automatically-repeat-request-for-403-response.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-should-not-automatically-repeat-request-for-403-response')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-403-forbidden')
+    .summary('The client SHOULD NOT automatically repeat the request with the same credentials.')
+    .description('If authentication credentials were provided in the request, the server considers them insufficient to grant access. The client SHOULD NOT automatically repeat the request with the same credentials.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-should-not-automatically-repeat-request-for-403-response.rule.js.map

package/dist/rules/status-codes/client-error-4xx/403/client-should-not-automatically-repeat-request-for-403-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-automatically-repeat-request-for-403-response.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/403/client-should-not-automatically-repeat-request-for-403-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,gEAAgE,CAAC;KACrE,OAAO,CACN,mFAAmF,CACpF;KACA,WAAW,CACV,uMAAuM,CACxM;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/403/origin-server-may-respond-with-404-instead-of-403.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-may-respond-with-404-instead-of-403.rule.d.ts.map

package/dist/rules/status-codes/client-error-4xx/403/origin-server-may-respond-with-404-instead-of-403.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-may-respond-with-404-instead-of-403.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/403/origin-server-may-respond-with-404-instead-of-403.rule.ts"],"names":[],"mappings":";AAGA,wBAWU"}

package/dist/rules/status-codes/client-error-4xx/403/origin-server-may-respond-with-404-instead-of-403.rule.js

@@ -0,0 +1,11 @@
+import { statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-may-respond-with-404-instead-of-403')
+    .severity('hint')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-403-forbidden')
+    .description('An origin server that wishes to "hide" the current existence of a forbidden target resource MAY instead respond with a status code of 404 (Not Found).')
+    .appliesTo('origin server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(statusCode(403)))
+    .done();
+//# sourceMappingURL=origin-server-may-respond-with-404-instead-of-403.rule.js.map

package/dist/rules/status-codes/client-error-4xx/403/origin-server-may-respond-with-404-instead-of-403.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-may-respond-with-404-instead-of-403.rule.js","sourceRoot":"","sources":["../../../../../src/rules/status-codes/client-error-4xx/403/origin-server-may-respond-with-404-instead-of-403.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,2DAA2D,CAC5D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,gEAAgE,CAAC;KACrE,WAAW,CACV,wJAAwJ,CACzJ;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;KAClE,IAAI,EAAE,CAAC"}

package/dist/rules/status-codes/client-error-4xx/405/origin-sever-must-generate-allow-header-for-405-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-sever-must-generate-allow-header-for-405-response.rule.d.ts.map