fastify 5.2.1 → 5.3.0

package/lib/contentTypeParser.js

@@ -2,7 +2,7 @@
 
 const { AsyncResource } = require('node:async_hooks')
 const { FifoMap: Fifo } = require('toad-cache')
-const secureJson = require('secure-json-parse')
+const { parse: secureJsonParse } = require('secure-json-parse')
 const {
   kDefaultJsonParse,
   kContentTypeParser,
@@ -197,7 +197,7 @@ ContentTypeParser.prototype.run = function (contentType, handler, request, reply
   } else {
     const result = parser.fn(request, request[kRequestPayloadStream], done)
 
-    if (typeof result?.then === 'function') {
+    if (result && typeof result.then === 'function') {
       result.then(body => done(null, body), done)
     }
   }
@@ -304,17 +304,16 @@ function getDefaultJsonParser (onProtoPoisoning, onConstructorPoisoning) {
   return defaultJsonParser
 
   function defaultJsonParser (req, body, done) {
-    if (body === '' || body == null || (Buffer.isBuffer(body) && body.length === 0)) {
-      return done(new FST_ERR_CTP_EMPTY_JSON_BODY(), undefined)
+    if (body.length === 0) {
+      done(new FST_ERR_CTP_EMPTY_JSON_BODY(), undefined)
+      return
     }
-    let json
     try {
-      json = secureJson.parse(body, { protoAction: onProtoPoisoning, constructorAction: onConstructorPoisoning })
+      done(null, secureJsonParse(body, { protoAction: onProtoPoisoning, constructorAction: onConstructorPoisoning }))
     } catch (err) {
       err.statusCode = 400
-      return done(err, undefined)
+      done(err, undefined)
     }
-    done(null, json)
   }
 }
 

package/lib/decorate.js

@@ -4,7 +4,7 @@ const {
   kReply,
   kRequest,
   kState,
-  kHasBeenDecorated
+  kHasBeenDecorated,
 } = require('./symbols.js')
 
 const {
@@ -12,7 +12,8 @@ const {
   FST_ERR_DEC_MISSING_DEPENDENCY,
   FST_ERR_DEC_AFTER_START,
   FST_ERR_DEC_REFERENCE_TYPE,
-  FST_ERR_DEC_DEPENDENCY_INVALID_TYPE
+  FST_ERR_DEC_DEPENDENCY_INVALID_TYPE,
+  FST_ERR_DEC_UNDECLARED,
 } = require('./errors')
 
 function decorate (instance, name, fn, dependencies) {
@@ -32,6 +33,18 @@ function decorate (instance, name, fn, dependencies) {
   }
 }
 
+function getInstanceDecorator (name) {
+  if (!checkExistence(this, name)) {
+    throw new FST_ERR_DEC_UNDECLARED(name, 'instance')
+  }
+
+  if (typeof this[name] === 'function') {
+    return this[name].bind(this)
+  }
+
+  return this[name]
+}
+
 function decorateConstructor (konstructor, name, fn, dependencies) {
   const instance = konstructor.prototype
   if (Object.hasOwn(instance, name) || hasKey(konstructor, name)) {
@@ -133,5 +146,7 @@ module.exports = {
   existReply: checkReplyExistence,
   dependencies: checkDependencies,
   decorateReply,
-  decorateRequest
+  decorateRequest,
+  getInstanceDecorator,
+  hasKey
 }

package/lib/error-handler.js

@@ -110,18 +110,20 @@ function fallbackErrorHandler (error, reply, cb) {
   let payload
   try {
     const serializerFn = getSchemaSerializer(reply[kRouteContext], statusCode, reply[kReplyHeaders]['content-type'])
-    payload = (serializerFn === false)
-      ? serializeError({
-          error: statusCodes[statusCode + ''],
-          code: error.code,
-          message: error.message,
-          statusCode
-        })
-      : serializerFn(Object.create(error, {
-          error: { value: statusCodes[statusCode + ''] },
-          message: { value: error.message },
-          statusCode: { value: statusCode }
-        }))
+    if (serializerFn === false) {
+      payload = serializeError({
+        error: statusCodes[statusCode + ''],
+        code: error.code,
+        message: error.message,
+        statusCode
+      })
+    } else {
+      payload = serializerFn(Object.create(error, {
+        error: { value: statusCodes[statusCode + ''] },
+        message: { value: error.message },
+        statusCode: { value: statusCode }
+      }))
+    }
   } catch (err) {
     if (!reply.log[kDisableRequestLogging]) {
       // error is always FST_ERR_SCH_SERIALIZATION_BUILD because this is called from route/compileSchemasForSerialization

package/lib/errors.js

@@ -149,6 +149,10 @@ const codes = {
     'FST_ERR_DEC_REFERENCE_TYPE',
     "The decorator '%s' of type '%s' is a reference type. Use the { getter, setter } interface instead."
   ),
+  FST_ERR_DEC_UNDECLARED: createError(
+    'FST_ERR_DEC_UNDECLARED',
+    "No decorator '%s' has been declared on %s."
+  ),
 
   /**
    * hooks

package/lib/headRoute.js

@@ -3,7 +3,8 @@ function headRouteOnSendHandler (req, reply, payload, done) {
   // If payload is undefined
   if (payload === undefined) {
     reply.header('content-length', '0')
-    return done(null, null)
+    done(null, null)
+    return
   }
 
   if (typeof payload.resume === 'function') {
@@ -11,7 +12,8 @@ function headRouteOnSendHandler (req, reply, payload, done) {
       reply.log.error({ err }, 'Error on Stream found for HEAD route')
     })
     payload.resume()
-    return done(null, null)
+    done(null, null)
+    return
   }
 
   const size = '' + Buffer.byteLength(payload)

package/lib/pluginUtils.js

@@ -13,6 +13,8 @@ const {
   FST_ERR_PLUGIN_INVALID_ASYNC_HANDLER
 } = require('./errors')
 
+const rcRegex = /-(?:rc|pre|alpha).+$/u
+
 function getMeta (fn) {
   return fn[Symbol.for('plugin-meta')]
 }
@@ -106,11 +108,11 @@ function _checkDecorators (that, instance, decorators, name) {
 
 function checkVersion (fn) {
   const meta = getMeta(fn)
-  if (meta == null || meta?.fastify == null) return
+  if (meta?.fastify == null) return
 
   const requiredVersion = meta.fastify
 
-  const fastifyRc = /-(?:rc|pre|alpha).+$/.test(this.version)
+  const fastifyRc = rcRegex.test(this.version)
   if (fastifyRc === true && semver.gt(this.version, semver.coerce(requiredVersion)) === true) {
     // A Fastify release candidate phase is taking place. In order to reduce
     // the effort needed to test plugins with the RC, we allow plugins targeting

package/lib/reply.js

@@ -22,7 +22,7 @@ const {
   kReplyCacheSerializeFns,
   kSchemaController,
   kOptions,
-  kRouteContext
+  kRouteContext,
 } = require('./symbols.js')
 const {
   onSendHookRunner,
@@ -52,8 +52,10 @@ const {
   FST_ERR_BAD_TRAILER_NAME,
   FST_ERR_BAD_TRAILER_VALUE,
   FST_ERR_MISSING_SERIALIZATION_FN,
-  FST_ERR_MISSING_CONTENTTYPE_SERIALIZATION_FN
+  FST_ERR_MISSING_CONTENTTYPE_SERIALIZATION_FN,
+  FST_ERR_DEC_UNDECLARED,
 } = require('./errors')
+const decorators = require('./decorate')
 
 const toString = Object.prototype.toString
 
@@ -475,6 +477,19 @@ Reply.prototype.then = function (fulfilled, rejected) {
   })
 }
 
+Reply.prototype.getDecorator = function (name) {
+  if (!decorators.hasKey(this, name) && !decorators.exist(this, name)) {
+    throw new FST_ERR_DEC_UNDECLARED(name, 'reply')
+  }
+
+  const decorator = this[name]
+  if (typeof decorator === 'function') {
+    return decorator.bind(this)
+  }
+
+  return decorator
+}
+
 function preSerializationHook (reply, payload) {
   if (reply[kRouteContext].preSerialization !== null) {
     preSerializationHookRunner(

package/lib/request.js

@@ -11,9 +11,10 @@ const {
   kOptions,
   kRequestCacheValidateFns,
   kRouteContext,
-  kRequestOriginalUrl
+  kRequestOriginalUrl,
 } = require('./symbols')
-const { FST_ERR_REQ_INVALID_VALIDATION_INVOCATION } = require('./errors')
+const { FST_ERR_REQ_INVALID_VALIDATION_INVOCATION, FST_ERR_DEC_UNDECLARED } = require('./errors')
+const decorators = require('./decorate')
 
 const HTTP_PART_SYMBOL_MAP = {
   body: kSchemaBody,
@@ -141,6 +142,12 @@ function buildRequestWithTrustProxy (R, trustProxy) {
   return _Request
 }
 
+function assertsRequestDecoration (request, name) {
+  if (!decorators.hasKey(request, name) && !decorators.exist(request, name)) {
+    throw new FST_ERR_DEC_UNDECLARED(name, 'request')
+  }
+}
+
 Object.defineProperties(Request.prototype, {
   server: {
     get () {
@@ -343,6 +350,25 @@ Object.defineProperties(Request.prototype, {
 
       return validate(input)
     }
+  },
+  getDecorator: {
+    value: function (name) {
+      assertsRequestDecoration(this, name)
+
+      const decorator = this[name]
+      if (typeof decorator === 'function') {
+        return decorator.bind(this)
+      }
+
+      return decorator
+    }
+  },
+  setDecorator: {
+    value: function (name, value) {
+      assertsRequestDecoration(this, name)
+
+      this[name] = value
+    }
   }
 })
 

package/lib/server.js

@@ -6,6 +6,7 @@ const dns = require('node:dns')
 const os = require('node:os')
 
 const { kState, kOptions, kServerBindings } = require('./symbols')
+const { FSTWRN003 } = require('./warnings')
 const { onListenHookRunner } = require('./hooks')
 const {
   FST_ERR_HTTP2_INVALID_VERSION,
@@ -29,6 +30,10 @@ function createServer (options, httpHandler) {
     cb = undefined
   ) {
     if (typeof cb === 'function') {
+      if (cb.constructor.name === 'AsyncFunction') {
+        FSTWRN003('listen method')
+      }
+
       listenOptions.cb = cb
     }
     if (listenOptions.signal) {

package/lib/validation.js

@@ -119,7 +119,7 @@ function validateParam (validatorFunction, request, paramName) {
   const isUndefined = request[paramName] === undefined
   const ret = validatorFunction && validatorFunction(isUndefined ? null : request[paramName])
 
-  if (ret?.then) {
+  if (ret && typeof ret.then === 'function') {
     return ret
       .then((res) => { return answer(res) })
       .catch(err => { return err }) // return as simple error (not throw)

package/lib/warnings.js

@@ -8,6 +8,7 @@ const { createWarning } = require('process-warning')
  *   - FSTSEC001
  *
  * Deprecation Codes FSTDEP001 - FSTDEP021 were used by v4 and MUST NOT not be reused.
+ * Warning Codes FSTWRN001 - FSTWRN002 were used by v4 and MUST NOT not be reused.
  */
 
 const FSTWRN001 = createWarning({
@@ -17,6 +18,13 @@ const FSTWRN001 = createWarning({
   unlimited: true
 })
 
+const FSTWRN003 = createWarning({
+  name: 'FastifyWarning',
+  code: 'FSTWRN003',
+  message: 'The %s mixes async and callback styles that may lead to unhandled rejections. Please use only one of them.',
+  unlimited: true
+})
+
 const FSTSEC001 = createWarning({
   name: 'FastifySecurity',
   code: 'FSTSEC001',
@@ -26,5 +34,6 @@ const FSTSEC001 = createWarning({
 
 module.exports = {
   FSTWRN001,
+  FSTWRN003,
   FSTSEC001
 }

package/lib/wrapThenable.js

@@ -27,7 +27,14 @@ function wrapThenable (thenable, reply, store) {
       // the request may be terminated during the reply. in this situation,
       // it require an extra checking of request.aborted to see whether
       // the request is killed by client.
-      if (payload !== undefined || (reply.sent === false && reply.raw.headersSent === false && reply.request.raw.aborted === false)) {
+      if (payload !== undefined || //
+        (reply.sent === false && //
+          reply.raw.headersSent === false &&
+          reply.request.raw.aborted === false &&
+          reply.request.socket &&
+          !reply.request.socket.destroyed
+        )
+      ) {
         // we use a try-catch internally to avoid adding a catch to another
         // promise, increase promise perf by 10%
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fastify",
-  "version": "5.2.1",
+  "version": "5.3.0",
   "description": "Fast and low overhead web framework, for Node.js",
   "main": "fastify.js",
   "type": "commonjs",
@@ -161,20 +161,20 @@
   "devDependencies": {
     "@fastify/pre-commit": "^2.1.0",
     "@jsumners/line-reporter": "^1.0.1",
-    "@sinclair/typebox": "^0.33.4",
+    "@sinclair/typebox": "^0.34.13",
     "@sinonjs/fake-timers": "^11.2.2",
-    "@stylistic/eslint-plugin": "^2.1.0",
-    "@stylistic/eslint-plugin-js": "^2.1.0",
+    "@stylistic/eslint-plugin": "^4.1.0",
+    "@stylistic/eslint-plugin-js": "^4.1.0",
     "@types/node": "^22.0.0",
     "ajv": "^8.12.0",
     "ajv-errors": "^3.0.0",
     "ajv-formats": "^3.0.1",
     "ajv-i18n": "^4.2.0",
     "ajv-merge-patch": "^5.0.1",
-    "autocannon": "^7.15.0",
-    "borp": "^0.18.0",
+    "autocannon": "^8.0.0",
+    "borp": "^0.19.0",
     "branch-comparer": "^1.1.0",
-    "concurrently": "^8.2.2",
+    "concurrently": "^9.1.2",
     "cross-env": "^7.0.3",
     "eslint": "^9.0.0",
     "fast-json-body": "^1.1.0",
@@ -185,15 +185,15 @@
     "joi": "^17.12.3",
     "json-schema-to-ts": "^3.0.1",
     "JSONStream": "^1.3.5",
-    "markdownlint-cli2": "^0.13.0",
-    "neostandard": "^0.11.3",
+    "markdownlint-cli2": "^0.17.1",
+    "neostandard": "^0.12.0",
     "node-forge": "^1.3.1",
     "proxyquire": "^2.1.3",
     "simple-get": "^4.0.1",
     "split2": "^4.2.0",
     "tap": "^21.0.0",
     "tsd": "^0.31.0",
-    "typescript": "~5.4.5",
+    "typescript": "~5.8.2",
     "undici": "^6.13.0",
     "vary": "^1.1.2",
     "yup": "^1.4.0"
@@ -209,9 +209,9 @@
     "find-my-way": "^9.0.0",
     "light-my-request": "^6.0.0",
     "pino": "^9.0.0",
-    "process-warning": "^4.0.0",
+    "process-warning": "^5.0.0",
     "rfdc": "^1.3.1",
-    "secure-json-parse": "^3.0.1",
+    "secure-json-parse": "^4.0.0",
     "semver": "^7.6.0",
     "toad-cache": "^3.7.0"
   },

package/test/bundler/esbuild/package.json

@@ -5,6 +5,6 @@
     "test": "npm run bundle && node bundler-test.js"
   },
   "devDependencies": {
-    "esbuild": "^0.14.11"
+    "esbuild": "^0.25.0"
   }
 }