javascript-solid-server 0.0.87 → 0.0.88

package/README.md

@@ -1,12 +1,14 @@
 # JavaScript Solid Server
 
+[![npm version](https://img.shields.io/npm/v/javascript-solid-server)](https://www.npmjs.com/package/javascript-solid-server)
+
 A minimal, fast, JSON-LD native Solid server.
 
 **[Documentation](https://javascriptsolidserver.github.io/docs/)** | **[GitHub](https://github.com/JavaScriptSolidServer/JavaScriptSolidServer)**
 
 ## Features
 
-### Implemented (v0.0.86)
+### Implemented
 
 - **Live Reload** - Auto-refresh browser on file changes (`--live-reload`)
 - **Read-Only Mode** - Disable write operations for static hosting (`--read-only`)

package/bin/jss.js

@@ -80,6 +80,7 @@ program
   .option('--read-only', 'Disable PUT/DELETE/PATCH methods (read-only mode)')
   .option('--live-reload', 'Inject live reload script into HTML (auto-refresh on changes)')
   .option('-q, --quiet', 'Suppress log output')
+  .option('--log-level <level>', 'Log level: error, warn, info, debug (default: info)')
   .option('--print-config', 'Print configuration and exit')
   .action(async (options) => {
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "javascript-solid-server",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "description": "A minimal, fast Solid server",
   "main": "src/index.js",
   "type": "module",

package/src/auth/did-nostr.js

@@ -13,6 +13,28 @@ const DEFAULT_DID_RESOLVER = 'https://nostr.social/.well-known/did/nostr';
 // Cache for resolved DIDs (pubkey -> webId or null)
 const cache = new Map();
 const CACHE_TTL = 5 * 60 * 1000; // 5 minutes
+const FAILURE_CACHE_TTL = 60 * 1000; // 1 minute for failed lookups
+
+// Rate-limit repeated error logs (key -> { count, lastLogged })
+const errorLogTracker = new Map();
+const ERROR_LOG_INTERVAL = 60_000;
+
+function rateLimitedError(key, message) {
+  const now = Date.now();
+  const entry = errorLogTracker.get(key);
+  if (entry && now - entry.lastLogged < ERROR_LOG_INTERVAL) {
+    entry.count++;
+    return;
+  }
+  // Clean up stale entries while we're here
+  for (const [k, v] of errorLogTracker) {
+    if (now - v.lastLogged > ERROR_LOG_INTERVAL) errorLogTracker.delete(k);
+  }
+  const suppressed = entry ? entry.count : 0;
+  const suffix = suppressed > 0 ? ` (${suppressed} similar suppressed)` : '';
+  console.error(`${message}${suffix}`);
+  errorLogTracker.set(key, { count: 0, lastLogged: now });
+}
 
 /**
  * Fetch with timeout
@@ -41,11 +63,15 @@ export async function resolveDidNostrToWebId(pubkey, resolverUrl = DEFAULT_DID_R
     return null;
   }
 
-  // Check cache
+  // Check cache (lazy eviction of expired entries)
   const cacheKey = pubkey.toLowerCase();
   const cached = cache.get(cacheKey);
-  if (cached && Date.now() - cached.timestamp < CACHE_TTL) {
-    return cached.webId;
+  if (cached) {
+    const ttl = cached.failureTtl ? FAILURE_CACHE_TTL : CACHE_TTL;
+    if (Date.now() - cached.timestamp < ttl) {
+      return cached.webId;
+    }
+    cache.delete(cacheKey);
   }
 
   try {
@@ -93,8 +119,9 @@ export async function resolveDidNostrToWebId(pubkey, resolverUrl = DEFAULT_DID_R
     return null;
 
   } catch (err) {
-    // Network error or timeout - don't cache failures
-    console.error(`DID resolution error for ${pubkey}:`, err.message);
+    // Cache failures with short TTL to avoid hammering a down service
+    cache.set(cacheKey, { webId: null, timestamp: Date.now(), failureTtl: true });
+    rateLimitedError(`did:${pubkey.substring(0, 8)}`, `DID resolution error for ${pubkey}: ${err.message}`);
     return null;
   }
 }
@@ -148,7 +175,7 @@ async function verifyWebIdBacklink(webId, pubkey) {
     return false;
 
   } catch (err) {
-    console.error(`WebID backlink verification error for ${webId}:`, err.message);
+    rateLimitedError(`backlink:${webId}`, `WebID backlink verification error for ${webId}: ${err.message}`);
     return false;
   }
 }

package/src/config.js

@@ -85,6 +85,7 @@ export const defaults = {
   // Logging
   logger: true,
   quiet: false,
+  logLevel: 'info',
 
   // Paths
   configPath: './.jss',
@@ -103,6 +104,7 @@ const envMap = {
   JSS_CONNEG: 'conneg',
   JSS_NOTIFICATIONS: 'notifications',
   JSS_QUIET: 'quiet',
+  JSS_LOG_LEVEL: 'logLevel',
   JSS_CONFIG_PATH: 'configPath',
   JSS_IDP: 'idp',
   JSS_IDP_ISSUER: 'idpIssuer',
@@ -228,6 +230,13 @@ export async function loadConfig(cliOptions = {}, configFile = null) {
     config.logger = false;
   }
 
+  // Validate log level
+  const validLevels = ['fatal', 'error', 'warn', 'info', 'debug', 'trace'];
+  if (!validLevels.includes(config.logLevel)) {
+    console.warn(`Invalid log level '${config.logLevel}', falling back to 'info'. Valid levels: ${validLevels.join(', ')}`);
+    config.logLevel = 'info';
+  }
+
   // Mashlib requires content negotiation for Turtle support
   if (config.mashlib || config.mashlibCdn) {
     config.conneg = true;

package/src/server.js

@@ -89,8 +89,10 @@ export function createServer(options = {}) {
   }
 
   // Fastify options
+  const loggerEnabled = options.logger ?? true;
   const fastifyOptions = {
-    logger: options.logger ?? true,
+    logger: loggerEnabled ? { level: options.logLevel || 'info' } : false,
+    disableRequestLogging: true,
     trustProxy: true,
     // Handle raw body for non-JSON content
     bodyLimit: 10 * 1024 * 1024 // 10MB
@@ -169,6 +171,19 @@ export function createServer(options = {}) {
     }
   });
 
+  // Unified access log — one line per request
+  fastify.addHook('onResponse', async (request, reply) => {
+    if (!request.log.isLevelEnabled('info')) return;
+    request.log.info({
+      req: { method: request.method, url: request.url, remoteAddress: request.ip },
+      res: { statusCode: reply.statusCode },
+      responseTime: Math.round(reply.elapsedTime * 100) / 100,
+      userAgent: request.headers['user-agent'] || undefined,
+      referrer: request.headers.referer || undefined,
+      contentLength: reply.getHeader('content-length') || undefined,
+    }, `${request.method} ${request.url} ${reply.statusCode} ${Math.round(reply.elapsedTime)}ms`);
+  });
+
   // Register WebSocket notifications plugin if enabled (or live reload needs it)
   if (notificationsEnabled || liveReloadEnabled) {
     fastify.register(notificationsPlugin);