lambder 1.0.145 → 1.0.147

package/dist/Lambder.js

@@ -1,4 +1,3 @@
-import querystring from "querystring";
 import cookieParser from "cookie";
 import { match } from "path-to-regexp";
 import LambderResolver from "./LambderResolver.js";
@@ -22,7 +21,11 @@ export const createContext = (event, lambdaContext, apiPath) => {
             post = JSON.parse(decodedBody) || {};
         }
         catch (e) {
-            post = querystring.parse(decodedBody) || {};
+            const params = new URLSearchParams(decodedBody);
+            post = {};
+            for (const [key, value] of params.entries()) {
+                post[key] = value;
+            }
         }
     }
     catch (e) { }

package/dist/LambderMSW.js

@@ -1,3 +1,5 @@
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
 export default class LambderMSW {
     apiPath;
     apiVersion;

package/dist/LambderResponseBuilder.js

@@ -28,12 +28,12 @@ export default class LambderResponseBuilder {
             throw new Error("File system operations are not available in browser environment");
         }
         const publicPath = path.resolve(this.publicPath);
-        const absolutePath = path.join(publicPath, filePath);
+        const absolutePath = path.resolve(publicPath, filePath);
         console.log("readPublicFileSync", { filePath, publicPath, absolutePath });
-        if (!absolutePath.includes(publicPath)) {
+        if (!absolutePath.startsWith(publicPath)) {
             return "forbidden-public-path";
         }
-        return fs.readFileSync(absolutePath);
+        return await fs.promises.readFile(absolutePath);
     }
     ;
     async checkPublicFileExist(filePath) {
@@ -43,12 +43,18 @@ export default class LambderResponseBuilder {
             return false;
         }
         const publicPath = path.resolve(this.publicPath);
-        const absolutePath = path.join(this.publicPath, filePath);
+        const absolutePath = path.resolve(publicPath, filePath);
         console.log("checkPublicFileExist", { filePath, publicPath, absolutePath });
-        if (!absolutePath.includes(publicPath)) {
+        if (!absolutePath.startsWith(publicPath)) {
+            return false;
+        }
+        try {
+            const stat = await fs.promises.stat(absolutePath);
+            return stat.isFile();
+        }
+        catch {
             return false;
         }
-        return fs.existsSync(absolutePath) && fs.statSync(absolutePath).isFile();
     }
     ;
     addHeader(key, value) {

package/dist/LambderSessionManager.js

@@ -128,8 +128,8 @@ export default class LambderSessionManager {
             if (this.enableSlidingExpiration) {
                 session.lastAccessedAt = Math.floor(Date.now() / 1000);
                 session.expiresAt = session.lastAccessedAt + session.ttlInSeconds;
-                // Fire and forget - don't wait for the update
-                this.ddbPutItem(session).catch(() => { });
+                // Wait for the update to ensure it persists before Lambda freezes
+                await this.ddbPutItem(session).catch(() => { });
             }
             return session;
         }

package/dist/LambderUtils.js

@@ -16,12 +16,12 @@ export default class LambderUtils {
             return "EJS PATH NOT SET!";
         }
         const ejsPath = path.resolve(this.ejsPath);
-        const absolutePath = path.join(ejsPath, filePath);
+        const absolutePath = path.resolve(ejsPath, filePath);
         console.log("readEjsFileSync", { filePath, ejsPath, absolutePath });
-        if (!absolutePath.includes(ejsPath)) {
+        if (!absolutePath.startsWith(ejsPath)) {
             return "forbidden-ejs-path";
         }
-        return String(fs.readFileSync(absolutePath));
+        return String(await fs.promises.readFile(absolutePath));
     }
     ;
     async checkEjsFileExist(filePath) {
@@ -34,12 +34,18 @@ export default class LambderUtils {
             return "EJS PATH NOT SET!";
         }
         const ejsPath = path.resolve(this.ejsPath);
-        const absolutePath = path.join(this.ejsPath, filePath);
+        const absolutePath = path.resolve(ejsPath, filePath);
         console.log("checkEjsFileExist", { filePath, ejsPath, absolutePath });
-        if (!absolutePath.includes(ejsPath)) {
+        if (!absolutePath.startsWith(ejsPath)) {
+            return false;
+        }
+        try {
+            const stat = await fs.promises.stat(absolutePath);
+            return stat.isFile();
+        }
+        catch {
             return false;
         }
-        return fs.existsSync(absolutePath) && fs.statSync(absolutePath).isFile();
     }
     ;
     async renderEjs(template, pageData) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lambder",
-  "version": "1.0.145",
+  "version": "1.0.147",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/Lambder.ts

@@ -1,4 +1,3 @@
-import querystring from "querystring";
 import cookieParser from "cookie";
 import { match } from "path-to-regexp";
 
@@ -76,7 +75,13 @@ export const createContext = (
     try {
         const decodedBody = event.isBase64Encoded ? ( event.body ? Buffer.from(event.body,"base64").toString() : "{}" ) : ( event.body || "{}" );
         try { post = JSON.parse(decodedBody) || {}; }
-        catch(e){ post = querystring.parse(decodedBody) || {}; }
+        catch(e){ 
+            const params = new URLSearchParams(decodedBody);
+            post = {};
+            for(const [key, value] of params.entries()){
+                post[key] = value;
+            }
+        }
     }catch(e){}
     // Parse api variables
 

package/src/LambderMSW.ts

@@ -1,6 +1,9 @@
+import { createRequire } from 'module';
 import type { ApiContractShape } from './LambderApiContract';
 import type { LambderApiResponse } from './LambderResponseBuilder';
 
+const require = createRequire(import.meta.url);
+
 // MSW types - these will be resolved at runtime when msw is installed
 type RequestHandler = any;
 

package/src/LambderResponseBuilder.ts

@@ -70,10 +70,10 @@ export default class LambderResponseBuilder<TContract extends ApiContractShape =
         }
         
         const publicPath = path.resolve(this.publicPath);
-        const absolutePath = path.join(publicPath, filePath);
+        const absolutePath = path.resolve(publicPath, filePath);
         console.log("readPublicFileSync", { filePath, publicPath, absolutePath });
-        if(!absolutePath.includes(publicPath)){ return "forbidden-public-path"; }
-        return fs.readFileSync(absolutePath);
+        if(!absolutePath.startsWith(publicPath)){ return "forbidden-public-path"; }
+        return await fs.promises.readFile(absolutePath);
     };
 
     private async checkPublicFileExist(filePath: string){
@@ -83,10 +83,15 @@ export default class LambderResponseBuilder<TContract extends ApiContractShape =
         if (!fs || !path) { return false; }
         
         const publicPath = path.resolve(this.publicPath);
-        const absolutePath = path.join(this.publicPath, filePath);
+        const absolutePath = path.resolve(publicPath, filePath);
         console.log("checkPublicFileExist", { filePath, publicPath, absolutePath });
-        if(!absolutePath.includes(publicPath)){ return false; }
-        return fs.existsSync(absolutePath) && fs.statSync(absolutePath).isFile();
+        if(!absolutePath.startsWith(publicPath)){ return false; }
+        try {
+            const stat = await fs.promises.stat(absolutePath);
+            return stat.isFile();
+        } catch {
+            return false;
+        }
     };
 
     addHeader(key: string, value: string){

package/src/LambderSessionManager.ts

@@ -167,8 +167,8 @@ export default class LambderSessionManager{
             if(this.enableSlidingExpiration){
                 session.lastAccessedAt = Math.floor(Date.now()/1000);
                 session.expiresAt = session.lastAccessedAt + session.ttlInSeconds;
-                // Fire and forget - don't wait for the update
-                this.ddbPutItem(session).catch(() => {});
+                // Wait for the update to ensure it persists before Lambda freezes
+                await this.ddbPutItem(session).catch(() => {});
             }
             
             return session;

package/src/LambderUtils.ts

@@ -21,10 +21,10 @@ export default class LambderUtils {
         }
         if(!this.ejsPath){ return "EJS PATH NOT SET!"; }
         const ejsPath = path.resolve(this.ejsPath);
-        const absolutePath = path.join(ejsPath, filePath);
+        const absolutePath = path.resolve(ejsPath, filePath);
         console.log("readEjsFileSync", { filePath, ejsPath, absolutePath });
-        if(!absolutePath.includes(ejsPath)){ return "forbidden-ejs-path"; }
-        return String(fs.readFileSync(absolutePath));
+        if(!absolutePath.startsWith(ejsPath)){ return "forbidden-ejs-path"; }
+        return String(await fs.promises.readFile(absolutePath));
     };
 
     private async checkEjsFileExist(filePath: string){
@@ -36,10 +36,15 @@ export default class LambderUtils {
         }
         if(!this.ejsPath){ return "EJS PATH NOT SET!"; }
         const ejsPath = path.resolve(this.ejsPath);
-        const absolutePath = path.join(this.ejsPath, filePath);
+        const absolutePath = path.resolve(ejsPath, filePath);
         console.log("checkEjsFileExist", { filePath, ejsPath, absolutePath });
-        if(!absolutePath.includes(ejsPath)){ return false; }
-        return fs.existsSync(absolutePath) && fs.statSync(absolutePath).isFile();
+        if(!absolutePath.startsWith(ejsPath)){ return false; }
+        try {
+            const stat = await fs.promises.stat(absolutePath);
+            return stat.isFile();
+        } catch {
+            return false;
+        }
     };
 
 	async renderEjs(