mastercontroller 1.3.26 → 1.3.28

package/MasterAction.js

@@ -109,7 +109,12 @@ class MasterAction{
 				return;
 			}
 
-			this.__response.writeHead(HTTP_STATUS.OK, {
+			// Use status field from data as HTTP status code if it's a valid 4xx/5xx code
+			const httpStatus = (data && typeof data.status === 'number' && data.status >= 400 && data.status <= 599)
+				? data.status
+				: HTTP_STATUS.OK;
+
+			this.__response.writeHead(httpStatus, {
 				'Content-Type': 'application/json',
 				'Content-Length': byteSize
 			});

package/MasterRouter.js

@@ -37,7 +37,9 @@ const HTTP_METHODS = {
     GET: 'get',
     POST: 'post',
     PUT: 'put',
+    PATCH: 'patch',
     DELETE: 'delete',
+    HEAD: 'head',
     OPTIONS: 'options'
 };
 
@@ -239,7 +241,10 @@ const ROUTER_CONFIG = {
                         const pathObj = normalizePaths(requestObject.pathName, route.path, testParams);
 
                         // if we find the route that matches the request
-                        if(pathObj.requestPath === pathObj.routePath && route.type === requestObject.type){
+                        // HEAD requests match GET routes per HTTP spec (RFC 9110 §9.3.2)
+                        const methodMatches = route.type === requestObject.type
+                            || (requestObject.type === HTTP_METHODS.HEAD && route.type === HTTP_METHODS.GET);
+                        if(pathObj.requestPath === pathObj.routePath && methodMatches){
                             // Only commit the extracted params if this route actually matches
                             requestObject.params = testParams;
 
@@ -848,7 +853,12 @@ class MasterRouter {
                                     }
                                     return value;
                                 });
-                                requestObject.response.writeHead(200, {
+                                // Use status field from return value as HTTP status code if it's a valid 4xx/5xx code
+                                const httpStatus = (returnValue && typeof returnValue.status === 'number' && returnValue.status >= 400 && returnValue.status <= 599)
+                                    ? returnValue.status
+                                    : 200;
+
+                                requestObject.response.writeHead(httpStatus, {
                                     'Content-Type': 'application/json',
                                     'Content-Length': Buffer.byteLength(json, 'utf8')
                                 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mastercontroller",
-  "version": "1.3.26",
+  "version": "1.3.28",
   "description": "Fortune 500 ready Node.js MVC framework with enterprise security, monitoring, and horizontal scaling",
   "main": "MasterControl.js",
   "license": "MIT",