node-fastify 5.8.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (354) hide show
  1. package/.borp.yaml +3 -0
  2. package/.markdownlint-cli2.yaml +22 -0
  3. package/.prettierignore +1 -0
  4. package/GOVERNANCE.md +4 -0
  5. package/LICENSE +21 -0
  6. package/PROJECT_CHARTER.md +126 -0
  7. package/README.md +423 -0
  8. package/SECURITY.md +220 -0
  9. package/SPONSORS.md +24 -0
  10. package/build/build-error-serializer.js +35 -0
  11. package/build/build-validation.js +169 -0
  12. package/build/sync-version.js +11 -0
  13. package/docs/Guides/Benchmarking.md +60 -0
  14. package/docs/Guides/Database.md +321 -0
  15. package/docs/Guides/Delay-Accepting-Requests.md +608 -0
  16. package/docs/Guides/Detecting-When-Clients-Abort.md +172 -0
  17. package/docs/Guides/Ecosystem.md +726 -0
  18. package/docs/Guides/Fluent-Schema.md +127 -0
  19. package/docs/Guides/Getting-Started.md +620 -0
  20. package/docs/Guides/Index.md +43 -0
  21. package/docs/Guides/Migration-Guide-V3.md +287 -0
  22. package/docs/Guides/Migration-Guide-V4.md +267 -0
  23. package/docs/Guides/Migration-Guide-V5.md +727 -0
  24. package/docs/Guides/Plugins-Guide.md +520 -0
  25. package/docs/Guides/Prototype-Poisoning.md +383 -0
  26. package/docs/Guides/Recommendations.md +378 -0
  27. package/docs/Guides/Serverless.md +604 -0
  28. package/docs/Guides/Style-Guide.md +246 -0
  29. package/docs/Guides/Testing.md +481 -0
  30. package/docs/Guides/Write-Plugin.md +103 -0
  31. package/docs/Guides/Write-Type-Provider.md +34 -0
  32. package/docs/Reference/ContentTypeParser.md +271 -0
  33. package/docs/Reference/Decorators.md +436 -0
  34. package/docs/Reference/Encapsulation.md +194 -0
  35. package/docs/Reference/Errors.md +377 -0
  36. package/docs/Reference/HTTP2.md +94 -0
  37. package/docs/Reference/Hooks.md +958 -0
  38. package/docs/Reference/Index.md +73 -0
  39. package/docs/Reference/LTS.md +86 -0
  40. package/docs/Reference/Lifecycle.md +99 -0
  41. package/docs/Reference/Logging.md +268 -0
  42. package/docs/Reference/Middleware.md +79 -0
  43. package/docs/Reference/Plugins.md +245 -0
  44. package/docs/Reference/Principles.md +73 -0
  45. package/docs/Reference/Reply.md +1001 -0
  46. package/docs/Reference/Request.md +295 -0
  47. package/docs/Reference/Routes.md +802 -0
  48. package/docs/Reference/Server.md +2389 -0
  49. package/docs/Reference/Type-Providers.md +256 -0
  50. package/docs/Reference/TypeScript.md +1729 -0
  51. package/docs/Reference/Validation-and-Serialization.md +1130 -0
  52. package/docs/Reference/Warnings.md +58 -0
  53. package/docs/index.md +24 -0
  54. package/docs/resources/encapsulation_context.drawio +1 -0
  55. package/docs/resources/encapsulation_context.svg +3 -0
  56. package/eslint.config.js +35 -0
  57. package/examples/asyncawait.js +38 -0
  58. package/examples/benchmark/body.json +3 -0
  59. package/examples/benchmark/hooks-benchmark-async-await.js +44 -0
  60. package/examples/benchmark/hooks-benchmark.js +52 -0
  61. package/examples/benchmark/parser.js +47 -0
  62. package/examples/benchmark/simple.js +30 -0
  63. package/examples/benchmark/webstream.js +27 -0
  64. package/examples/hooks.js +91 -0
  65. package/examples/http2.js +39 -0
  66. package/examples/https.js +38 -0
  67. package/examples/parser.js +53 -0
  68. package/examples/plugin.js +12 -0
  69. package/examples/route-prefix.js +38 -0
  70. package/examples/shared-schema.js +38 -0
  71. package/examples/simple-stream.js +20 -0
  72. package/examples/simple.js +32 -0
  73. package/examples/simple.mjs +27 -0
  74. package/examples/typescript-server.ts +79 -0
  75. package/examples/use-plugin.js +29 -0
  76. package/fastify.d.ts +253 -0
  77. package/fastify.js +985 -0
  78. package/integration/server.js +29 -0
  79. package/integration/test.sh +23 -0
  80. package/lib/config-validator.js +1266 -0
  81. package/lib/content-type-parser.js +413 -0
  82. package/lib/content-type.js +160 -0
  83. package/lib/context.js +98 -0
  84. package/lib/decorate.js +152 -0
  85. package/lib/error-handler.js +173 -0
  86. package/lib/error-serializer.js +134 -0
  87. package/lib/error-status.js +14 -0
  88. package/lib/errors.js +516 -0
  89. package/lib/four-oh-four.js +190 -0
  90. package/lib/handle-request.js +195 -0
  91. package/lib/head-route.js +45 -0
  92. package/lib/hooks.js +429 -0
  93. package/lib/initial-config-validation.js +37 -0
  94. package/lib/logger-factory.js +136 -0
  95. package/lib/logger-pino.js +68 -0
  96. package/lib/noop-set.js +10 -0
  97. package/lib/plugin-override.js +90 -0
  98. package/lib/plugin-utils.js +169 -0
  99. package/lib/promise.js +23 -0
  100. package/lib/reply.js +1030 -0
  101. package/lib/req-id-gen-factory.js +52 -0
  102. package/lib/request.js +391 -0
  103. package/lib/route.js +686 -0
  104. package/lib/schema-controller.js +164 -0
  105. package/lib/schemas.js +207 -0
  106. package/lib/server.js +441 -0
  107. package/lib/symbols.js +71 -0
  108. package/lib/validation.js +280 -0
  109. package/lib/warnings.js +57 -0
  110. package/lib/wrap-thenable.js +84 -0
  111. package/package.json +225 -0
  112. package/scripts/validate-ecosystem-links.js +179 -0
  113. package/test/404s.test.js +2035 -0
  114. package/test/500s.test.js +422 -0
  115. package/test/allow-unsafe-regex.test.js +92 -0
  116. package/test/als.test.js +65 -0
  117. package/test/async-await.test.js +705 -0
  118. package/test/async-dispose.test.js +20 -0
  119. package/test/async_hooks.test.js +52 -0
  120. package/test/body-limit.test.js +224 -0
  121. package/test/buffer.test.js +74 -0
  122. package/test/build/error-serializer.test.js +36 -0
  123. package/test/build/version.test.js +14 -0
  124. package/test/build-certificate.js +109 -0
  125. package/test/bundler/README.md +29 -0
  126. package/test/bundler/esbuild/bundler-test.js +32 -0
  127. package/test/bundler/esbuild/package.json +10 -0
  128. package/test/bundler/esbuild/src/fail-plugin-version.js +14 -0
  129. package/test/bundler/esbuild/src/index.js +9 -0
  130. package/test/bundler/webpack/bundler-test.js +32 -0
  131. package/test/bundler/webpack/package.json +11 -0
  132. package/test/bundler/webpack/src/fail-plugin-version.js +14 -0
  133. package/test/bundler/webpack/src/index.js +9 -0
  134. package/test/bundler/webpack/webpack.config.js +15 -0
  135. package/test/case-insensitive.test.js +102 -0
  136. package/test/chainable.test.js +40 -0
  137. package/test/child-logger-factory.test.js +128 -0
  138. package/test/client-timeout.test.js +38 -0
  139. package/test/close-pipelining.test.js +78 -0
  140. package/test/close.test.js +706 -0
  141. package/test/conditional-pino.test.js +47 -0
  142. package/test/connection-timeout.test.js +42 -0
  143. package/test/constrained-routes.test.js +1138 -0
  144. package/test/content-length.test.js +174 -0
  145. package/test/content-parser.test.js +739 -0
  146. package/test/content-type.test.js +181 -0
  147. package/test/context-config.test.js +164 -0
  148. package/test/custom-http-server.test.js +118 -0
  149. package/test/custom-parser-async.test.js +59 -0
  150. package/test/custom-parser.0.test.js +701 -0
  151. package/test/custom-parser.1.test.js +266 -0
  152. package/test/custom-parser.2.test.js +91 -0
  153. package/test/custom-parser.3.test.js +208 -0
  154. package/test/custom-parser.4.test.js +218 -0
  155. package/test/custom-parser.5.test.js +130 -0
  156. package/test/custom-querystring-parser.test.js +129 -0
  157. package/test/decorator.test.js +1330 -0
  158. package/test/delete.test.js +344 -0
  159. package/test/diagnostics-channel/404.test.js +49 -0
  160. package/test/diagnostics-channel/async-delay-request.test.js +65 -0
  161. package/test/diagnostics-channel/async-request.test.js +64 -0
  162. package/test/diagnostics-channel/error-before-handler.test.js +35 -0
  163. package/test/diagnostics-channel/error-request.test.js +53 -0
  164. package/test/diagnostics-channel/error-status.test.js +123 -0
  165. package/test/diagnostics-channel/init.test.js +50 -0
  166. package/test/diagnostics-channel/sync-delay-request.test.js +49 -0
  167. package/test/diagnostics-channel/sync-request-reply.test.js +51 -0
  168. package/test/diagnostics-channel/sync-request.test.js +54 -0
  169. package/test/encapsulated-child-logger-factory.test.js +69 -0
  170. package/test/encapsulated-error-handler.test.js +237 -0
  171. package/test/esm/errorCodes.test.mjs +10 -0
  172. package/test/esm/esm.test.mjs +13 -0
  173. package/test/esm/index.test.js +8 -0
  174. package/test/esm/named-exports.mjs +14 -0
  175. package/test/esm/other.mjs +8 -0
  176. package/test/esm/plugin.mjs +8 -0
  177. package/test/fastify-instance.test.js +300 -0
  178. package/test/find-route.test.js +152 -0
  179. package/test/fluent-schema.test.js +209 -0
  180. package/test/genReqId.test.js +426 -0
  181. package/test/handler-context.test.js +45 -0
  182. package/test/handler-timeout.test.js +367 -0
  183. package/test/has-route.test.js +88 -0
  184. package/test/header-overflow.test.js +55 -0
  185. package/test/helper.js +496 -0
  186. package/test/hooks-async.test.js +1099 -0
  187. package/test/hooks.on-listen.test.js +1162 -0
  188. package/test/hooks.on-ready.test.js +421 -0
  189. package/test/hooks.test.js +3578 -0
  190. package/test/http-methods/copy.test.js +35 -0
  191. package/test/http-methods/custom-http-methods.test.js +114 -0
  192. package/test/http-methods/get.test.js +412 -0
  193. package/test/http-methods/head.test.js +263 -0
  194. package/test/http-methods/lock.test.js +108 -0
  195. package/test/http-methods/mkcalendar.test.js +143 -0
  196. package/test/http-methods/mkcol.test.js +35 -0
  197. package/test/http-methods/move.test.js +42 -0
  198. package/test/http-methods/propfind.test.js +136 -0
  199. package/test/http-methods/proppatch.test.js +105 -0
  200. package/test/http-methods/report.test.js +142 -0
  201. package/test/http-methods/search.test.js +233 -0
  202. package/test/http-methods/trace.test.js +21 -0
  203. package/test/http-methods/unlock.test.js +38 -0
  204. package/test/http2/closing.test.js +270 -0
  205. package/test/http2/constraint.test.js +109 -0
  206. package/test/http2/head.test.js +34 -0
  207. package/test/http2/plain.test.js +68 -0
  208. package/test/http2/secure-with-fallback.test.js +113 -0
  209. package/test/http2/secure.test.js +67 -0
  210. package/test/http2/unknown-http-method.test.js +34 -0
  211. package/test/https/custom-https-server.test.js +58 -0
  212. package/test/https/https.test.js +136 -0
  213. package/test/imports.test.js +17 -0
  214. package/test/inject.test.js +502 -0
  215. package/test/input-validation.js +335 -0
  216. package/test/internals/all.test.js +38 -0
  217. package/test/internals/content-type-parser.test.js +111 -0
  218. package/test/internals/context.test.js +31 -0
  219. package/test/internals/decorator.test.js +156 -0
  220. package/test/internals/errors.test.js +982 -0
  221. package/test/internals/handle-request.test.js +270 -0
  222. package/test/internals/hook-runner.test.js +449 -0
  223. package/test/internals/hooks.test.js +96 -0
  224. package/test/internals/initial-config.test.js +383 -0
  225. package/test/internals/logger.test.js +163 -0
  226. package/test/internals/plugin.test.js +170 -0
  227. package/test/internals/promise.test.js +63 -0
  228. package/test/internals/reply-serialize.test.js +714 -0
  229. package/test/internals/reply.test.js +1920 -0
  230. package/test/internals/req-id-gen-factory.test.js +133 -0
  231. package/test/internals/request-validate.test.js +1402 -0
  232. package/test/internals/request.test.js +506 -0
  233. package/test/internals/schema-controller-perf.test.js +40 -0
  234. package/test/internals/server.test.js +91 -0
  235. package/test/internals/validation.test.js +352 -0
  236. package/test/issue-4959.test.js +118 -0
  237. package/test/keep-alive-timeout.test.js +42 -0
  238. package/test/listen.1.test.js +154 -0
  239. package/test/listen.2.test.js +113 -0
  240. package/test/listen.3.test.js +83 -0
  241. package/test/listen.4.test.js +168 -0
  242. package/test/listen.5.test.js +122 -0
  243. package/test/logger/instantiation.test.js +341 -0
  244. package/test/logger/logger-test-utils.js +47 -0
  245. package/test/logger/logging.test.js +460 -0
  246. package/test/logger/options.test.js +579 -0
  247. package/test/logger/request.test.js +292 -0
  248. package/test/logger/response.test.js +183 -0
  249. package/test/logger/tap-parallel-not-ok +0 -0
  250. package/test/max-requests-per-socket.test.js +113 -0
  251. package/test/middleware.test.js +37 -0
  252. package/test/noop-set.test.js +19 -0
  253. package/test/nullable-validation.test.js +187 -0
  254. package/test/options.error-handler.test.js +5 -0
  255. package/test/options.test.js +5 -0
  256. package/test/output-validation.test.js +140 -0
  257. package/test/patch.error-handler.test.js +5 -0
  258. package/test/patch.test.js +5 -0
  259. package/test/plugin.1.test.js +230 -0
  260. package/test/plugin.2.test.js +314 -0
  261. package/test/plugin.3.test.js +287 -0
  262. package/test/plugin.4.test.js +504 -0
  263. package/test/plugin.helper.js +8 -0
  264. package/test/plugin.name.display.js +10 -0
  265. package/test/post-empty-body.test.js +38 -0
  266. package/test/pretty-print.test.js +366 -0
  267. package/test/promises.test.js +125 -0
  268. package/test/proto-poisoning.test.js +145 -0
  269. package/test/put.error-handler.test.js +5 -0
  270. package/test/put.test.js +5 -0
  271. package/test/register.test.js +184 -0
  272. package/test/reply-code.test.js +148 -0
  273. package/test/reply-early-hints.test.js +100 -0
  274. package/test/reply-error.test.js +815 -0
  275. package/test/reply-trailers.test.js +445 -0
  276. package/test/reply-web-stream-locked.test.js +37 -0
  277. package/test/request-error.test.js +624 -0
  278. package/test/request-header-host.test.js +339 -0
  279. package/test/request-id.test.js +118 -0
  280. package/test/request-timeout.test.js +53 -0
  281. package/test/route-hooks.test.js +635 -0
  282. package/test/route-prefix.test.js +904 -0
  283. package/test/route-shorthand.test.js +48 -0
  284. package/test/route.1.test.js +259 -0
  285. package/test/route.2.test.js +100 -0
  286. package/test/route.3.test.js +213 -0
  287. package/test/route.4.test.js +127 -0
  288. package/test/route.5.test.js +211 -0
  289. package/test/route.6.test.js +306 -0
  290. package/test/route.7.test.js +406 -0
  291. package/test/route.8.test.js +225 -0
  292. package/test/router-options.test.js +1108 -0
  293. package/test/same-shape.test.js +124 -0
  294. package/test/schema-examples.test.js +661 -0
  295. package/test/schema-feature.test.js +2198 -0
  296. package/test/schema-serialization.test.js +1171 -0
  297. package/test/schema-special-usage.test.js +1348 -0
  298. package/test/schema-validation.test.js +1572 -0
  299. package/test/scripts/validate-ecosystem-links.test.js +339 -0
  300. package/test/serialize-response.test.js +186 -0
  301. package/test/server.test.js +347 -0
  302. package/test/set-error-handler.test.js +69 -0
  303. package/test/skip-reply-send.test.js +317 -0
  304. package/test/stream-serializers.test.js +40 -0
  305. package/test/stream.1.test.js +94 -0
  306. package/test/stream.2.test.js +129 -0
  307. package/test/stream.3.test.js +198 -0
  308. package/test/stream.4.test.js +176 -0
  309. package/test/stream.5.test.js +188 -0
  310. package/test/sync-routes.test.js +32 -0
  311. package/test/throw.test.js +359 -0
  312. package/test/toolkit.js +63 -0
  313. package/test/trust-proxy.test.js +162 -0
  314. package/test/type-provider.test.js +22 -0
  315. package/test/types/content-type-parser.test-d.ts +72 -0
  316. package/test/types/decorate-request-reply.test-d.ts +18 -0
  317. package/test/types/dummy-plugin.ts +9 -0
  318. package/test/types/errors.test-d.ts +90 -0
  319. package/test/types/fastify.test-d.ts +352 -0
  320. package/test/types/hooks.test-d.ts +550 -0
  321. package/test/types/import.ts +2 -0
  322. package/test/types/instance.test-d.ts +588 -0
  323. package/test/types/logger.test-d.ts +277 -0
  324. package/test/types/plugin.test-d.ts +97 -0
  325. package/test/types/register.test-d.ts +237 -0
  326. package/test/types/reply.test-d.ts +254 -0
  327. package/test/types/request.test-d.ts +188 -0
  328. package/test/types/route.test-d.ts +553 -0
  329. package/test/types/schema.test-d.ts +135 -0
  330. package/test/types/serverFactory.test-d.ts +37 -0
  331. package/test/types/type-provider.test-d.ts +1213 -0
  332. package/test/types/using.test-d.ts +17 -0
  333. package/test/upgrade.test.js +52 -0
  334. package/test/url-rewriting.test.js +122 -0
  335. package/test/use-semicolon-delimiter.test.js +168 -0
  336. package/test/validation-error-handling.test.js +900 -0
  337. package/test/versioned-routes.test.js +603 -0
  338. package/test/web-api.test.js +616 -0
  339. package/test/wrap-thenable.test.js +30 -0
  340. package/types/content-type-parser.d.ts +75 -0
  341. package/types/context.d.ts +22 -0
  342. package/types/errors.d.ts +92 -0
  343. package/types/hooks.d.ts +875 -0
  344. package/types/instance.d.ts +609 -0
  345. package/types/logger.d.ts +107 -0
  346. package/types/plugin.d.ts +44 -0
  347. package/types/register.d.ts +42 -0
  348. package/types/reply.d.ts +81 -0
  349. package/types/request.d.ts +95 -0
  350. package/types/route.d.ts +199 -0
  351. package/types/schema.d.ts +61 -0
  352. package/types/server-factory.d.ts +19 -0
  353. package/types/type-provider.d.ts +130 -0
  354. package/types/utils.d.ts +98 -0
@@ -0,0 +1,739 @@
1
+ 'use strict'
2
+
3
+ const { test } = require('node:test')
4
+ const Fastify = require('..')
5
+ const keys = require('../lib/symbols')
6
+ const { FST_ERR_CTP_ALREADY_PRESENT, FST_ERR_CTP_INVALID_TYPE, FST_ERR_CTP_INVALID_MEDIA_TYPE } = require('../lib/errors')
7
+
8
+ const first = function (req, payload, done) {}
9
+ const second = function (req, payload, done) {}
10
+ const third = function (req, payload, done) {}
11
+
12
+ test('hasContentTypeParser', async t => {
13
+ await t.test('should know about internal parsers', (t, done) => {
14
+ t.plan(5)
15
+
16
+ const fastify = Fastify()
17
+ fastify.ready(err => {
18
+ t.assert.ifError(err)
19
+ t.assert.ok(fastify.hasContentTypeParser('application/json'))
20
+ t.assert.ok(fastify.hasContentTypeParser('text/plain'))
21
+ t.assert.ok(fastify.hasContentTypeParser(' text/plain '))
22
+ t.assert.ok(!fastify.hasContentTypeParser('application/jsoff'))
23
+ done()
24
+ })
25
+ })
26
+
27
+ await t.test('should only work with string and RegExp', t => {
28
+ t.plan(8)
29
+
30
+ const fastify = Fastify()
31
+ fastify.addContentTypeParser(/^image\/.*/, first)
32
+ fastify.addContentTypeParser(/^application\/.+\+xml/, first)
33
+ fastify.addContentTypeParser('image/gif', first)
34
+
35
+ t.assert.ok(fastify.hasContentTypeParser('application/json'))
36
+ t.assert.ok(fastify.hasContentTypeParser(/^image\/.*/))
37
+ t.assert.ok(fastify.hasContentTypeParser(/^application\/.+\+xml/))
38
+ t.assert.ok(fastify.hasContentTypeParser('image/gif'))
39
+ t.assert.ok(!fastify.hasContentTypeParser(/^image\/.+\+xml/))
40
+ t.assert.ok(!fastify.hasContentTypeParser('image/png'))
41
+ t.assert.ok(!fastify.hasContentTypeParser('*'))
42
+ t.assert.throws(
43
+ () => fastify.hasContentTypeParser(123),
44
+ FST_ERR_CTP_INVALID_TYPE
45
+ )
46
+ })
47
+ })
48
+
49
+ test('getParser', async t => {
50
+ await t.test('should return matching parser', t => {
51
+ t.plan(7)
52
+
53
+ const fastify = Fastify()
54
+
55
+ fastify.addContentTypeParser(/^image\/.*/, first)
56
+ fastify.addContentTypeParser(/^application\/.+\+xml/, second)
57
+ fastify.addContentTypeParser('text/html', third)
58
+ fastify.addContentTypeParser('text/html; charset=utf-8', third)
59
+
60
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('application/t+xml').fn, second)
61
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('image/png').fn, first)
62
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html').fn, third)
63
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html; charset=utf-8').fn, third)
64
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html ; charset=utf-8').fn, third)
65
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html\t; charset=utf-8').fn, third)
66
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/htmlINVALID')?.fn, undefined)
67
+ })
68
+
69
+ await t.test('should return matching parser with caching /1', t => {
70
+ t.plan(7)
71
+
72
+ const fastify = Fastify()
73
+
74
+ fastify.addContentTypeParser('text/html', first)
75
+
76
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 0)
77
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html').fn, first)
78
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
79
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html ').fn, first)
80
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
81
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html ').fn, first)
82
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
83
+ })
84
+
85
+ await t.test('should return matching parser with caching /2', t => {
86
+ t.plan(9)
87
+
88
+ const fastify = Fastify()
89
+
90
+ fastify.addContentTypeParser('text/html', first)
91
+
92
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 0)
93
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html').fn, first)
94
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
95
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/HTML').fn, first)
96
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
97
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('TEXT/html').fn, first)
98
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
99
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('TEXT/html').fn, first)
100
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
101
+ })
102
+
103
+ await t.test('should return matching parser with caching /3', t => {
104
+ t.plan(6)
105
+
106
+ const fastify = Fastify()
107
+
108
+ fastify.addContentTypeParser(/^text\/html(;\s*charset=[^;]+)?$/, first)
109
+
110
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html').fn, first)
111
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 1)
112
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html;charset=utf-8').fn, first)
113
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 2)
114
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html;charset=utf-8').fn, first)
115
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].cache.size, 2)
116
+ })
117
+
118
+ await t.test('should prefer content type parser with string value', t => {
119
+ t.plan(2)
120
+
121
+ const fastify = Fastify()
122
+
123
+ fastify.addContentTypeParser(/^image\/.*/, first)
124
+ fastify.addContentTypeParser('image/gif', second)
125
+
126
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('image/gif').fn, second)
127
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('image/png').fn, first)
128
+ })
129
+
130
+ await t.test('should return parser that catches all if no other is set', t => {
131
+ t.plan(2)
132
+
133
+ const fastify = Fastify()
134
+
135
+ fastify.addContentTypeParser('*', first)
136
+ fastify.addContentTypeParser(/^text\/.*/, second)
137
+
138
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('image/gif').fn, first)
139
+ t.assert.strictEqual(fastify[keys.kContentTypeParser].getParser('text/html').fn, second)
140
+ })
141
+
142
+ await t.test('should return undefined if no matching parser exist', t => {
143
+ t.plan(2)
144
+
145
+ const fastify = Fastify()
146
+
147
+ fastify.addContentTypeParser(/^weirdType\/.+/, first)
148
+ fastify.addContentTypeParser('application/javascript', first)
149
+
150
+ t.assert.ok(!fastify[keys.kContentTypeParser].getParser('application/xml'))
151
+ t.assert.ok(!fastify[keys.kContentTypeParser].getParser('weirdType/'))
152
+ })
153
+ })
154
+
155
+ test('existingParser', async t => {
156
+ await t.test('returns always false for "*"', t => {
157
+ t.plan(2)
158
+
159
+ const fastify = Fastify()
160
+
161
+ fastify.addContentTypeParser(/^image\/.*/, first)
162
+ fastify.addContentTypeParser(/^application\/.+\+xml/, first)
163
+ fastify.addContentTypeParser('text/html', first)
164
+
165
+ t.assert.ok(!fastify[keys.kContentTypeParser].existingParser('*'))
166
+
167
+ fastify.addContentTypeParser('*', first)
168
+
169
+ t.assert.ok(!fastify[keys.kContentTypeParser].existingParser('*'))
170
+ })
171
+
172
+ await t.test('let you override the default parser once', t => {
173
+ t.plan(2)
174
+
175
+ const fastify = Fastify()
176
+
177
+ fastify.addContentTypeParser('application/json', first)
178
+ fastify.addContentTypeParser('text/plain', first)
179
+
180
+ t.assert.throws(
181
+ () => fastify.addContentTypeParser('application/json', first),
182
+ FST_ERR_CTP_ALREADY_PRESENT
183
+ )
184
+ t.assert.throws(
185
+ () => fastify.addContentTypeParser('text/plain', first),
186
+ FST_ERR_CTP_ALREADY_PRESENT
187
+ )
188
+ })
189
+
190
+ const fastify = Fastify()
191
+ const contentTypeParser = fastify[keys.kContentTypeParser]
192
+
193
+ fastify.addContentTypeParser(/^image\/.*/, first)
194
+ fastify.addContentTypeParser(/^application\/.+\+xml/, first)
195
+ fastify.addContentTypeParser('text/html', first)
196
+
197
+ t.assert.ok(contentTypeParser.existingParser(/^image\/.*/))
198
+ t.assert.ok(contentTypeParser.existingParser('text/html'))
199
+ t.assert.ok(contentTypeParser.existingParser(/^application\/.+\+xml/))
200
+ t.assert.ok(!contentTypeParser.existingParser('application/json'))
201
+ t.assert.ok(!contentTypeParser.existingParser('text/plain'))
202
+ t.assert.ok(!contentTypeParser.existingParser('image/png'))
203
+ t.assert.ok(!contentTypeParser.existingParser(/^application\/.+\+json/))
204
+ })
205
+
206
+ test('add', async t => {
207
+ await t.test('should only accept string and RegExp', t => {
208
+ t.plan(4)
209
+
210
+ const fastify = Fastify()
211
+ const contentTypeParser = fastify[keys.kContentTypeParser]
212
+
213
+ t.assert.ifError(contentTypeParser.add('test/type', {}, first))
214
+ t.assert.ifError(contentTypeParser.add(/test/, {}, first))
215
+ t.assert.throws(
216
+ () => contentTypeParser.add({}, {}, first),
217
+ FST_ERR_CTP_INVALID_TYPE,
218
+ 'The content type should be a string or a RegExp'
219
+ )
220
+ t.assert.throws(
221
+ () => contentTypeParser.add(1, {}, first),
222
+ FST_ERR_CTP_INVALID_TYPE,
223
+ 'The content type should be a string or a RegExp'
224
+ )
225
+ })
226
+
227
+ await t.test('should set "*" as parser that catches all', t => {
228
+ t.plan(1)
229
+
230
+ const fastify = Fastify()
231
+ const contentTypeParser = fastify[keys.kContentTypeParser]
232
+
233
+ contentTypeParser.add('*', {}, first)
234
+ t.assert.strictEqual(contentTypeParser.customParsers.get('').fn, first)
235
+ })
236
+
237
+ await t.test('should lowercase contentTypeParser name', async t => {
238
+ t.plan(1)
239
+ const fastify = Fastify()
240
+ fastify.addContentTypeParser('text/html', function (req, done) {
241
+ done()
242
+ })
243
+ try {
244
+ fastify.addContentTypeParser('TEXT/html', function (req, done) {
245
+ done()
246
+ })
247
+ } catch (err) {
248
+ t.assert.strictEqual(err.message, FST_ERR_CTP_ALREADY_PRESENT('text/html').message)
249
+ }
250
+ })
251
+
252
+ await t.test('should trim contentTypeParser name', async t => {
253
+ t.plan(1)
254
+ const fastify = Fastify()
255
+ fastify.addContentTypeParser('text/html', function (req, done) {
256
+ done()
257
+ })
258
+ try {
259
+ fastify.addContentTypeParser(' text/html', function (req, done) {
260
+ done()
261
+ })
262
+ } catch (err) {
263
+ t.assert.strictEqual(err.message, FST_ERR_CTP_ALREADY_PRESENT('text/html').message)
264
+ }
265
+ })
266
+ })
267
+
268
+ test('non-Error thrown from content parser is properly handled', (t, done) => {
269
+ t.plan(3)
270
+
271
+ const fastify = Fastify()
272
+
273
+ const throwable = 'test'
274
+ const payload = 'error'
275
+
276
+ fastify.addContentTypeParser('text/test', (request, payload, done) => {
277
+ done(throwable)
278
+ })
279
+
280
+ fastify.post('/', (req, reply) => {
281
+ })
282
+
283
+ fastify.setErrorHandler((err, req, res) => {
284
+ t.assert.strictEqual(err, throwable)
285
+
286
+ res.send(payload)
287
+ })
288
+
289
+ fastify.inject({
290
+ method: 'POST',
291
+ url: '/',
292
+ headers: { 'Content-Type': 'text/test' },
293
+ body: 'some text'
294
+ }, (err, res) => {
295
+ t.assert.ifError(err)
296
+ t.assert.strictEqual(res.payload, payload)
297
+ done()
298
+ })
299
+ })
300
+
301
+ test('Error thrown 415 from content type is null and make post request to server', (t, done) => {
302
+ t.plan(3)
303
+
304
+ const fastify = Fastify()
305
+ const errMsg = new FST_ERR_CTP_INVALID_MEDIA_TYPE().message
306
+
307
+ fastify.post('/', (req, reply) => {
308
+ })
309
+
310
+ fastify.inject({
311
+ method: 'POST',
312
+ url: '/',
313
+ body: 'some text'
314
+ }, (err, res) => {
315
+ t.assert.ifError(err)
316
+ t.assert.strictEqual(res.statusCode, 415)
317
+ t.assert.strictEqual(JSON.parse(res.body).message, errMsg)
318
+ done()
319
+ })
320
+ })
321
+
322
+ test('remove', async t => {
323
+ await t.test('should remove default parser', t => {
324
+ t.plan(6)
325
+
326
+ const fastify = Fastify()
327
+ const contentTypeParser = fastify[keys.kContentTypeParser]
328
+
329
+ t.assert.ok(contentTypeParser.remove('application/json'))
330
+ t.assert.ok(!contentTypeParser.customParsers['application/json'])
331
+ t.assert.ok(!contentTypeParser.parserList.find(parser => parser === 'application/json'))
332
+ t.assert.ok(contentTypeParser.remove(' text/plain '))
333
+ t.assert.ok(!contentTypeParser.customParsers['text/plain'])
334
+ t.assert.ok(!contentTypeParser.parserList.find(parser => parser === 'text/plain'))
335
+ })
336
+
337
+ await t.test('should remove RegExp parser', t => {
338
+ t.plan(3)
339
+
340
+ const fastify = Fastify()
341
+ fastify.addContentTypeParser(/^text\/*/, first)
342
+
343
+ const contentTypeParser = fastify[keys.kContentTypeParser]
344
+
345
+ t.assert.ok(contentTypeParser.remove(/^text\/*/))
346
+ t.assert.ok(!contentTypeParser.customParsers[/^text\/*/])
347
+ t.assert.ok(!contentTypeParser.parserRegExpList.find(parser => parser.toString() === /^text\/*/.toString()))
348
+ })
349
+
350
+ await t.test('should throw an error if content type is neither string nor RegExp', t => {
351
+ t.plan(1)
352
+
353
+ const fastify = Fastify()
354
+
355
+ t.assert.throws(() => fastify[keys.kContentTypeParser].remove(12), FST_ERR_CTP_INVALID_TYPE)
356
+ })
357
+
358
+ await t.test('should return false if content type does not exist', t => {
359
+ t.plan(1)
360
+
361
+ const fastify = Fastify()
362
+
363
+ t.assert.ok(!fastify[keys.kContentTypeParser].remove('image/png'))
364
+ })
365
+
366
+ await t.test('should not remove any content type parser if content type does not exist', t => {
367
+ t.plan(2)
368
+
369
+ const fastify = Fastify()
370
+
371
+ const contentTypeParser = fastify[keys.kContentTypeParser]
372
+
373
+ t.assert.ok(!contentTypeParser.remove('image/png'))
374
+ t.assert.strictEqual(contentTypeParser.customParsers.size, 2)
375
+ })
376
+ })
377
+
378
+ test('remove all should remove all existing parsers and reset cache', t => {
379
+ t.plan(4)
380
+
381
+ const fastify = Fastify()
382
+ fastify.addContentTypeParser('application/xml', first)
383
+ fastify.addContentTypeParser(/^image\/.*/, first)
384
+
385
+ const contentTypeParser = fastify[keys.kContentTypeParser]
386
+
387
+ contentTypeParser.getParser('application/xml') // fill cache with one entry
388
+ contentTypeParser.removeAll()
389
+
390
+ t.assert.strictEqual(contentTypeParser.cache.size, 0)
391
+ t.assert.strictEqual(contentTypeParser.parserList.length, 0)
392
+ t.assert.strictEqual(contentTypeParser.parserRegExpList.length, 0)
393
+ t.assert.strictEqual(Object.keys(contentTypeParser.customParsers).length, 0)
394
+ })
395
+
396
+ test('Safeguard against malicious content-type / 1', async t => {
397
+ const badNames = Object.getOwnPropertyNames({}.__proto__) // eslint-disable-line
398
+ t.plan(badNames.length)
399
+
400
+ const fastify = Fastify()
401
+
402
+ fastify.post('/', async () => {
403
+ return 'ok'
404
+ })
405
+
406
+ for (const prop of badNames) {
407
+ const response = await fastify.inject({
408
+ method: 'POST',
409
+ path: '/',
410
+ headers: {
411
+ 'content-type': prop
412
+ },
413
+ body: ''
414
+ })
415
+
416
+ t.assert.strictEqual(response.statusCode, 415)
417
+ }
418
+ })
419
+
420
+ test('Safeguard against malicious content-type / 2', async t => {
421
+ t.plan(1)
422
+
423
+ const fastify = Fastify()
424
+
425
+ fastify.post('/', async () => {
426
+ return 'ok'
427
+ })
428
+
429
+ const response = await fastify.inject({
430
+ method: 'POST',
431
+ path: '/',
432
+ headers: {
433
+ 'content-type': '\\u0063\\u006fnstructor'
434
+ },
435
+ body: ''
436
+ })
437
+
438
+ t.assert.strictEqual(response.statusCode, 415)
439
+ })
440
+
441
+ test('Safeguard against malicious content-type / 3', async t => {
442
+ t.plan(1)
443
+
444
+ const fastify = Fastify()
445
+
446
+ fastify.post('/', async () => {
447
+ return 'ok'
448
+ })
449
+
450
+ const response = await fastify.inject({
451
+ method: 'POST',
452
+ path: '/',
453
+ headers: {
454
+ 'content-type': 'constructor; charset=utf-8'
455
+ },
456
+ body: ''
457
+ })
458
+
459
+ t.assert.strictEqual(response.statusCode, 415)
460
+ })
461
+
462
+ test('Safeguard against content-type spoofing - string', async t => {
463
+ t.plan(1)
464
+
465
+ const fastify = Fastify()
466
+ fastify.removeAllContentTypeParsers()
467
+ fastify.addContentTypeParser('text/plain', function (request, body, done) {
468
+ t.assert.ok('should be called')
469
+ done(null, body)
470
+ })
471
+ fastify.addContentTypeParser('application/json', function (request, body, done) {
472
+ t.assert.fail('shouldn\'t be called')
473
+ done(null, body)
474
+ })
475
+
476
+ fastify.post('/', async () => {
477
+ return 'ok'
478
+ })
479
+
480
+ await fastify.inject({
481
+ method: 'POST',
482
+ path: '/',
483
+ headers: {
484
+ 'content-type': 'text/plain; content-type="application/json"'
485
+ },
486
+ body: ''
487
+ })
488
+ })
489
+
490
+ test('Warning against improper content-type - regexp', async t => {
491
+ await t.test('improper regex - text plain', (t, done) => {
492
+ t.plan(2)
493
+ const fastify = Fastify()
494
+
495
+ process.on('warning', onWarning)
496
+ function onWarning (warning) {
497
+ t.assert.strictEqual(warning.name, 'FastifySecurity')
498
+ t.assert.strictEqual(warning.code, 'FSTSEC001')
499
+ done()
500
+ }
501
+ t.after(() => process.removeListener('warning', onWarning))
502
+
503
+ fastify.removeAllContentTypeParsers()
504
+ fastify.addContentTypeParser(/text\/plain/, function (request, body, done) {
505
+ done(null, body)
506
+ })
507
+ })
508
+
509
+ await t.test('improper regex - application json', (t, done) => {
510
+ t.plan(2)
511
+ const fastify = Fastify()
512
+
513
+ process.on('warning', onWarning)
514
+ function onWarning (warning) {
515
+ t.assert.strictEqual(warning.name, 'FastifySecurity')
516
+ t.assert.strictEqual(warning.code, 'FSTSEC001')
517
+ done()
518
+ }
519
+ t.after(() => process.removeListener('warning', onWarning))
520
+
521
+ fastify.removeAllContentTypeParsers()
522
+
523
+ fastify.addContentTypeParser(/application\/json/, function (request, body, done) {
524
+ done(null, body)
525
+ })
526
+ })
527
+ })
528
+
529
+ test('content-type match parameters - string 1', async t => {
530
+ t.plan(1)
531
+
532
+ const fastify = Fastify()
533
+ fastify.removeAllContentTypeParsers()
534
+ fastify.addContentTypeParser('text/plain; charset=utf8', function (request, body, done) {
535
+ t.assert.fail('shouldn\'t be called')
536
+ done(null, body)
537
+ })
538
+ fastify.addContentTypeParser('application/json; charset=utf8', function (request, body, done) {
539
+ t.assert.ok('should be called')
540
+ done(null, body)
541
+ })
542
+
543
+ fastify.post('/', async () => {
544
+ return 'ok'
545
+ })
546
+
547
+ await fastify.inject({
548
+ method: 'POST',
549
+ path: '/',
550
+ headers: {
551
+ 'content-type': 'application/json; charset=utf8'
552
+ },
553
+ body: ''
554
+ })
555
+ })
556
+
557
+ test('content-type match parameters - regexp', async t => {
558
+ t.plan(1)
559
+
560
+ const fastify = Fastify()
561
+ fastify.removeAllContentTypeParsers()
562
+ fastify.addContentTypeParser(/application\/json; charset="utf8"/, function (request, body, done) {
563
+ t.assert.ok('should be called')
564
+ done(null, body)
565
+ })
566
+
567
+ fastify.post('/', async () => {
568
+ return 'ok'
569
+ })
570
+
571
+ await fastify.inject({
572
+ method: 'POST',
573
+ path: '/',
574
+ headers: {
575
+ 'content-type': 'application/json; charset=utf8'
576
+ },
577
+ body: ''
578
+ })
579
+ })
580
+
581
+ test('content-type fail when parameters not match - string 1', async t => {
582
+ t.plan(1)
583
+
584
+ const fastify = Fastify()
585
+ fastify.removeAllContentTypeParsers()
586
+ fastify.addContentTypeParser('application/json; charset=utf8; foo=bar', function (request, body, done) {
587
+ t.assert.fail('shouldn\'t be called')
588
+ done(null, body)
589
+ })
590
+
591
+ fastify.post('/', async () => {
592
+ return 'ok'
593
+ })
594
+
595
+ const response = await fastify.inject({
596
+ method: 'POST',
597
+ path: '/',
598
+ headers: {
599
+ 'content-type': 'application/json; charset=utf8'
600
+ },
601
+ body: ''
602
+ })
603
+
604
+ t.assert.strictEqual(response.statusCode, 415)
605
+ })
606
+
607
+ test('content-type fail when parameters not match - string 2', async t => {
608
+ t.plan(1)
609
+
610
+ const fastify = Fastify()
611
+ fastify.removeAllContentTypeParsers()
612
+ fastify.addContentTypeParser('application/json; charset=utf8; foo=bar', function (request, body, done) {
613
+ t.assert.fail('shouldn\'t be called')
614
+ done(null, body)
615
+ })
616
+
617
+ fastify.post('/', async () => {
618
+ return 'ok'
619
+ })
620
+
621
+ const response = await fastify.inject({
622
+ method: 'POST',
623
+ path: '/',
624
+ headers: {
625
+ 'content-type': 'application/json; charset=utf8; foo=baz'
626
+ },
627
+ body: ''
628
+ })
629
+
630
+ t.assert.strictEqual(response.statusCode, 415)
631
+ })
632
+
633
+ test('content-type fail when parameters not match - regexp', async t => {
634
+ t.plan(1)
635
+
636
+ const fastify = Fastify()
637
+ fastify.removeAllContentTypeParsers()
638
+ fastify.addContentTypeParser(/application\/json; charset=utf8; foo=bar/, function (request, body, done) {
639
+ t.assert.fail('shouldn\'t be called')
640
+ done(null, body)
641
+ })
642
+
643
+ fastify.post('/', async () => {
644
+ return 'ok'
645
+ })
646
+
647
+ const response = await fastify.inject({
648
+ method: 'POST',
649
+ path: '/',
650
+ headers: {
651
+ 'content-type': 'application/json; charset=utf8'
652
+ },
653
+ body: ''
654
+ })
655
+
656
+ t.assert.strictEqual(response.statusCode, 415)
657
+ })
658
+
659
+ // Refs: https://github.com/fastify/fastify/issues/4495
660
+ test('content-type regexp list should be cloned when plugin override', async t => {
661
+ t.plan(6)
662
+
663
+ const fastify = Fastify()
664
+
665
+ fastify.addContentTypeParser(/^image\/.*/, { parseAs: 'buffer' }, (req, payload, done) => {
666
+ done(null, payload)
667
+ })
668
+
669
+ fastify.register(function plugin (fastify, options, done) {
670
+ fastify.post('/', function (request, reply) {
671
+ reply.type(request.headers['content-type']).send(request.body)
672
+ })
673
+
674
+ done()
675
+ })
676
+
677
+ {
678
+ const { payload, headers, statusCode } = await fastify.inject({
679
+ method: 'POST',
680
+ path: '/',
681
+ payload: 'jpeg',
682
+ headers: { 'content-type': 'image/jpeg' }
683
+ })
684
+ t.assert.strictEqual(statusCode, 200)
685
+ t.assert.strictEqual(headers['content-type'], 'image/jpeg')
686
+ t.assert.strictEqual(payload, 'jpeg')
687
+ }
688
+
689
+ {
690
+ const { payload, headers, statusCode } = await fastify.inject({
691
+ method: 'POST',
692
+ path: '/',
693
+ payload: 'png',
694
+ headers: { 'content-type': 'image/png' }
695
+ })
696
+ t.assert.strictEqual(statusCode, 200)
697
+ t.assert.strictEqual(headers['content-type'], 'image/png')
698
+ t.assert.strictEqual(payload, 'png')
699
+ }
700
+ })
701
+
702
+ test('invalid content-type error message should not contain format placeholder', (t, done) => {
703
+ t.plan(4)
704
+
705
+ const fastify = Fastify()
706
+
707
+ fastify.post('/', (req, reply) => {
708
+ reply.send('ok')
709
+ })
710
+
711
+ fastify.inject({
712
+ method: 'POST',
713
+ url: '/',
714
+ headers: { 'Content-Type': 'invalid-content-type' },
715
+ body: 'test'
716
+ }, (err, res) => {
717
+ t.assert.ifError(err)
718
+ t.assert.strictEqual(res.statusCode, 415)
719
+ const body = JSON.parse(res.body)
720
+ t.assert.strictEqual(body.code, 'FST_ERR_CTP_INVALID_MEDIA_TYPE')
721
+ t.assert.strictEqual(body.message, 'Unsupported Media Type')
722
+ done()
723
+ })
724
+ })
725
+
726
+ test('content-type fail when not a valid type', async t => {
727
+ t.plan(1)
728
+
729
+ const fastify = Fastify()
730
+ fastify.removeAllContentTypeParsers()
731
+ try {
732
+ fastify.addContentTypeParser('type-only', function (request, body, done) {
733
+ t.assert.fail('shouldn\'t be called')
734
+ done(null, body)
735
+ })
736
+ } catch (error) {
737
+ t.assert.equal(error.message, 'The content type should be a string or a RegExp')
738
+ }
739
+ })