rpc-express-toolkit 2.0.3 → 2.2.0

package/README.md

@@ -2,7 +2,7 @@
 
 [![License](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![npm version](https://img.shields.io/npm/v/rpc-express-toolkit.svg)](https://www.npmjs.com/package/rpc-express-toolkit)
-[![Build Status](https://github.com/n-car/rpc-express-toolkit/actions/workflows/main.yml/badge.svg)](https://github.com/n-car/rpc-express-toolkit/actions)
+[![Build Status](https://github.com/n-car/rpc-express-toolkit/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/n-car/rpc-express-toolkit/actions/workflows/ci.yml)
 [![Coverage Status](https://coveralls.io/repos/github/n-car/rpc-express-toolkit/badge.svg?branch=main)](https://coveralls.io/github/n-car/rpc-express-toolkit?branch=main)
 
 An enterprise-ready JSON-RPC 2.0 toolkit for Express.js applications with simplified APIs, structured logging, middleware system, schema validation, batch processing, and comprehensive BigInt/Date serialization support.
@@ -514,6 +514,43 @@ logger.error('Database error', {
 // [2024-01-01T10:00:00.050Z] INFO: RPC success - {"method":"getUser","id":"req-123","duration":50,"resultSize":245}
 ```
 
+### Client Configuration
+
+The `RpcClient` supports various configuration options for different environments, **inclusa la gestione di certificati self-signed**:
+
+```javascript
+const fs = require('fs');
+const { RpcClient } = require('rpc-express-toolkit');
+
+// Basic client
+const client = new RpcClient('https://api.example.com/rpc');
+
+// Client con header personalizzati
+const clientWithHeaders = new RpcClient('https://api.example.com/rpc', {
+    'Authorization': 'Bearer your-token',
+    'X-API-Key': 'your-api-key',
+    'User-Agent': 'MyApp/1.0'
+});
+
+// Client per sviluppo con certificato self-signed (accetta qualsiasi certificato, NON usare in produzione)
+const devClient = new RpcClient('https://localhost:3000/api', {
+    'Authorization': 'Bearer dev-token'
+}, {
+    rejectUnauthorized: false // Solo per sviluppo!
+});
+
+// Client per sviluppo con CA self-signed (modo sicuro: accetta solo la tua CA)
+const ca = fs.readFileSync('path/to/your/selfsigned-ca.pem');
+const devClientWithCA = new RpcClient('https://localhost:3000/api', {
+    'Authorization': 'Bearer dev-token'
+}, {
+    ca // Passa il certificato della tua CA self-signed
+    // oppure: agent: new require('https').Agent({ ca, rejectUnauthorized: true })
+});
+```
+
+**⚠️ Security Warning**: Usa `rejectUnauthorized: false` solo in sviluppo. Per maggiore sicurezza, preferisci sempre la soluzione con `ca` per accettare solo la tua CA self-signed. In produzione usa sempre certificati validi e firmati da una CA attendibile.
+
 ### Built-in Middlewares
 
 ```javascript

package/examples/ssl-development-example.js

@@ -0,0 +1,83 @@
+/**
+ * Example demonstrating how to use RpcClient with self-signed certificates
+ * in development environments.
+ * 
+ * WARNING: Only use rejectUnauthorized: false in development!
+ * Never use this in production as it disables SSL certificate validation.
+ */
+
+const { RpcClient } = require('../src/index.js');
+
+async function demonstrateSSLOptions() {
+  console.log('=== RPC Client SSL Configuration Example ===\n');
+
+  // Example 1: Standard production client (default - strict SSL)
+  console.log('1. Production Client (strict SSL validation):');
+  const productionClient = new RpcClient('https://api.example.com/rpc', {
+    'Authorization': 'Bearer prod-token'
+  });
+  console.log('   ✓ Created client with strict SSL validation (default)\n');
+
+
+  // Example 2: Development client for self-signed certificates (bypasses ALL SSL validation)
+  console.log('2. Development Client (bypasses SSL validation):');
+  const developmentClient = new RpcClient('https://localhost:3000/api', {
+    'Authorization': 'Bearer dev-token',
+    'X-Environment': 'development'
+  }, {
+    rejectUnauthorized: false // Solo per sviluppo!
+  });
+  console.log('   ✓ Created client that bypasses SSL certificate validation');
+  console.log('   ⚠️  WARNING: Only use this for development with self-signed certificates!\n');
+
+  // Example 3: Development client with custom CA (accepts only your self-signed CA)
+  console.log('3. Development Client with custom CA:');
+  const fs = require('fs');
+  const ca = fs.readFileSync('path/to/your/selfsigned-ca.pem');
+  const devClientWithCA = new RpcClient('https://localhost:3000/api', {
+    'Authorization': 'Bearer dev-token',
+    'X-Environment': 'development'
+  }, {
+    ca // Passa il certificato della tua CA self-signed
+  });
+  console.log('   ✓ Created client that accepts only your self-signed CA');
+  console.log('   ⚠️  WARNING: This is safer than disabling validation, but use valid certificates in production!\n');
+
+  // Example 4: Demonstrate how to choose configuration based on environment
+  console.log('4. Environment-based Configuration:');
+  const isDevelopment = process.env.NODE_ENV === 'development';
+  const baseUrl = isDevelopment ? 'https://localhost:3000/api' : 'https://api.production.com/rpc';
+  const environmentClient = new RpcClient(baseUrl, {
+    'Authorization': `Bearer ${process.env.API_TOKEN || 'default-token'}`,
+    'X-Environment': process.env.NODE_ENV || 'development'
+  }, isDevelopment ? { ca } : {});
+  console.log(`   ✓ Created client for ${isDevelopment ? 'development' : 'production'} environment`);
+  console.log(`   ✓ SSL validation: ${isDevelopment ? 'custom CA (dev only)' : 'enabled (secure)'}\n`);
+
+  // Example usage (commented out since we don't have a real server)
+  /*
+  try {
+    // This would work with a real server
+    const result = await developmentClient.call('ping', {});
+    console.log('Server response:', result);
+  } catch (error) {
+    console.error('Error calling server:', error.message);
+  }
+  */
+
+  console.log('4. Best Practices:');
+  console.log('   ✓ Always use strict SSL validation in production');
+  console.log('   ✓ Only disable SSL validation for development with self-signed certificates');
+  console.log('   ✓ Use environment variables to control SSL behavior');
+  console.log('   ✓ Never commit rejectUnauthorized: false to production code');
+  console.log('   ✓ Consider using proper development certificates instead of disabling validation\n');
+
+  console.log('=== Example Complete ===');
+}
+
+// Run the example if this file is executed directly
+if (require.main === module) {
+  demonstrateSSLOptions().catch(console.error);
+}
+
+module.exports = { demonstrateSSLOptions };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rpc-express-toolkit",
-  "version": "2.0.3",
+  "version": "2.2.0",
   "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, and comprehensive BigInt/Date support.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -12,6 +12,8 @@
   ],
   "scripts": {
     "test": "jest",
+    "test:coverage": "jest --coverage",
+    "test:watch": "jest --watch",
     "lint": "eslint src/ examples/",
     "lint:fix": "eslint src/ examples/ --fix",
     "clean": "node -e \"require('fs').existsSync('dist') && require('fs').rmSync('dist', {recursive: true})\"",

package/src/clients/rpc-client.js

@@ -33,12 +33,15 @@ class RpcClient {
   #endpoint;
   #defaultHeaders;
   #requestId;
+  #fetchOptions;
 
   /**
    * @param {string} endpoint The JSON-RPC endpoint URL.
    * @param {Object} [defaultHeaders={}] Optional default headers to include in requests.
+   * @param {Object} [options={}] Optional configuration options.
+   * @param {boolean} [options.rejectUnauthorized=true] Whether to reject unauthorized SSL certificates. Set to false for development with self-signed certificates.
    */
-  constructor(endpoint, defaultHeaders = {}) {
+  constructor(endpoint, defaultHeaders = {}, options = {}) {
     this.#endpoint = endpoint;
     this.#defaultHeaders = {
       "Content-Type": "application/json", // Default header
@@ -46,6 +49,32 @@ class RpcClient {
     };
     // Initialize request ID counter with timestamp + random component for uniqueness
     this.#requestId = Date.now() * 1000 + Math.floor(Math.random() * 1000);
+    
+    // Store fetch options for Node.js environments
+    this.#fetchOptions = {};
+    // Support for custom https.Agent (e.g. for self-signed CA)
+    if (typeof process !== 'undefined' && process.env && typeof require !== 'undefined') {
+      try {
+        const https = require('https');
+        // If options.agent is provided, use it directly
+        if (options.agent) {
+          this.#fetchOptions.agent = options.agent;
+        } else if (options.ca) {
+          // If options.ca is provided, create an agent with the custom CA
+          this.#fetchOptions.agent = new https.Agent({
+            ca: options.ca,
+            rejectUnauthorized: options.rejectUnauthorized !== false // true by default
+          });
+        } else if (options.rejectUnauthorized === false) {
+          // Legacy: allow disabling SSL validation for dev
+          this.#fetchOptions.agent = new https.Agent({
+            rejectUnauthorized: false
+          });
+        }
+      } catch (e) {
+        // Ignore if https module is not available
+      }
+    }
   }
 
   /**
@@ -85,6 +114,7 @@ class RpcClient {
         // Since we have BigInt.prototype.toJSON, we don't need manual serialization
         // JSON.stringify will handle BigInt and Date automatically
         body: JSON.stringify(requestBody),
+        ...this.#fetchOptions, // Include any additional fetch options (e.g., SSL settings)
       });
 
       if (!response.ok) {
@@ -136,6 +166,7 @@ class RpcClient {
           ...overrideHeaders,
         },
         body: JSON.stringify(batchRequests),
+        ...this.#fetchOptions, // Include any additional fetch options (e.g., SSL settings)
       });
 
       if (!response.ok) {

package/src/clients/rpc-client.min.js

@@ -1 +1 @@
-let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;constructor(t,e={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random())}#i(){return++this.#r}async call(t,e={},r=void 0,i={}){const s={jsonrpc:"2.0",method:t,params:e,id:void 0===r?this.#i():r};try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s)});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>({jsonrpc:"2.0",method:t.method,params:t.params||{},id:void 0!==t.id?t.id:this.#i()}));try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r)});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;
+let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){if(this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={},"undefined"!=typeof process&&process.env&&"undefined"!=typeof require)try{const t=require("https");r.agent?this.#i.agent=r.agent:r.ca?this.#i.agent=new t.Agent({ca:r.ca,rejectUnauthorized:!1!==r.rejectUnauthorized}):!1===r.rejectUnauthorized&&(this.#i.agent=new t.Agent({rejectUnauthorized:!1}))}catch(t){}}#n(){return++this.#r}async call(t,e={},r=void 0,i={}){const n={jsonrpc:"2.0",method:t,params:e,id:void 0===r?this.#n():r};try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(n),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>({jsonrpc:"2.0",method:t.method,params:t.params||{},id:void 0!==t.id?t.id:this.#n()}));try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;

package/src/clients/rpc-client.min.mjs

@@ -1 +1 @@
-let t;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)t=fetch;else try{const{default:e}=await import("node-fetch");t=e}catch(e){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");t=globalThis.fetch}export class RpcClient{#t;#e;#r;constructor(t,e={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random())}async call(e,r={},s=null,i={}){null===s&&(s=++this.#r);const n={jsonrpc:"2.0",method:e,params:r,id:s};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(n)});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const r=await e.json();if(r.error)throw r.error;return this.deserializeBigIntsAndDates(r.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(e,r={},s={}){const i={jsonrpc:"2.0",method:e,params:r};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...s},body:JSON.stringify(i)});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`)}catch(t){throw console.error("RPC notification failed:",t),t}}async batch(e,r={}){const s=e.map(t=>{const e={jsonrpc:"2.0",method:t.method,params:t.params||{}};return t.notification||(e.id=void 0!==t.id?t.id:++this.#r),e});try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...r},body:JSON.stringify(s)});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const i=await e.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("RPC batch call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,s]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(s);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}
+let t;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)t=fetch;else try{const{default:e}=await import("node-fetch");t=e}catch(e){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");t=globalThis.fetch}export class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){if(this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={},"undefined"!=typeof process&&process.env&&!1===r.rejectUnauthorized&&"undefined"!=typeof require)try{const t=require("https");this.#i.agent=new t.Agent({rejectUnauthorized:!1})}catch(t){import("https").then(t=>{this.#i.agent=new t.Agent({rejectUnauthorized:!1})}).catch(()=>{})}}async call(e,r={},i=null,s={}){null===i&&(i=++this.#r);const n={jsonrpc:"2.0",method:e,params:r,id:i};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...s},body:JSON.stringify(n),...this.#i});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const r=await e.json();if(r.error)throw r.error;return this.deserializeBigIntsAndDates(r.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(e,r={},i={}){const s={jsonrpc:"2.0",method:e,params:r};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`)}catch(t){throw console.error("RPC notification failed:",t),t}}async batch(e,r={}){const i=e.map(t=>{const e={jsonrpc:"2.0",method:t.method,params:t.params||{}};return t.notification||(e.id=void 0!==t.id?t.id:++this.#r),e});try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...r},body:JSON.stringify(i),...this.#i});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const s=await e.json();if(Array.isArray(s))return s.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(s.error)throw s.error;return[this.deserializeBigIntsAndDates(s.result)]}catch(t){throw console.error("RPC batch call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}

package/src/clients/rpc-client.mjs

@@ -34,12 +34,15 @@ export class RpcClient {
   #endpoint;
   #defaultHeaders;
   #requestId;
+  #fetchOptions;
 
   /**
    * @param {string} endpoint The JSON-RPC endpoint URL.
    * @param {Object} [defaultHeaders={}] Optional default headers to include in requests.
+   * @param {Object} [options={}] Optional configuration options.
+   * @param {boolean} [options.rejectUnauthorized=true] Whether to reject unauthorized SSL certificates. Set to false for development with self-signed certificates.
    */
-  constructor(endpoint, defaultHeaders = {}) {
+  constructor(endpoint, defaultHeaders = {}, options = {}) {
     this.#endpoint = endpoint;
     this.#defaultHeaders = {
       "Content-Type": "application/json", // Default header
@@ -47,6 +50,31 @@ export class RpcClient {
     };
     // Initialize request ID counter with timestamp + random component for uniqueness
     this.#requestId = Date.now() * 1000 + Math.floor(Math.random() * 1000);
+    
+    // Store fetch options for Node.js environments
+    this.#fetchOptions = {};
+    
+    // Handle SSL certificate validation option for Node.js
+    if (typeof process !== 'undefined' && process.env && options.rejectUnauthorized === false) {
+      // Set up agent for Node.js fetch implementations
+      if (typeof require !== 'undefined') {
+        try {
+          const https = require('https');
+          this.#fetchOptions.agent = new https.Agent({
+            rejectUnauthorized: false
+          });
+        } catch (e) {
+          // For ES modules, we'll try dynamic import
+          import('https').then(httpsModule => {
+            this.#fetchOptions.agent = new httpsModule.Agent({
+              rejectUnauthorized: false
+            });
+          }).catch(() => {
+            // Ignore if https module is not available
+          });
+        }
+      }
+    }
   }
 
   /**
@@ -80,6 +108,7 @@ export class RpcClient {
         // Since we have BigInt.prototype.toJSON, we don't need manual serialization
         // JSON.stringify will handle BigInt and Date automatically
         body: JSON.stringify(requestBody),
+        ...this.#fetchOptions, // Include any additional fetch options (e.g., SSL settings)
       });
 
       if (!response.ok) {
@@ -121,6 +150,7 @@ export class RpcClient {
           ...overrideHeaders,
         },
         body: JSON.stringify(requestBody),
+        ...this.#fetchOptions, // Include any additional fetch options (e.g., SSL settings)
       });
 
       if (!response.ok) {
@@ -162,6 +192,7 @@ export class RpcClient {
           ...overrideHeaders,
         },
         body: JSON.stringify(requestBodies),
+        ...this.#fetchOptions, // Include any additional fetch options (e.g., SSL settings)
       });
 
       if (!response.ok) {

package/src/index.d.ts

@@ -90,8 +90,20 @@ declare class RpcClient {
    * 
    * @param endpoint - JSON-RPC endpoint URL
    * @param defaultHeaders - Default headers to include in requests
+   * @param options - Configuration options
+   * @param options.rejectUnauthorized - Whether to reject unauthorized SSL certificates (default: true). Set to false for development with self-signed certificates.
+   * @param options.ca - Buffer or string of a custom CA certificate to trust (for self-signed CA)
+   * @param options.agent - Custom https.Agent instance (advanced usage)
    */
-  constructor(endpoint: string, defaultHeaders?: Record<string, string>);
+  constructor(
+    endpoint: string,
+    defaultHeaders?: Record<string, string>,
+    options?: {
+      rejectUnauthorized?: boolean;
+      ca?: string | Buffer;
+      agent?: any;
+    }
+  );
 
   /**
    * Make a JSON-RPC call to the server.