rpc-express-toolkit 2.2.0 → 2.3.1

package/README.md

@@ -91,6 +91,7 @@ app.listen(3000, () => {
 });
 ```
 
+
 ### Client Usage
 
 ```javascript
@@ -108,6 +109,22 @@ const client = new RpcClient('/api');
 const user = await client.call('getUser', { userId: 123 });
 ```
 
+
+#### ⚠️ SSL and self-signed certificates in development (Node.js)
+
+If you need to connect to a server with a self-signed certificate during development, set the following environment variable **before** starting your Node.js process:
+
+```js
+process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
+```
+
+**Warning:**
+- This disables SSL certificate validation for all HTTPS requests in the Node.js process.
+- Use this only in development environments!
+- Never commit or enable this setting in production.
+
+Advanced options like `agent` and `ca` have been removed for simplicity and compatibility with modern Node.js. This is the only universal and reliable way to bypass SSL validation for development with self-signed certificates.
+
 ## Advanced Usage
 
 ### Configuration Options
@@ -321,14 +338,26 @@ new RpcClient(baseUrl, options)
 
 #### Methods
 
+
 ##### `call(method, params, options)`
 
 Make a single RPC call.
 
 ```javascript
-const result = await client.call('add', { a: 1, b: 2 });
+// If the method does not require parameters, you can omit the params argument:
+const result = await client.call('ping');
+
+// If you pass params as undefined or null, the field will be omitted from the JSON-RPC payload (per spec):
+await client.call('ping', undefined);
+await client.call('ping', null);
+
+// If you pass an object or array, it will be sent as params:
+await client.call('add', { a: 1, b: 2 });
 ```
 
+> **Note:**
+> The `params` field is omitted from the JSON-RPC request if you pass `undefined` or `null`, as required by the JSON-RPC 2.0 specification. If you pass an object or array, it will be included as `params`.
+
 ##### `batch(requests)`
 
 Make batch RPC calls.

package/examples/ssl-development-example.js

@@ -19,29 +19,20 @@ async function demonstrateSSLOptions() {
   console.log('   ✓ Created client with strict SSL validation (default)\n');
 
 
-  // Example 2: Development client for self-signed certificates (bypasses ALL SSL validation)
+
+  // Example 2: Development client per self-signed certificates (bypassa TUTTA la validazione SSL)
   console.log('2. Development Client (bypasses SSL validation):');
-  const developmentClient = new RpcClient('https://localhost:3000/api', {
-    'Authorization': 'Bearer dev-token',
-    'X-Environment': 'development'
-  }, {
-    rejectUnauthorized: false // Solo per sviluppo!
-  });
-  console.log('   ✓ Created client that bypasses SSL certificate validation');
-  console.log('   ⚠️  WARNING: Only use this for development with self-signed certificates!\n');
+  console.log('   ⚠️  Per bypassare la validazione SSL in Node.js, imposta PRIMA di avviare il client:');
+  console.log('   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";');
+  console.log('   ✓ Tutte le richieste accetteranno certificati self-signed (solo per sviluppo!)\n');
 
-  // Example 3: Development client with custom CA (accepts only your self-signed CA)
-  console.log('3. Development Client with custom CA:');
-  const fs = require('fs');
-  const ca = fs.readFileSync('path/to/your/selfsigned-ca.pem');
-  const devClientWithCA = new RpcClient('https://localhost:3000/api', {
-    'Authorization': 'Bearer dev-token',
-    'X-Environment': 'development'
-  }, {
-    ca // Passa il certificato della tua CA self-signed
-  });
-  console.log('   ✓ Created client that accepts only your self-signed CA');
-  console.log('   ⚠️  WARNING: This is safer than disabling validation, but use valid certificates in production!\n');
+  // Example 3: Best practice
+  console.log('3. Best Practices:');
+  console.log('   ✓ Usa sempre la validazione SSL in produzione');
+  console.log('   ✓ Disabilita la validazione solo per sviluppo con self-signed');
+  console.log('   ✓ Usa variabili d’ambiente per controllare il comportamento SSL');
+  console.log('   ✓ Non committare mai process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" in produzione');
+  console.log('   ✓ Considera l’uso di certificati di sviluppo validi invece di disabilitare la validazione\n');
 
   // Example 4: Demonstrate how to choose configuration based on environment
   console.log('4. Environment-based Configuration:');

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rpc-express-toolkit",
-  "version": "2.2.0",
-  "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, and comprehensive BigInt/Date support.",
+  "version": "2.3.1",
+  "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, comprehensive BigInt/Date support. Semplificato: gestione SSL avanzata rimossa, vedi README.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
   "files": [
@@ -39,7 +39,11 @@
     "validation",
     "bigint",
     "enterprise",
-    "nodejs"
+    "nodejs",
+    "ssl",
+    "self-signed",
+    "secure",
+    "fetch"
   ],
   "author": "Nicola Carpanese <nicola.carpanese@gmail.com>",
   "license": "MIT",

package/src/clients/rpc-client.js

@@ -52,29 +52,10 @@ class RpcClient {
     
     // Store fetch options for Node.js environments
     this.#fetchOptions = {};
-    // Support for custom https.Agent (e.g. for self-signed CA)
-    if (typeof process !== 'undefined' && process.env && typeof require !== 'undefined') {
-      try {
-        const https = require('https');
-        // If options.agent is provided, use it directly
-        if (options.agent) {
-          this.#fetchOptions.agent = options.agent;
-        } else if (options.ca) {
-          // If options.ca is provided, create an agent with the custom CA
-          this.#fetchOptions.agent = new https.Agent({
-            ca: options.ca,
-            rejectUnauthorized: options.rejectUnauthorized !== false // true by default
-          });
-        } else if (options.rejectUnauthorized === false) {
-          // Legacy: allow disabling SSL validation for dev
-          this.#fetchOptions.agent = new https.Agent({
-            rejectUnauthorized: false
-          });
-        }
-      } catch (e) {
-        // Ignore if https module is not available
-      }
-    }
+    // SSL validation: la gestione avanzata (agent/ca) è rimossa per semplicità e compatibilità.
+    // Per bypassare i certificati self-signed in sviluppo, imposta:
+    //   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
+    // Vedi README per dettagli e best practice.
   }
 
   /**
@@ -96,13 +77,16 @@ class RpcClient {
   async call(method, params = {}, id = undefined, overrideHeaders = {}) {
     // Auto-generate ID if not provided (null means notification)
     const requestId = id === undefined ? this.#generateId() : id;
-    
+
+    // Costruisci il payload secondo lo standard: params omesso se undefined/null
     const requestBody = {
       jsonrpc: "2.0",
       method,
-      params,
       id: requestId,
     };
+    if (params !== undefined && params !== null) {
+      requestBody.params = params;
+    }
 
     try {
       const response = await fetchFn(this.#endpoint, {
@@ -151,12 +135,17 @@ class RpcClient {
    * @returns {Promise<Array<any>>} Array of results in the same order as requests.
    */
   async batch(requests, overrideHeaders = {}) {
-    const batchRequests = requests.map(req => ({
-      jsonrpc: "2.0",
-      method: req.method,
-      params: req.params || {},
-      id: req.id !== undefined ? req.id : this.#generateId()
-    }));
+    const batchRequests = requests.map(req => {
+      const obj = {
+        jsonrpc: "2.0",
+        method: req.method,
+        id: req.id !== undefined ? req.id : this.#generateId()
+      };
+      if (req.params !== undefined && req.params !== null) {
+        obj.params = req.params;
+      }
+      return obj;
+    });
 
     try {
       const response = await fetchFn(this.#endpoint, {

package/src/clients/rpc-client.min.js

@@ -1 +1 @@
-let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){if(this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={},"undefined"!=typeof process&&process.env&&"undefined"!=typeof require)try{const t=require("https");r.agent?this.#i.agent=r.agent:r.ca?this.#i.agent=new t.Agent({ca:r.ca,rejectUnauthorized:!1!==r.rejectUnauthorized}):!1===r.rejectUnauthorized&&(this.#i.agent=new t.Agent({rejectUnauthorized:!1}))}catch(t){}}#n(){return++this.#r}async call(t,e={},r=void 0,i={}){const n={jsonrpc:"2.0",method:t,params:e,id:void 0===r?this.#n():r};try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(n),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>({jsonrpc:"2.0",method:t.method,params:t.params||{},id:void 0!==t.id?t.id:this.#n()}));try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;
+let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={}}#s(){return++this.#r}async call(t,e={},r=void 0,i={}){const s={jsonrpc:"2.0",method:t,id:void 0===r?this.#s():r};null!=e&&(s.params=e);try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>{const e={jsonrpc:"2.0",method:t.method,id:void 0!==t.id?t.id:this.#s()};return void 0!==t.params&&null!==t.params&&(e.params=t.params),e});try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;

package/src/clients/rpc-client.min.mjs

@@ -1 +1 @@
-let t;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)t=fetch;else try{const{default:e}=await import("node-fetch");t=e}catch(e){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");t=globalThis.fetch}export class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){if(this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={},"undefined"!=typeof process&&process.env&&!1===r.rejectUnauthorized&&"undefined"!=typeof require)try{const t=require("https");this.#i.agent=new t.Agent({rejectUnauthorized:!1})}catch(t){import("https").then(t=>{this.#i.agent=new t.Agent({rejectUnauthorized:!1})}).catch(()=>{})}}async call(e,r={},i=null,s={}){null===i&&(i=++this.#r);const n={jsonrpc:"2.0",method:e,params:r,id:i};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...s},body:JSON.stringify(n),...this.#i});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const r=await e.json();if(r.error)throw r.error;return this.deserializeBigIntsAndDates(r.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(e,r={},i={}){const s={jsonrpc:"2.0",method:e,params:r};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`)}catch(t){throw console.error("RPC notification failed:",t),t}}async batch(e,r={}){const i=e.map(t=>{const e={jsonrpc:"2.0",method:t.method,params:t.params||{}};return t.notification||(e.id=void 0!==t.id?t.id:++this.#r),e});try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...r},body:JSON.stringify(i),...this.#i});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const s=await e.json();if(Array.isArray(s))return s.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(s.error)throw s.error;return[this.deserializeBigIntsAndDates(s.result)]}catch(t){throw console.error("RPC batch call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}
+let t;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)t=fetch;else try{const{default:e}=await import("node-fetch");t=e}catch(e){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");t=globalThis.fetch}export class RpcClient{#t;#e;#r;#s;constructor(t,e={},r={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#s={}}async call(e,r={},s=null,i={}){null===s&&(s=++this.#r);const n={jsonrpc:"2.0",method:e,params:r,id:s};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(n),...this.#s});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const r=await e.json();if(r.error)throw r.error;return this.deserializeBigIntsAndDates(r.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(e,r={},s={}){const i={jsonrpc:"2.0",method:e,params:r};try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...s},body:JSON.stringify(i),...this.#s});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`)}catch(t){throw console.error("RPC notification failed:",t),t}}async batch(e,r={}){const s=e.map(t=>{const e={jsonrpc:"2.0",method:t.method,params:t.params||{}};return t.notification||(e.id=void 0!==t.id?t.id:++this.#r),e});try{const e=await t(this.#t,{method:"POST",headers:{...this.#e,...r},body:JSON.stringify(s),...this.#s});if(!e.ok)throw new Error(`HTTP Error: ${e.status} ${e.statusText}`);const i=await e.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("RPC batch call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,s]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(s);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}

package/src/clients/rpc-client.mjs

@@ -53,28 +53,10 @@ export class RpcClient {
     
     // Store fetch options for Node.js environments
     this.#fetchOptions = {};
-    
-    // Handle SSL certificate validation option for Node.js
-    if (typeof process !== 'undefined' && process.env && options.rejectUnauthorized === false) {
-      // Set up agent for Node.js fetch implementations
-      if (typeof require !== 'undefined') {
-        try {
-          const https = require('https');
-          this.#fetchOptions.agent = new https.Agent({
-            rejectUnauthorized: false
-          });
-        } catch (e) {
-          // For ES modules, we'll try dynamic import
-          import('https').then(httpsModule => {
-            this.#fetchOptions.agent = new httpsModule.Agent({
-              rejectUnauthorized: false
-            });
-          }).catch(() => {
-            // Ignore if https module is not available
-          });
-        }
-      }
-    }
+    // SSL validation: la gestione avanzata (agent/ca) è rimossa per semplicità e compatibilità.
+    // Per bypassare i certificati self-signed in sviluppo, imposta:
+    //   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
+    // Vedi README per dettagli e best practice.
   }
 
   /**

package/src/index.d.ts

@@ -99,9 +99,7 @@ declare class RpcClient {
     endpoint: string,
     defaultHeaders?: Record<string, string>,
     options?: {
-      rejectUnauthorized?: boolean;
-      ca?: string | Buffer;
-      agent?: any;
+      // Opzioni SSL avanzate rimosse: usa process.env.NODE_TLS_REJECT_UNAUTHORIZED per sviluppo
     }
   );