rpc-express-toolkit 2.3.0 → 2.3.2

package/README.md

@@ -109,20 +109,21 @@ const client = new RpcClient('/api');
 const user = await client.call('getUser', { userId: 123 });
 ```
 
-#### SSL e certificati self-signed in sviluppo (Node.js)
 
-Per bypassare la validazione dei certificati SSL (ad esempio con certificati self-signed in sviluppo), imposta **prima** di avviare il client:
+#### ⚠️ SSL and self-signed certificates in development (Node.js)
+
+If you need to connect to a server with a self-signed certificate during development, set the following environment variable **before** starting your Node.js process:
 
 ```js
 process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
 ```
 
-**Attenzione:**
-- Questa impostazione disabilita la validazione SSL per tutte le richieste nel processo Node.js.
-- Usala solo in ambienti di sviluppo!
-- Non committare mai questa impostazione in produzione.
+**Warning:**
+- This disables SSL certificate validation for all HTTPS requests in the Node.js process.
+- Use this only in development environments!
+- Never commit or enable this setting in production.
 
-Le opzioni avanzate `agent` e `ca` sono state rimosse per semplicità e compatibilità con Node.js moderno.
+Advanced options like `agent` and `ca` have been removed for simplicity and compatibility with modern Node.js. This is the only universal and reliable way to bypass SSL validation for development with self-signed certificates.
 
 ## Advanced Usage
 
@@ -337,14 +338,26 @@ new RpcClient(baseUrl, options)
 
 #### Methods
 
+
 ##### `call(method, params, options)`
 
 Make a single RPC call.
 
 ```javascript
-const result = await client.call('add', { a: 1, b: 2 });
+// If the method does not require parameters, you can omit the params argument:
+const result = await client.call('ping');
+
+// If you pass params as undefined or null, the field will be omitted from the JSON-RPC payload (per spec):
+await client.call('ping', undefined);
+await client.call('ping', null);
+
+// If you pass an object or array, it will be sent as params:
+await client.call('add', { a: 1, b: 2 });
 ```
 
+> **Note:**
+> The `params` field is omitted from the JSON-RPC request if you pass `undefined` or `null`, as required by the JSON-RPC 2.0 specification. If you pass an object or array, it will be included as `params`.
+
 ##### `batch(requests)`
 
 Make batch RPC calls.
@@ -548,24 +561,26 @@ const clientWithHeaders = new RpcClient('https://api.example.com/rpc', {
     'User-Agent': 'MyApp/1.0'
 });
 
-// Client per sviluppo con certificato self-signed (accetta qualsiasi certificato, NON usare in produzione)
+// Development client with self-signed certificate (accepts any certificate, DO NOT use in production)
 const devClient = new RpcClient('https://localhost:3000/api', {
     'Authorization': 'Bearer dev-token'
 }, {
-    rejectUnauthorized: false // Solo per sviluppo!
+    rejectUnauthorized: false // Development only!
 });
 
-// Client per sviluppo con CA self-signed (modo sicuro: accetta solo la tua CA)
+// Development client with custom self-signed CA (safer: accepts only your CA)
 const ca = fs.readFileSync('path/to/your/selfsigned-ca.pem');
 const devClientWithCA = new RpcClient('https://localhost:3000/api', {
     'Authorization': 'Bearer dev-token'
 }, {
-    ca // Passa il certificato della tua CA self-signed
-    // oppure: agent: new require('https').Agent({ ca, rejectUnauthorized: true })
+    ca // Pass your self-signed CA certificate
+    // or: agent: new require('https').Agent({ ca, rejectUnauthorized: true })
 });
+
+**⚠️ Security Warning**: Use `rejectUnauthorized: false` for development only. For better security, always prefer the `ca` solution to accept only your self-signed CA. In production always use valid certificates signed by a trusted CA.
 ```
 
-**⚠️ Security Warning**: Usa `rejectUnauthorized: false` solo in sviluppo. Per maggiore sicurezza, preferisci sempre la soluzione con `ca` per accettare solo la tua CA self-signed. In produzione usa sempre certificati validi e firmati da una CA attendibile.
+**⚠️ Security Warning**: Use `rejectUnauthorized: false` for development only. For better security, always prefer the `ca` solution to accept only your self-signed CA. In production always use valid certificates signed by a trusted CA.
 
 ### Built-in Middlewares
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rpc-express-toolkit",
-  "version": "2.3.0",
-  "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, comprehensive BigInt/Date support. Semplificato: gestione SSL avanzata rimossa, vedi README.",
+  "version": "2.3.2",
+  "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, comprehensive BigInt/Date support. Advanced SSL options removed, see README.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
   "files": [

package/src/clients/rpc-client.js

@@ -52,10 +52,10 @@ class RpcClient {
     
     // Store fetch options for Node.js environments
     this.#fetchOptions = {};
-    // SSL validation: la gestione avanzata (agent/ca) è rimossa per semplicità e compatibilità.
-    // Per bypassare i certificati self-signed in sviluppo, imposta:
+    // SSL validation: advanced options (agent/ca) have been removed for simplicity and compatibility.
+    // To bypass self-signed certificates in development, set:
     //   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
-    // Vedi README per dettagli e best practice.
+    // See README for details and best practices.
   }
 
   /**
@@ -74,16 +74,19 @@ class RpcClient {
    * @param {Object} [overrideHeaders={}] Optional headers to override defaults for this request.
    * @returns {Promise<any>} The result of the RPC call.
    */
-  async call(method, params = {}, id = undefined, overrideHeaders = {}) {
+  async call(method, params, id = undefined, overrideHeaders = {}) {
     // Auto-generate ID if not provided (null means notification)
     const requestId = id === undefined ? this.#generateId() : id;
-    
+
+    // Build the payload according to the spec: params omitted if undefined/null
     const requestBody = {
       jsonrpc: "2.0",
       method,
-      params,
       id: requestId,
     };
+    if (params !== undefined && params !== null) {
+      requestBody.params = params;
+    }
 
     try {
       const response = await fetchFn(this.#endpoint, {
@@ -132,12 +135,17 @@ class RpcClient {
    * @returns {Promise<Array<any>>} Array of results in the same order as requests.
    */
   async batch(requests, overrideHeaders = {}) {
-    const batchRequests = requests.map(req => ({
-      jsonrpc: "2.0",
-      method: req.method,
-      params: req.params || {},
-      id: req.id !== undefined ? req.id : this.#generateId()
-    }));
+    const batchRequests = requests.map(req => {
+      const obj = {
+        jsonrpc: "2.0",
+        method: req.method,
+        id: req.id !== undefined ? req.id : this.#generateId()
+      };
+      if (req.params !== undefined && req.params !== null) {
+        obj.params = req.params;
+      }
+      return obj;
+    });
 
     try {
       const response = await fetchFn(this.#endpoint, {

package/src/clients/rpc-client.min.js

@@ -1 +1 @@
-let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={}}#s(){return++this.#r}async call(t,e={},r=void 0,i={}){const s={jsonrpc:"2.0",method:t,params:e,id:void 0===r?this.#s():r};try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>({jsonrpc:"2.0",method:t.method,params:t.params||{},id:void 0!==t.id?t.id:this.#s()}));try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;
+let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={}}#s(){return++this.#r}async call(t,e,r=void 0,i={}){const s={jsonrpc:"2.0",method:t,id:void 0===r?this.#s():r};null!=e&&(s.params=e);try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>{const e={jsonrpc:"2.0",method:t.method,id:void 0!==t.id?t.id:this.#s()};return void 0!==t.params&&null!==t.params&&(e.params=t.params),e});try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;