rpc-express-toolkit 2.3.1 → 2.3.3

package/README.md

@@ -561,24 +561,26 @@ const clientWithHeaders = new RpcClient('https://api.example.com/rpc', {
     'User-Agent': 'MyApp/1.0'
 });
 
-// Client per sviluppo con certificato self-signed (accetta qualsiasi certificato, NON usare in produzione)
+// Development client with self-signed certificate (accepts any certificate, DO NOT use in production)
 const devClient = new RpcClient('https://localhost:3000/api', {
     'Authorization': 'Bearer dev-token'
 }, {
-    rejectUnauthorized: false // Solo per sviluppo!
+    rejectUnauthorized: false // Development only!
 });
 
-// Client per sviluppo con CA self-signed (modo sicuro: accetta solo la tua CA)
+// Development client with custom self-signed CA (safer: accepts only your CA)
 const ca = fs.readFileSync('path/to/your/selfsigned-ca.pem');
 const devClientWithCA = new RpcClient('https://localhost:3000/api', {
     'Authorization': 'Bearer dev-token'
 }, {
-    ca // Passa il certificato della tua CA self-signed
-    // oppure: agent: new require('https').Agent({ ca, rejectUnauthorized: true })
+    ca // Pass your self-signed CA certificate
+    // or: agent: new require('https').Agent({ ca, rejectUnauthorized: true })
 });
+
+**⚠️ Security Warning**: Use `rejectUnauthorized: false` for development only. For better security, always prefer the `ca` solution to accept only your self-signed CA. In production always use valid certificates signed by a trusted CA.
 ```
 
-**⚠️ Security Warning**: Usa `rejectUnauthorized: false` solo in sviluppo. Per maggiore sicurezza, preferisci sempre la soluzione con `ca` per accettare solo la tua CA self-signed. In produzione usa sempre certificati validi e firmati da una CA attendibile.
+**⚠️ Security Warning**: Use `rejectUnauthorized: false` for development only. For better security, always prefer the `ca` solution to accept only your self-signed CA. In production always use valid certificates signed by a trusted CA.
 
 ### Built-in Middlewares
 

package/examples/ssl-development-example.js

@@ -1,5 +1,11 @@
 /**
- * Example demonstrating how to use RpcClient with self-signed certificates
+ * Example demonstratin  // Example 3: Best practices
+  console.log('3. Best Practices:');
+  console.log('   ✓ Always use SSL validation in production');
+  console.log('   ✓ Disable validation only for development with self-signed certificates');
+  console.log('   ✓ Use environment variables to control SSL behavior');
+  console.log('   ✓ Never commit process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" to production');
+  console.log('   ✓ Consider using valid development certificates instead of disabling validation\n');o use RpcClient with self-signed certificates
  * in development environments.
  * 
  * WARNING: Only use rejectUnauthorized: false in development!
@@ -20,11 +26,11 @@ async function demonstrateSSLOptions() {
 
 
 
-  // Example 2: Development client per self-signed certificates (bypassa TUTTA la validazione SSL)
+  // Example 2: Development client for self-signed certificates (bypasses ALL SSL validation)
   console.log('2. Development Client (bypasses SSL validation):');
-  console.log('   ⚠️  Per bypassare la validazione SSL in Node.js, imposta PRIMA di avviare il client:');
+  console.log('   ⚠️  To bypass SSL validation in Node.js, set BEFORE starting the client:');
   console.log('   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";');
-  console.log('   ✓ Tutte le richieste accetteranno certificati self-signed (solo per sviluppo!)\n');
+  console.log('   ✓ All requests will accept self-signed certificates (development only!)\n');
 
   // Example 3: Best practice
   console.log('3. Best Practices:');
@@ -41,9 +47,9 @@ async function demonstrateSSLOptions() {
   const environmentClient = new RpcClient(baseUrl, {
     'Authorization': `Bearer ${process.env.API_TOKEN || 'default-token'}`,
     'X-Environment': process.env.NODE_ENV || 'development'
-  }, isDevelopment ? { ca } : {});
+  });
   console.log(`   ✓ Created client for ${isDevelopment ? 'development' : 'production'} environment`);
-  console.log(`   ✓ SSL validation: ${isDevelopment ? 'custom CA (dev only)' : 'enabled (secure)'}\n`);
+  console.log(`   ✓ SSL validation: ${isDevelopment ? 'controlled by NODE_TLS_REJECT_UNAUTHORIZED' : 'enabled (secure)'}\n`);
 
   // Example usage (commented out since we don't have a real server)
   /*
@@ -56,7 +62,7 @@ async function demonstrateSSLOptions() {
   }
   */
 
-  console.log('4. Best Practices:');
+  console.log('5. Best Practices Summary:');
   console.log('   ✓ Always use strict SSL validation in production');
   console.log('   ✓ Only disable SSL validation for development with self-signed certificates');
   console.log('   ✓ Use environment variables to control SSL behavior');

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rpc-express-toolkit",
-  "version": "2.3.1",
-  "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, comprehensive BigInt/Date support. Semplificato: gestione SSL avanzata rimossa, vedi README.",
+  "version": "2.3.3",
+  "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, comprehensive BigInt/Date support. Advanced SSL options removed, see README.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
   "files": [

package/src/clients/rpc-client.js

@@ -52,10 +52,10 @@ class RpcClient {
     
     // Store fetch options for Node.js environments
     this.#fetchOptions = {};
-    // SSL validation: la gestione avanzata (agent/ca) è rimossa per semplicità e compatibilità.
-    // Per bypassare i certificati self-signed in sviluppo, imposta:
+    // SSL validation: advanced options (agent/ca) have been removed for simplicity and compatibility.
+    // To bypass self-signed certificates in development, set:
     //   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
-    // Vedi README per dettagli e best practice.
+    // See README for details and best practices.
   }
 
   /**
@@ -74,11 +74,11 @@ class RpcClient {
    * @param {Object} [overrideHeaders={}] Optional headers to override defaults for this request.
    * @returns {Promise<any>} The result of the RPC call.
    */
-  async call(method, params = {}, id = undefined, overrideHeaders = {}) {
+  async call(method, params, id = undefined, overrideHeaders = {}) {
     // Auto-generate ID if not provided (null means notification)
     const requestId = id === undefined ? this.#generateId() : id;
 
-    // Costruisci il payload secondo lo standard: params omesso se undefined/null
+    // Build the payload according to the spec: params omitted if undefined/null
     const requestBody = {
       jsonrpc: "2.0",
       method,

package/src/clients/rpc-client.min.js

@@ -1 +1 @@
-let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={}}#s(){return++this.#r}async call(t,e={},r=void 0,i={}){const s={jsonrpc:"2.0",method:t,id:void 0===r?this.#s():r};null!=e&&(s.params=e);try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>{const e={jsonrpc:"2.0",method:t.method,id:void 0!==t.id?t.id:this.#s()};return void 0!==t.params&&null!==t.params&&(e.params=t.params),e});try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;
+let fetchFn;if("undefined"==typeof BigInt||BigInt.prototype.toJSON||(BigInt.prototype.toJSON=function(){return this.toString()}),"undefined"!=typeof fetch)fetchFn=fetch;else try{fetchFn=require("node-fetch")}catch(t){if("undefined"==typeof globalThis||!globalThis.fetch)throw new Error("fetch is not available. Please install node-fetch or use Node.js 18+");fetchFn=globalThis.fetch}class RpcClient{#t;#e;#r;#i;constructor(t,e={},r={}){this.#t=t,this.#e={"Content-Type":"application/json",...e},this.#r=1e3*Date.now()+Math.floor(1e3*Math.random()),this.#i={}}#s(){return++this.#r}async call(t,e,r=void 0,i={}){const s={jsonrpc:"2.0",method:t,id:void 0===r?this.#s():r};null!=e&&(s.params=e);try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...i},body:JSON.stringify(s),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const e=await t.json();if(e.error)throw e.error;return this.deserializeBigIntsAndDates(e.result)}catch(t){throw console.error("RPC call failed:",t),t}}async notify(t,e={},r={}){await this.call(t,e,null,r)}async batch(t,e={}){const r=t.map(t=>{const e={jsonrpc:"2.0",method:t.method,id:void 0!==t.id?t.id:this.#s()};return void 0!==t.params&&null!==t.params&&(e.params=t.params),e});try{const t=await fetchFn(this.#t,{method:"POST",headers:{...this.#e,...e},body:JSON.stringify(r),...this.#i});if(!t.ok)throw new Error(`HTTP Error: ${t.status} ${t.statusText}`);const i=await t.json();if(Array.isArray(i))return i.map(t=>{if(t.error)throw t.error;return this.deserializeBigIntsAndDates(t.result)});if(i.error)throw i.error;return[this.deserializeBigIntsAndDates(i.result)]}catch(t){throw console.error("Batch RPC call failed:",t),t}}serializeBigIntsAndDates(t){if("bigint"==typeof t)return t.toString();if(Array.isArray(t))return t.map(t=>this.serializeBigIntsAndDates(t));if(t instanceof Date)return t.toISOString();if(t&&"object"==typeof t){const e={};for(const[r,i]of Object.entries(t))e[r]=this.serializeBigIntsAndDates(i);return e}return t}deserializeBigIntsAndDates(t){const e=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?$/;if("string"==typeof t){if(/^-?\d+n?$/.test(t))return BigInt(t.replace(/n$/,""));if(e.test(t)){const e=new Date(t);if(!isNaN(e.getTime()))return e}}return Array.isArray(t)?t.map(t=>this.deserializeBigIntsAndDates(t)):t&&"object"==typeof t?Object.fromEntries(Object.entries(t).map(([t,e])=>[t,this.deserializeBigIntsAndDates(e)])):t}}module.exports=RpcClient,module.exports.RpcClient=RpcClient;

package/src/logger.js

@@ -100,7 +100,7 @@ class Logger {
       id,
       duration: `${duration}ms`,
       resultType: typeof result,
-      resultSize: JSON.stringify(result).length
+      resultSize: result ? JSON.stringify(result).length : 0
     });
   }