rpc-express-toolkit 3.0.2 → 4.0.1

package/examples/server-client-example.js

@@ -10,7 +10,7 @@ const context = {
   userId: 'system',
 };
 
-// Create JSON-RPC endpoint with clean names
+// Create JSON-RPC endpoint
 const rpc = new RpcEndpoint(app, context);
 
 // Add some methods
@@ -29,12 +29,12 @@ rpc.addMethod('getData', (req, ctx, params) => {
   return { key, value };
 });
 
-rpc.addMethod('getAllData', (req, ctx) => {
-  return Array.from(ctx.database.entries()).map(([key, value]) => ({
+rpc.addMethod('getAllData', (req, ctx) =>
+  Array.from(ctx.database.entries()).map(([key, value]) => ({
     key,
     value,
-  }));
-});
+  }))
+);
 
 rpc.addMethod('testBigInt', (req, ctx, params) => {
   const bigNumber = BigInt(params.number || '123456789012345678901234567890');
@@ -49,61 +49,61 @@ rpc.addMethod('testBigInt', (req, ctx, params) => {
 // Start server
 const PORT = process.env.PORT || 3000;
 const server = app.listen(PORT, () => {
-  console.log(`🚀 JSON-RPC Server running on http://localhost:${PORT}`);
-  console.log(`📡 Endpoint: http://localhost:${PORT}/api`);
+  console.log(`Server running on http://localhost:${PORT}`);
+  console.log(`Endpoint: http://localhost:${PORT}/api`);
 
   // === CLIENT DEMO ===
   setTimeout(async () => {
-    console.log('\n🔧 Testing client...');
+    console.log('\nTesting client...');
 
     const client = new RpcClient(`http://localhost:${PORT}/api`);
 
     try {
       // Test 1: Save some data
-      console.log('📝 Saving data...');
+      console.log('Saving data...');
       const saveResult = await client.call('saveData', {
         key: 'test',
         value: 'Hello World!',
       });
-      console.log('✅ Save result:', saveResult);
+      console.log('Save result:', saveResult);
 
       // Test 2: Get data back
-      console.log('\n📖 Getting data...');
+      console.log('\nGetting data...');
       const getData = await client.call('getData', { key: 'test' });
-      console.log('✅ Get result:', getData);
+      console.log('Get result:', getData);
 
       // Test 3: Test BigInt handling
-      console.log('\n🔢 Testing BigInt...');
+      console.log('\nTesting BigInt...');
       const bigIntResult = await client.call('testBigInt', {
         number: '999999999999999999999999999999',
       });
-      console.log('✅ BigInt result:', bigIntResult);
-      console.log('   - Original BigInt type:', typeof bigIntResult.bigint);
-      console.log('   - Doubled BigInt type:', typeof bigIntResult.doubled);
-      console.log('   - Timestamp type:', typeof bigIntResult.timestamp);
+      console.log('BigInt result:', bigIntResult);
+      console.log('   - bigint type:', typeof bigIntResult.bigint);
+      console.log('   - doubled type:', typeof bigIntResult.doubled);
+      console.log('   - timestamp type:', typeof bigIntResult.timestamp);
 
       // Test 4: Get all data
-      console.log('\n📊 Getting all data...');
+      console.log('\nGetting all data...');
       const allData = await client.call('getAllData');
-      console.log('✅ All data:', allData);
+      console.log('All data:', allData);
 
       // Test 5: Test error handling
-      console.log('\n❌ Testing error handling...');
+      console.log('\nTesting error handling...');
       try {
         await client.call('getData', { key: 'nonexistent' });
       } catch (error) {
-        console.log('✅ Error caught correctly:', error.message);
+        console.log('Error caught correctly:', error.message);
       }
 
-      console.log('\n✨ All tests completed successfully!');
+      console.log('\nAll tests completed successfully!');
     } catch (error) {
-      console.error('❌ Client error:', error);
+      console.error('Client error:', error);
     }
 
     // Close server after demo
     setTimeout(() => {
       server.close(() => {
-        console.log('\n👋 Server closed');
+        console.log('\nServer closed');
         process.exit(0);
       });
     }, 1000);
@@ -112,9 +112,9 @@ const server = app.listen(PORT, () => {
 
 // Handle graceful shutdown
 process.on('SIGINT', () => {
-  console.log('\n🛑 Shutting down server...');
+  console.log('\nShutting down server...');
   server.close(() => {
-    console.log('👋 Server closed');
+    console.log('Server closed');
     process.exit(0);
   });
 });

package/examples/ssl-development-example.js

@@ -1,15 +1,8 @@
+/* eslint-disable no-unused-vars, no-console */
 /**
- * Example demonstratin  // Example 3: Best practices
-  console.log('3. Best Practices:');
-  console.log('   ✓ Always use SSL validation in production');
-  console.log('   ✓ Disable validation only for development with self-signed certificates');
-  console.log('   ✓ Use environment variables to control SSL behavior');
-  console.log('   ✓ Never commit process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" to production');
-  console.log('   ✓ Consider using valid development certificates instead of disabling validation\n');o use RpcClient with self-signed certificates
- * in development environments.
- * 
- * WARNING: Only use rejectUnauthorized: false in development!
- * Never use this in production as it disables SSL certificate validation.
+ * Example: Using RpcClient with self-signed certificates in development.
+ *
+ * WARNING: Do not disable SSL validation in production.
  */
 
 const { RpcClient } = require('../src/index.js');
@@ -22,35 +15,33 @@ async function demonstrateSSLOptions() {
   const productionClient = new RpcClient('https://api.example.com/rpc', {
     Authorization: 'Bearer prod-token',
   });
-  console.log('   ✓ Created client with strict SSL validation (default)\n');
+  console.log('   - Created client with strict SSL validation (default)\n');
 
-  // Example 2: Development client for self-signed certificates (bypasses ALL SSL validation)
-  console.log('2. Development Client (bypasses SSL validation):');
+  // Example 2: Development client for self-signed certificates (bypass validation)
+  console.log('2. Development Client (bypass SSL validation):');
   console.log(
-    '   ⚠️  To bypass SSL validation in Node.js, set BEFORE starting the client:'
+    '   To bypass SSL validation in Node.js, set BEFORE starting the client:'
   );
   console.log('   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";');
   console.log(
-    '   ✓ All requests will accept self-signed certificates (development only!)\n'
+    '   - All requests will accept self-signed certificates (development only!)\n'
   );
 
-  // Example 3: Best practice
+  // Example 3: Best practices summary
   console.log('3. Best Practices:');
-  console.log('   ✓ Usa sempre la validazione SSL in produzione');
-  console.log(
-    '   ✓ Disabilita la validazione solo per sviluppo con self-signed'
-  );
+  console.log('   - Always use SSL validation in production');
   console.log(
-    '   ✓ Usa variabili d’ambiente per controllare il comportamento SSL'
+    '   - Disable validation only for development with self-signed certificates'
   );
+  console.log('   - Use environment variables to control SSL behavior');
   console.log(
-    '   ✓ Non committare mai process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" in produzione'
+    '   - Never commit process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" to production'
   );
   console.log(
-    '   ✓ Considera l’uso di certificati di sviluppo validi invece di disabilitare la validazione\n'
+    '   - Consider using valid development certificates instead of disabling validation\n'
   );
 
-  // Example 4: Demonstrate how to choose configuration based on environment
+  // Example 4: Choose configuration based on environment
   console.log('4. Environment-based Configuration:');
   const isDevelopment = process.env.NODE_ENV === 'development';
   const baseUrl = isDevelopment
@@ -61,32 +52,10 @@ async function demonstrateSSLOptions() {
     'X-Environment': process.env.NODE_ENV || 'development',
   });
   console.log(
-    `   ✓ Created client for ${isDevelopment ? 'development' : 'production'} environment`
-  );
-  console.log(
-    `   ✓ SSL validation: ${isDevelopment ? 'controlled by NODE_TLS_REJECT_UNAUTHORIZED' : 'enabled (secure)'}\n`
-  );
-
-  // Example usage (commented out since we don't have a real server)
-  /*
-  try {
-    // This would work with a real server
-    const result = await developmentClient.call('ping', {});
-    console.log('Server response:', result);
-  } catch (error) {
-    console.error('Error calling server:', error.message);
-  }
-  */
-
-  console.log('5. Best Practices Summary:');
-  console.log('   ✓ Always use strict SSL validation in production');
-  console.log(
-    '   ✓ Only disable SSL validation for development with self-signed certificates'
+    `   - Created client for ${isDevelopment ? 'development' : 'production'} environment`
   );
-  console.log('   ✓ Use environment variables to control SSL behavior');
-  console.log('   ✓ Never commit rejectUnauthorized: false to production code');
   console.log(
-    '   ✓ Consider using proper development certificates instead of disabling validation\n'
+    `   - SSL validation: ${isDevelopment ? 'controlled by NODE_TLS_REJECT_UNAUTHORIZED' : 'enabled (secure)'}\n`
   );
 
   console.log('=== Example Complete ===');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rpc-express-toolkit",
-  "version": "3.0.2",
+  "version": "4.0.1",
   "description": "Enterprise-ready JSON-RPC 2.0 toolkit for Express.js with simplified APIs, structured logging, middleware system, schema validation, comprehensive BigInt/Date support. JSON middleware validation and explicit configuration.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -19,8 +19,8 @@
     "clean": "node -e \"require('fs').existsSync('dist') && require('fs').rmSync('dist', {recursive: true})\"",
     "build": "npm run build:minify",
     "build:minify": "npm run build:js && npm run build:mjs",
-    "build:js": "terser src/clients/rpc-client.js -o src/clients/rpc-client.min.js --compress --mangle --comments false",
-    "build:mjs": "terser src/clients/rpc-client.mjs -o src/clients/rpc-client.min.mjs --compress --mangle --comments false --module",
+    "build:js": "terser src/clients/rpc-client.js -o src/clients/rpc-client.min.js --compress --mangle --comments false --ecma 2020",
+    "build:mjs": "terser src/clients/rpc-client.mjs -o src/clients/rpc-client.min.mjs --compress --mangle --comments false --module --ecma 2020",
     "prepublishOnly": "npm run build",
     "precommit": "npm run lint && npm test"
   },
@@ -30,6 +30,8 @@
   },
   "keywords": [
     "json-rpc",
+    "jsonrpc",
+    "json-rpc-2.0",
     "express",
     "toolkit",
     "rpc",
@@ -37,13 +39,24 @@
     "client",
     "middleware",
     "validation",
+    "schema",
+    "ajv",
     "bigint",
+    "date",
     "enterprise",
     "nodejs",
+    "node",
+    "browser",
     "ssl",
     "self-signed",
     "secure",
-    "fetch"
+    "fetch",
+    "batch",
+    "typescript",
+    "logging",
+    "cors",
+    "rate-limit",
+    "authentication"
   ],
   "author": "Nicola Carpanese <nicola.carpanese@gmail.com>",
   "license": "MIT",
@@ -52,7 +65,7 @@
   },
   "homepage": "https://github.com/n-car/rpc-express-toolkit#readme",
   "engines": {
-    "node": ">=14.0.0"
+    "node": ">=18.0.0"
   },
   "devDependencies": {
     "eslint": "^8.57.1",

package/src/batch.js

@@ -156,12 +156,21 @@ class BatchHandler {
     // If no id is provided, this is a notification - don't return response
     const isNotification = id === undefined || id === null;
 
+    // Determine client safe mode from headers and deserialize params accordingly
+    const clientSafeHeader = req.headers['x-rpc-safe-enabled'];
+    const clientSafeEnabled = clientSafeHeader === 'true';
+    const deserializedParams = params
+      ? this.endpoint.deserializeBigIntsAndDates(params, {
+          safeEnabled: clientSafeEnabled,
+        })
+      : params;
+
     // Initialize middleware context
     let middlewareContext = {
       req,
       res: null, // No response object for batch items
       method,
-      params,
+      params: deserializedParams,
       context,
       batchIndex,
       isNotification,