serverless-event-orchestrator 2.4.0 → 2.5.0

package/dist/http/body-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"body-parser.d.ts","sourceRoot":"","sources":["../../src/http/body-parser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAe7G;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,SAAS,GAC5D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,EACvF,KAAK,EAAE,CAAC,GACP,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAKzC"}
+{"version":3,"file":"body-parser.d.ts","sourceRoot":"","sources":["../../src/http/body-parser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAsB7G;AAoBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,SAAS,GAC5D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,EACvF,KAAK,EAAE,CAAC,GACP,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAKzC"}

package/dist/http/body-parser.js

@@ -20,6 +20,14 @@ function parseJsonBody(body, isBase64Encoded) {
         if (isBase64Encoded) {
             decodedBody = Buffer.from(body, 'base64').toString('utf-8');
         }
+        else {
+            // API Gateway puede entregar el body interpretando bytes UTF-8 como
+            // Latin-1 cuando el Content-Type no incluye `; charset=utf-8`,
+            // produciendo mojibake (`María` en lugar de `María`). Si detectamos
+            // el patrón típico (byte UTF-8 multibyte visto como Latin-1),
+            // revertimos re-codificando latin1 → utf-8.
+            decodedBody = fixUtf8Mojibake(decodedBody);
+        }
         const parsed = JSON.parse(decodedBody);
         return parsed ?? {};
     }
@@ -27,6 +35,24 @@ function parseJsonBody(body, isBase64Encoded) {
         return {};
     }
 }
+/**
+ * Detecta mojibake UTF-8-as-Latin-1 y lo revierte. La heurística busca un
+ * primer byte UTF-8 multibyte (0xC2-0xF4) seguido de un byte de continuación
+ * (0x80-0xBF). En texto natural casi siempre indica corrupción de encoding;
+ * si no hay match, el body se considera limpio y se devuelve intacto, así
+ * los bodies ASCII puros o UTF-8 ya correctos no se ven afectados.
+ */
+function fixUtf8Mojibake(input) {
+    if (!MOJIBAKE_PATTERN.test(input))
+        return input;
+    try {
+        return Buffer.from(input, 'latin1').toString('utf-8');
+    }
+    catch {
+        return input;
+    }
+}
+const MOJIBAKE_PATTERN = /[Â-ô][€-¿]/;
 /**
  * Safely parses query string parameters
  * Handles multi-value parameters

package/dist/http/body-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"body-parser.js","sourceRoot":"","sources":["../../src/http/body-parser.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAQH,sCAeC;AAQD,4CAcC;AAKD,gDAOC;AAvDD;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,IAA+B,EAAE,eAAyB;IACtF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,IAAI,CAAC;QACH,IAAI,WAAW,GAAG,IAAI,CAAC;QAEvB,IAAI,eAAe,EAAE,CAAC;YACpB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAwB,CAAC;QAC9D,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAC9B,MAA6D;IAE7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,KAAQ;IAER,OAAO;QACL,GAAG,KAAK;QACR,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC;KAC7D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"body-parser.js","sourceRoot":"","sources":["../../src/http/body-parser.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAQH,sCAsBC;AA0BD,4CAcC;AAKD,gDAOC;AAhFD;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,IAA+B,EAAE,eAAyB;IACtF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,IAAI,CAAC;QACH,IAAI,WAAW,GAAG,IAAI,CAAC;QAEvB,IAAI,eAAe,EAAE,CAAC;YACpB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,+DAA+D;YAC/D,qEAAqE;YACrE,8DAA8D;YAC9D,4CAA4C;YAC5C,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAwB,CAAC;QAC9D,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC;;;;;GAKG;AACH,SAAgB,gBAAgB,CAC9B,MAA6D;IAE7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,KAAQ;IAER,OAAO;QACL,GAAG,KAAK;QACR,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "serverless-event-orchestrator",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "description": "A lightweight, type-safe event dispatcher and middleware orchestrator for AWS Lambda. Designed for hexagonal architectures with support for segmented routing (public, private, backoffice), Cognito User Pool validation, and built-in infrastructure middlewares.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/http/body-parser.ts

@@ -10,14 +10,21 @@
  */
 export function parseJsonBody(body: string | null | undefined, isBase64Encoded?: boolean): Record<string, any> {
   if (!body) return {};
-  
+
   try {
     let decodedBody = body;
-    
+
     if (isBase64Encoded) {
       decodedBody = Buffer.from(body, 'base64').toString('utf-8');
+    } else {
+      // API Gateway puede entregar el body interpretando bytes UTF-8 como
+      // Latin-1 cuando el Content-Type no incluye `; charset=utf-8`,
+      // produciendo mojibake (`María` en lugar de `María`). Si detectamos
+      // el patrón típico (byte UTF-8 multibyte visto como Latin-1),
+      // revertimos re-codificando latin1 → utf-8.
+      decodedBody = fixUtf8Mojibake(decodedBody);
     }
-    
+
     const parsed = JSON.parse(decodedBody) as Record<string, any>;
     return parsed ?? {};
   } catch {
@@ -25,6 +32,24 @@ export function parseJsonBody(body: string | null | undefined, isBase64Encoded?:
   }
 }
 
+/**
+ * Detecta mojibake UTF-8-as-Latin-1 y lo revierte. La heurística busca un
+ * primer byte UTF-8 multibyte (0xC2-0xF4) seguido de un byte de continuación
+ * (0x80-0xBF). En texto natural casi siempre indica corrupción de encoding;
+ * si no hay match, el body se considera limpio y se devuelve intacto, así
+ * los bodies ASCII puros o UTF-8 ya correctos no se ven afectados.
+ */
+function fixUtf8Mojibake(input: string): string {
+  if (!MOJIBAKE_PATTERN.test(input)) return input;
+  try {
+    return Buffer.from(input, 'latin1').toString('utf-8');
+  } catch {
+    return input;
+  }
+}
+
+const MOJIBAKE_PATTERN = /[Â-ô][€-¿]/;
+
 /**
  * Safely parses query string parameters
  * Handles multi-value parameters
@@ -35,15 +60,15 @@ export function parseQueryParams(
   params: Record<string, string | undefined> | null | undefined
 ): Record<string, string> {
   if (!params) return {};
-  
+
   const result: Record<string, string> = {};
-  
+
   for (const [key, value] of Object.entries(params)) {
     if (value !== undefined) {
       result[key] = value;
     }
   }
-  
+
   return result;
 }