serverless-offline 13.0.0 → 13.1.1

package/README.md

@@ -38,12 +38,6 @@ To do so, it starts an HTTP server that handles the request's lifecycle like API
 
 This plugin is updated by its users, I just do maintenance and ensure that PRs are relevant to the community. In other words, if you [find a bug or want a new feature](https://github.com/dherault/serverless-offline/issues), please help us by becoming one of the [contributors](https://github.com/dherault/serverless-offline/graphs/contributors) :v: ! See the [contributing section](#contributing).
 
-## Looking for maintainers ⚠️
-
-Applications welcome! This package is used by thousands of people daily. Yet we lack a maintainer! If you think you'll be a good fit for the role, please send me an email at dherault/at/gmail.com.
-
-See https://github.com/dherault/serverless-offline/issues/1704.
-
 ## Documentation
 
 - [Installation](#installation)
@@ -530,9 +524,16 @@ only enabled with the `--ignoreJWTSignature` flag. Make sure to only set this fl
 
 ### Serverless plugin authorizers
 
-If your authentication needs are custom and not satisfied by the existing capabilities of the Serverless offline project, you can inject your own authentication strategy. To inject a custom strategy for Lambda invocation, you define a custom variable under `serverless-offline` called `authenticationProvider` in the serverless.yml file. The value of the custom variable will be used to `require(your authenticationProvider value)` where the location is expected to return a function with the following signature.
+If your authentication needs are custom and not satisfied by the existing capabilities of the Serverless offline project, you can inject your own authentication strategy. To inject a custom strategy for Lambda invocation, you define a custom variable under `offline` called `customAuthenticationProvider` in the serverless.yml file. The value of the custom variable will be used to `require(your customAuthenticationProvider value)` where the location is expected to return a function with the following signature.
+
+```yaml
+offline:
+  customAuthenticationProvider: ./path/to/custom-authentication-provider
+```
 
 ```js
+// ./path/to/customer-authentication-provider.js
+
 module.exports = function (endpoint, functionKey, method, path) {
   return {
     getAuthenticateFunction() {
@@ -549,7 +550,7 @@ module.exports = function (endpoint, functionKey, method, path) {
 }
 ```
 
-A working example of injecting a custom authorization provider can be found in the projects integration tests under the folder `custom-authentication`.
+A working example of injecting a custom authorization provider can be found in the projects integration tests under the folder [`custom-authentication`](./tests/integration/custom-authentication).
 
 ## Custom headers
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "dedicatedTo": "Blue, a great migrating bird.",
   "name": "serverless-offline",
-  "version": "13.0.0",
+  "version": "13.1.1",
   "description": "Emulate AWS λ and API Gateway locally when developing your Serverless project",
   "license": "MIT",
   "exports": {
@@ -18,6 +18,7 @@
     "prepare-release": "standard-version && prettier --write CHANGELOG.md",
     "prepublishOnly": "npm run lint",
     "prettier": "prettier --check .",
+    "prettier:fix": "prettier --write .",
     "prettier-check": "prettier -c --ignore-path .gitignore \"**/*.{css,html,js,json,md,yaml,yml}\"",
     "prettier-check:updated": "pipe-git-updated --ext=css --ext=html --ext=js --ext=json --ext=md --ext=yaml --ext=yml -- prettier -c",
     "prettify": "prettier --write --ignore-path .gitignore \"**/*.{css,html,js,json,md,yaml,yml}\"",
@@ -78,7 +79,7 @@
     ]
   },
   "dependencies": {
-    "@aws-sdk/client-lambda": "^3.414.0",
+    "@aws-sdk/client-lambda": "^3.418.0",
     "@hapi/boom": "^10.0.1",
     "@hapi/h2o2": "^10.0.4",
     "@hapi/hapi": "^21.3.2",
@@ -89,7 +90,7 @@
     "desm": "^1.3.0",
     "execa": "^8.0.1",
     "fs-extra": "^11.1.1",
-    "is-wsl": "^3.0.0",
+    "is-wsl": "^3.1.0",
     "java-invoke-local": "0.0.6",
     "jose": "^4.14.6",
     "js-string-escape": "^1.0.1",
@@ -99,14 +100,14 @@
     "luxon": "^3.2.0",
     "node-schedule": "^2.1.1",
     "p-memoize": "^7.1.1",
-    "p-retry": "^6.0.0",
+    "p-retry": "^6.1.0",
     "velocityjs": "^2.0.6",
     "ws": "^8.14.2"
   },
   "devDependencies": {
     "@istanbuljs/esm-loader-hook": "^0.2.0",
     "archiver": "^6.0.1",
-    "eslint": "^8.49.0",
+    "eslint": "^8.50.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-config-prettier": "^9.0.0",
     "eslint-plugin-import": "^2.28.1",

package/src/events/alb/HttpServer.js

@@ -292,7 +292,11 @@ export default class HttpServer {
   }
 
   createRoutes(functionKey, albEvent) {
-    const method = albEvent.conditions.method[0].toUpperCase()
+    let method = 'ANY'
+    if ((albEvent.conditions.method || []).length > 0) {
+      method = albEvent.conditions.method[0].toUpperCase()
+    }
+
     const path = albEvent.conditions.path[0]
     const hapiPath = generateAlbHapiPath(path, this.#options, this.#serverless)
 

package/src/events/http/createAuthScheme.js

@@ -276,7 +276,8 @@ export default function createAuthScheme(authorizerOptions, provider, lambda) {
     authorizerOptions.type !== 'request' ||
     authorizerOptions.identitySource
   ) {
-    const headerRegExp = /^(method.|\$)request.header.((?:\w+-?)+\w+)$/
+    // Only validate the first of N possible headers.
+    const headerRegExp = /^(method.|\$)request.header.((?:\w+-?)+\w+).*$/
     const queryStringRegExp =
       /^(method.|\$)request.querystring.((?:\w+-?)+\w+)$/