
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@vrbo/catalyst-server
Advanced tools
Configuration and composition management for Hapi.js applications.
Catalyst-server is a configuration and composition management tool for Hapi.js applications. It allows for composition and configuration that is environment aware and extensible for a web application. This is managed from a single manifest.json
file. The server also will include sensible defaults and implementations (like hapi-pino for logging and crumb for CSRF).
npm i @vrbo/catalyst-server @hapi/hapi
index.js
file for starting your server (example below).manifest.json
for composition and configuration (example below).node index.js
const Catalyst = require('@vrbo/catalyst-server');
const Path = require('path');
async function start(options = {}) {
const server = await Catalyst.init({
...options,
userConfigPath: Path.resolve(__dirname, 'manifest.json')
});
await server.start();
server.log(['info'], `server running: ${server.info.uri}`);
return server;
}
start();
{
// server configuration and application context variables.
"server": {
"app": {
}
},
// Hapi plugins
"register": {
}
}
Catalyst-server uses @vrbo/steerage
to configure and compose your application. It is environment aware and has some configuration protocols to resolve paths, read environment variables, import other JSON files, and more.
At its core, catalyst-server
loads a manifest.json
file to initialize and start up a Hapi.js server. This file has a section for application configuration and composition via registering plugins.
Below is a basic example of a manifest.json
file:
{
// server configuration and application context variables.
"server": {
"app": {
"urlPrefix": "temp/",
"siteTitle": "temp site"
}
},
// Hapi plugins
"register": {
"Inert": {
"register": "require:inert"
},
"Vision": {
"register": "require:vision",
"options": {
"engines": {
"html": "require:handlebars"
},
"path": "path:./templates"
}
}
}
}
You can access all the configuration values in your code from the server.app.config
object. So the code to retrieve the example values looks like this:
const urlPrefix = server.app.config.get('urlPrefix');
const siteTitle = server.app.config.get('siteTitle');
The register
block registers the plugins referenced. In this example, it is using shortstop to resolve node modules using require:[module]
and resolve paths using path:[file_path]
.
Catalyst-server ships with the following shortstop
resolvers by default:
@vrbo/steerage
uses confidence
to give you the ability to build environmentally aware servers. See the example manifest.json
file below.
{
// server configuration and application context variables.
"server": {
"app": {
"urlPrefix": {
"$filter": "env.NODE_ENV",
"production":"/application",
"$default":"/temp"
}
}
},
// Hapi plugins
"register": {
"crumb": {
"register": "require:crumb",
"options": {
"cookieOptions": {
"isSecure": {
"$filter": "env.NODE_ENV",
"production": true,
"$default": false
}
},
"restful": true
}
}
}
}
In this example, the $filter
and $default
fields allow for filtering based on a resolver like env.NODE_ENV
.
The $filter
field evaluates the environment variable NODE_ENV
. Then, it will look to the following fields for a match in the keys for that value. Otherwise, the $default
value is used. So the configuration values and options for plugins will change based on the environment variable NODE_ENV
.
This is what the above manifest configuration will return in code for different environments:
// ENVIRONMENT VARIABLE NODE_ENV='development'
const urlPrefix = server.app.config.get('urlPrefix');
// returns '/temp'
// crumb will NOT use secure cookies.
// ENVIRONMENT VARIABLE NODE_ENV='production'
const urlPrefix = server.app.config.get('urlPrefix');
// returns '/application'
// crumb WILL use secure cookies.
Using a filter, you can easily enable/disable a plugin for a given environment. See the code below for an example, where we disable hapi-pino
in development mode, and enable it in all other environments:
{
"register": {
"hapi-pino": {
"enabled": {
"$filter": "env.NODE_ENV",
"production": true,
"$default": false
}
}
}
}
Here are some examples of the shortstop
resolvers which make handling complex configuration and composition rather straight forward.
file:
Reading a file into a value. "key": "file:./pgp_pub.key"
pgp_pub.key
and will set the value key
to the contents of that file.path:
Resolve a path. "path": "path:./templates"
./templates
and will set the value path
to the fully resolved path.base64:
Resolve a base64 string. "bytes": "base64:SGVsbG8="
SGVsbG8=
and will set the bytes
value to a buffer from the base64 string.env:
Access an environment variable. "dbHost": "env:PG_HOST"
PG_HOST
and will set the dbHost
value to the environment variable value.require:
Require a javascript or json file. "register": "require:inert"
inert
and will set the register
to what that module exports. This works for js files in you application.exec:
Execute a function in a file. "status": "exec:./callStatus#get"
callStatus.js
and will run the exported function get
and whatever value is return will be set for the status
value.glob:
Match files using the patterns shell uses. "files": "glob:./assets/**/*.js"
./assets/**/*.js
and sets the value of files
to an array of files that match the glob string.import:
Imports another JSON file, supports comments. "data": "import:./data/salt.json"
./data/salt.json
, evaluate it (ignoring comments) and set data
to that value.eval:
Safely execute a string as javascript code. "start": "eval:new Date().toISOString()"
start
to the current date time as an ISO string. {
"server": {
"app":{
"first": "abc",
"second": "xyz",
"child": {
"value":"eval:${server.app.first}_${server.app.second}"
}
}
}
}
eval
can also be used to reference other values in the manifest
. In the above example the child/value
in server/app
will be set to 'abc_xyz'
.See the examples folder for example code.
2.1.0 - 2020-01-09
@vrbo
namespaced versions of steerage
and determination
determination
to v3standard
, sinon
, and nyc
dev depsFAQs
Configuration and composition management for Hapi.js applications.
The npm package @vrbo/catalyst-server receives a total of 4 weekly downloads. As such, @vrbo/catalyst-server popularity was classified as not popular.
We found that @vrbo/catalyst-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.