Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
http-client
Advanced tools
http-client lets you compose HTTP clients using JavaScript's fetch API. This library has the following goals:
Using npm:
$ npm install --save http-client
Then, use as you would anything else:
// using ES6 modules
import { fetch, createFetch } from 'http-client'
// using CommonJS modules
var fetch = require('http-client').fetch
var createFetch = require('http-client').createFetch
In node, http-client automatically uses the node-fetch library under the hood so no extra configuration is necessary. You'll need to be running node >= 4. Be sure to read about the known differences between node-fetch and the fetch spec.
You'll need to shim window.fetch
in browsers that do not support it (Safari and IE). github/fetch is a great polyfill.
http-client uses the browser
field in its package.json
to avoid bundling node-fetch
in browsers. In Browserify, this will just work™. If you're bundling http-client with webpack, you'll either need to ignore node-fetch
explicitly or include the following in your config:
module.exports = {
resolve: {
packageAlias: 'browser'
}
}
The UMD build is also available on npmcdn:
<script src="https://npmcdn.com/http-client/umd/http-client.min.js"></script>
You can find the library on window.HTTPClient
.
http-client simplifies the process of creating flexible HTTP clients that work in both node and the browser. You create your own fetch
function using the createFetch
method, optionally passing middleware as arguments.
import { createFetch, base, accept, parseJSON } from 'http-client'
const fetch = createFetch(
base('https://api.stripe.com/v1'), // Prefix all request URLs
accept('application/json'), // Set "Accept: application/json" in the request headers
parseJSON() // Read the response as JSON and put it in response.jsonData
)
fetch('/customers/5').then(response => {
console.log(response.jsonData)
})
http-client also exports a "global" fetch
function if you need it (i.e. don't want middleware).
Arrrgggh, but I HATE promises!!
It's cool. I've got your back.
All fetch
functions in http-client support a trailing callback
argument that you can use to handle responses and/or errors just like you're used to doing in node.js.
fetch('/customers/5', (error, response) => {
// ...
})
Notice I said the callback is the trailing argument. This means that you can omit either of the first two arguments; just make sure the callback comes last.
Note: When you do use a callback, a promise is still returned. However, it always resolves to undefined
. It is assumed that if you're using a callback you'll do anything you need to with the response and/or error in the callback.
fetch([input], [options], [callback])
An enhanced fetch
function that accepts an optional callback
as a trailing argument. Use this directly if you don't need any middleware.
createFetch(...middleware)
Creates a fetch
function that is fronted by some middleware. This function has the same signature as the enhanced fetch
function in the top-level API.
createStack(...middleware)
Combines several middleware into one, in the same order they are provided as arguments. Use this function to create re-usable middleware stacks.
handleResponse(callback)
A helper for creating middleware that enhances the response
object in some way. Used internally to create the parseText
and parseJSON
middleware.
http-client provides a variety of middleware that may be used to extend the functionality of the client. Out of the box, http-client ships with the following middleware:
method(verb)
Sets the request method.
import { createFetch, method } from 'http-client'
const fetch = createFetch(
method('POST')
)
header(name, value)
Adds a header to the request.
import { createFetch, header } from 'http-client'
const fetch = createFetch(
header('Content-Type', 'application/json')
)
auth(value)
Adds an Authorization
header to the request.
import { createFetch, auth } from 'http-client'
const fetch = createFetch(
auth('Bearer ' + oauth2Token)
)
accept(contentType)
Adds an Accept
header to the request.
import { createFetch, accept } from 'http-client'
const fetch = createFetch(
accept('application/json')
)
base(baseURL)
Adds the given baseURL
to the beginning of the request URL.
import { createFetch, base } from 'http-client'
const fetch = createFetch(
base('https://api.stripe.com/v1')
)
fetch('/customers/5') // GET https://api.stripe.com/v1/customers/5
query(object)
Adds the data in the given object (or string) to the query string of the request URL.
body(content, contentType)
Sets the given content
string as the request body.
import { createFetch, body } from 'http-client'
const fetch = createFetch(
body(JSON.stringify(data), 'application/json')
)
json(object)
Adds the data in the given object as JSON to the request body.
params(object)
Adds the given object to the query string of GET
/HEAD
requests and as a x-www-form-urlencoded
payload on all others.
import { createFetch, method, params } from 'http-client'
// Create a client that will append hello=world to the URL in the query string
const fetch = createFetch(
params({ hello: 'world' })
)
// Create a client that will send hello=world as POST data
const fetch = createFetch(
method('POST'),
params({ hello: 'world' })
)
parseText(propertyName = 'textString')
Reads the response body as text and puts it on response.textString
.
import { createFetch, parseText } from 'http-client'
const fetch = createFetch(
parseText()
)
fetch(input).then(response => {
console.log(response.textString)
})
parseJSON(propertyName = 'jsonData')
Reads the response body as JSON and puts it on response.jsonData
.
import { createFetch, parseJSON } from 'http-client'
const fetch = createFetch(
parseJSON()
)
fetch(input).then(response => {
console.log(response.jsonData)
})
requestInfo()
Adds requestURL
and requestOptions
properties to the response (or error) object so you can inspect them. Mainly useful for testing/debugging (should be put last in the list of middleware).
import { createFetch, requestInfo } from 'http-client'
const fetch = createFetch(
// ...
requestInfo()
)
fetch(input).then(response => {
console.log(response.requestURL, response.requestOptions)
})
Middleware may be combined together into re-usable middleware "stacks" using createStack
. A stack is itself a middleware that is composed of one or more other pieces of middleware.
This is useful when you have a common set of functionality that you'd like to share between several different fetch
methods, e.g.:
import { createStack, createFetch, header, base, parseJSON } from 'http-client'
const commonStack = createStack(
header('X-Auth-Key', key),
header('X-Auth-Email', email),
base('https://api.cloudflare.com/client/v4'),
parseJSON()
)
// This fetch function can be used standalone...
const fetch = createFetch(commonStack)
// ...or we can add further middleware to create another fetch function!
const fetchSinceBeginningOf2015 = createFetch(
commonStack,
query({ since: '2015-01-01T00:00:00Z' })
)
[v2.4.2]
Mar 22, 2016
FAQs
Compose HTTP clients using JavaScript's fetch API
The npm package http-client receives a total of 3,930 weekly downloads. As such, http-client popularity was classified as popular.
We found that http-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.