hapijs/hapi
Hapi
Hapi is a configuration-driven web framework for building secure and scalable HTTP servers and APIs on the Node.js runtime. It functions as a REST API development framework and an enterprise server implementation focused on stability, security, and comprehensive input validation.
The framework is built around a plugin-based architecture, allowing core functionality and custom logic to be organized into modular, registerable plugins. It serves as an HTTP request lifecycle manager, enabling the interception and modification of requests through pre-handlers and extensions before they reach the final route handler.
The project provides capabilities for schema-based input validation, strategy-based authentication, and CORS policy configuration. It includes tools for traffic management via resource-limit load shedding and performance optimization through internal method caching. For testing, the system supports in-process request injection to simulate HTTP requests without a live network connection.
Features
- Plugin-Based Architectures - Uses a plugin-based architecture to modularize core functionality and register new routes or methods.
- Node.js Server Frameworks - Functions as a comprehensive framework for building secure, scalable HTTP servers and APIs on the Node.js runtime.
- Web Servers - Implements a lightweight server for handling HTTP network requests and managing application state.
- Authentication Strategies - Supports interchangeable authentication strategies to validate user identities across different route access levels.
- Input Validation Schemas - Enforces data shapes on headers and payloads using schema-based validation before requests reach the handler.
- Application Plugins - Provides a plugin system to modularize application logic and extend server functionality.
- Modular Application Architectures - Organizes server logic using a modular, plugin-based architecture to manage shared state.
- API Routing - Maps HTTP methods and URI paths to specific handler functions for processing API requests.
- Configuration-Driven Frameworks - Defines routes, validation schemas, and authentication strategies through declarative configuration objects.
- Request Data Handling - Handles incoming request data as memory buffers, readable streams, or temporary files.
- Request Lifecycle Hooks - Provides hooks to intercept and modify URLs, methods, or responses at specific stages of the request lifecycle.
- Request Pipelines - Implements a request pipeline that executes pre-handlers and extension points before the final route handler.
- REST API Frameworks - Provides a structured system for mapping HTTP routes to handlers with built-in payload processing and input validation.
- RESTful API Development - Facilitates REST API development by mapping HTTP routes to handlers with built-in validation.
- Method Result Caches - Caches the results of registered utility functions to avoid redundant data fetching.
- Typed Plugin Interfaces - Enables the creation of server extensions with defined options and API surfaces to ensure plugins remain strongly typed.
- HTTP Cookie Management - Provides structured manipulation of HTTP cookies to track user sessions across requests.
- Typed Server Methods - Provides registered shared functions that return strongly typed values and arguments with built-in caching.
- API Gateway Security - Implements security layers through authentication strategies and CORS policies to protect API resources.
- Load Shedding - Automatically rejects incoming requests when heap or event loop lag exceed defined system limits.
- Request Load Shedding - Automatically rejects incoming requests when the server exceeds defined heap or event loop limits.
- API Testing - Supports verifying routing logic and API behavior through in-process request injection.
- Automated Test Suites - Enables automated verification of server behavior by simulating HTTP requests without a live network.
- Request-Response Lifecycle Handlers - Implements a request-response pipeline that allows intercepting and modifying HTTP traffic through pre-handlers and extensions.
- Request Simulators - Enables simulating HTTP requests by bypassing the network layer to test routing logic directly.
- CORS Policies - Provides built-in configuration for managing Cross-Origin Resource Sharing security headers.
- High-Performance HTTP Servers - Optimizes for high-throughput and low-latency via internal method caching and load management.
- Pre-handler Sequences - Executes an ordered sequence of prerequisite operations in serial or parallel before the primary route handler.
- Type-Safe Routing - Ensures type safety for routes by defining expected shapes for payloads, query parameters, and path variables.
- Node.js Frameworks and Tools - Configuration-centric web framework.
- Web Frameworks - Framework for building robust applications and services.
