@ahmetshbz/zap

🚀 Enterprise-grade HTTP Client - Production-ready, type-safe, universal HTTP client for modern JavaScript/TypeScript applications.

Features

🔒 Security

• Request Signing - AWS Signature v4 style request signing
• OAuth 2.0 / OIDC - Token management with auto-refresh and PKCE support
• TLS/SSL - Certificate pinning and validation
• SSRF Protection - Prevent Server-Side Request Forgery attacks
• Secrets Management - Secure credential storage with encryption

⚡ Performance

• Multi-layer Caching - L1 (memory) + L2 (Redis) with LRU/LFU/ARC algorithms
• Request Deduplication - Coalesce identical concurrent requests
• Compression - Automatic gzip, brotli, deflate support
• Streaming - Upload/download streaming with progress tracking
• Resume Support - Resume interrupted downloads

🛡️ Resilience

• Advanced Retry - Exponential backoff with decorrelated jitter
• Circuit Breaker - Prevent cascading failures
• Rate Limiting - Token bucket, sliding window algorithms
• Timeout Management - Per-request and global timeouts
• Bulkhead Pattern - Isolate failures

Installation

bun add @ahmetshbz/zap

Quick Start

import { HttpClient } from '@ahmetshbz/zap';

const client = new HttpClient({
  baseURL: 'https://api.example.com',
  timeout: 5000,
});

// Simple requests
const data = await client.get('/users/1');
const created = await client.post('/users', { name: 'John' });

Configuration Examples

Security

const client = new HttpClient({
  baseURL: 'https://api.example.com',
  securityConfig: {
    signing: {
      enabled: true,
      algorithm: 'AWS4-HMAC-SHA256',
      accessKeyId: process.env.AWS_ACCESS_KEY_ID!,
      secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY!,
    },
    oauth: {
      enabled: true,
      clientId: process.env.OAUTH_CLIENT_ID!,
      clientSecret: process.env.OAUTH_CLIENT_SECRET!,
      tokenUrl: 'https://auth.example.com/token',
    },
  },
});

Performance

const client = new HttpClient({
  cacheConfig: {
    enabled: true,
    algorithm: 'lru',
    maxSize: 1000,
    defaultTtl: 60000,
  },
  compressionConfig: {
    enabled: true,
    preferredAlgorithms: ['br', 'gzip'],
  },
  streamConfig: {
    enableUploadProgress: true,
    enableDownloadProgress: true,
  },
});

Resilience

const client = new HttpClient({
  resilienceConfig: {
    retry: {
      enabled: true,
      maxAttempts: 3,
      jitterType: 'decorrelated',
    },
    circuitBreaker: {
      enabled: true,
      failureThreshold: 5,
    },
    rateLimit: {
      enabled: true,
      maxRequests: 100,
      windowMs: 60000,
    },
  },
});

Advanced Features

Progress Tracking

await client.post('/upload', fileData, {
  onUploadProgress: (progress) => {
    console.log(`${progress.percentage}% - ${progress.rate} B/s`);
  },
});

Interceptors

const client = new HttpClient({
  onRequest: async (ctx) => {
    ctx.options.headers = {
      ...ctx.options.headers,
      Authorization: `Bearer ${await getToken()}`,
    };
  },
  onResponse: async (ctx) => {
    return { ...ctx.response._data, timestamp: Date.now() };
  },
});

Cache Management

import { MultiLayerCache } from '@ahmetshbz/zap';

const cache = new MultiLayerCache(l1Config, l2Config);
await cache.set('key', data, { ttl: 60000, tags: ['users'] });
await cache.invalidateByTags(['users']);

TypeScript

Fully typed with TypeScript 5.0+:

interface User {
  id: number;
  name: string;
}

const user = await client.get<User>('/users/1');
// user is typed as User

Runtime Support

✅ Node.js 18+ | ✅ Bun | ✅ Deno | ✅ Browser | ✅ Edge Runtime

License

MIT