Fix crypto.randomUUID error in non-secure contexts (HTTP)

Author: nxnom

packages/core/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @spoosh/core
 
+## 0.18.1
+
+- Add `generateUUID` utility with fallback for non-secure contexts (HTTP)
+
 ## 0.18.0
 
 - Add `matchTag` and `matchTags` utilities for wildcard pattern matching

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spoosh/core",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "license": "MIT",
   "description": "Type-safe API toolkit with plugin middleware system",
   "keywords": [

packages/core/src/utils/buildUrl.test.ts

@@ -40,6 +40,46 @@ describe("buildUrl", () => {
     });
   });
 
+  describe("IP address URLs", () => {
+    it("should handle IP address with path", () => {
+      const result = buildUrl("http://159.223.72.31/api", ["users"]);
+      expect(result).toBe("http://159.223.72.31/api/users");
+    });
+
+    it("should handle IP address with path and multiple segments", () => {
+      const result = buildUrl("http://159.223.72.31/api", ["users", "123"]);
+      expect(result).toBe("http://159.223.72.31/api/users/123");
+    });
+
+    it("should handle IP address with port and path", () => {
+      const result = buildUrl("http://192.168.1.1:8080/api", ["posts"]);
+      expect(result).toBe("http://192.168.1.1:8080/api/posts");
+    });
+
+    it("should handle IP address with empty path array", () => {
+      const result = buildUrl("http://159.223.72.31/api", []);
+      expect(result).toBe("http://159.223.72.31/api/");
+    });
+
+    it("should handle IP address with query parameters", () => {
+      const result = buildUrl("http://159.223.72.31/api", ["users"], {
+        page: 1,
+        limit: 10,
+      });
+      expect(result).toBe("http://159.223.72.31/api/users?page=1&limit=10");
+    });
+
+    it("should handle localhost IP with path", () => {
+      const result = buildUrl("http://127.0.0.1:3000/api", ["health"]);
+      expect(result).toBe("http://127.0.0.1:3000/api/health");
+    });
+
+    it("should handle IP address with nested api path", () => {
+      const result = buildUrl("http://10.0.0.1/v1/api", ["resources", "items"]);
+      expect(result).toBe("http://10.0.0.1/v1/api/resources/items");
+    });
+  });
+
   describe("relative paths", () => {
     it("should handle relative base without leading slash", () => {
       const result = buildUrl("api", ["users"]);

packages/core/src/utils/index.ts

@@ -30,3 +30,4 @@ export { matchTag, matchTags, normalizeTag } from "./matchTag";
 export { isNetworkError, isAbortError } from "./errors";
 export { clone } from "./clone";
 export { createTracer } from "./tracer";
+export { generateUUID } from "./uuid";

packages/core/src/utils/uuid.ts

@@ -0,0 +1,19 @@
+/**
+ * Generates a UUID v4 string.
+ * Uses crypto.randomUUID() when available (secure contexts),
+ * falls back to Math.random() for non-secure contexts (HTTP).
+ */
+export function generateUUID(): string {
+  if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.randomUUID === "function"
+  ) {
+    return crypto.randomUUID();
+  }
+
+  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+    const r = (Math.random() * 16) | 0;
+    const v = c === "x" ? r : (r & 0x3) | 0x8;
+    return v.toString(16);
+  });
+}

packages/devtool/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @spoosh/devtool
 
+## 0.7.4
+
+- Fix `crypto.randomUUID` error in non-secure contexts (HTTP)
+
 ## 0.7.3
 
 - Fix white spaces and newlines not rendering correctly in import view

packages/devtool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spoosh/devtool",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Visual debugging plugin for Spoosh - floating devtool panel with plugin execution visualization",
   "license": "MIT",
   "repository": {
@@ -41,7 +41,7 @@
     "format": "prettier --write 'src/**/*.ts' '*.md'"
   },
   "peerDependencies": {
-    "@spoosh/core": ">=0.17.0"
+    "@spoosh/core": ">=0.18.1"
   },
   "devDependencies": {
     "@spoosh/core": "workspace:*",

packages/devtool/src/store/index.ts

@@ -6,6 +6,7 @@ import type {
   StateManager,
   EventEmitter,
 } from "@spoosh/core";
+import { generateUUID } from "@spoosh/core";
 
 import type {
   CacheEntryDisplay,
@@ -251,7 +252,7 @@ export class DevToolStore implements DevToolStoreInterface {
     const trace: OperationTrace = {
       ...context,
       type: "request",
-      id: crypto.randomUUID(),
+      id: generateUUID(),
       path: resolvedPath,
       startTime: now,
       timestamp: Date.now(),

packages/transport-sse/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @spoosh/transport-sse
 
+## 0.1.2
+
+- Fix `crypto.randomUUID` error in non-secure contexts (HTTP)
+
 ## 0.1.1
 
 - Attach `resolveParser` and `resolveAccumulator` utilities to transport object under `utils` namespace

packages/transport-sse/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spoosh/transport-sse",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,8 +17,10 @@
     "format": "prettier --write 'src/**/*.ts' '*.md'"
   },
   "dependencies": {
-    "@microsoft/fetch-event-source": "^2.0.1",
-    "@spoosh/core": "workspace:*"
+    "@microsoft/fetch-event-source": "^2.0.1"
+  },
+  "peerDependencies": {
+    "@spoosh/core": ">=0.18.1"
   },
   "devDependencies": {
     "tsup": "^8.0.0",