Configuration for request body parsing.
The default character set for the request body.
The content type of the request body.
The maximum size of the request body.
Cache configuration options.
Cookie-related configuration options.
Additional cookie options.
Optionalsecret?: stringThe secret used for signing cookies. Undefined by default: cookies are NOT signed unless a strong secret (>= 32 chars) is configured. A weak/empty secret is rejected rather than silently producing a forgeable signature.
Cross-Origin Resource Sharing (CORS) configuration options.
ETag-related configuration options.
Optionalfunction?: (content: string, encoding: Encoding) => stringA custom function for generating ETags.
File upload and response configuration options.
The default encoding for compressed static files.
Configuration for file responses.
Optionalextensions?: string[]The list of accepted file extensions.
OptionalrootDir?: stringThe root directory for serving static files.
Configuration for file uploads.
Host-related configuration options.
Whether only subdomains are allowed.
A list of trusted hostnames.
A list of trusted host patterns.
JSON-related configuration options.
JSONP-related configuration options.
Configuration for the JSONP callback function.
The name of the JSONP callback parameter.
Request limits — defence-in-depth against denial-of-service via oversized requests.
Applied by RequestLimitsMiddleware (and effective across every adapter, incl. serverless
where the Node server knobs are unavailable). Set a value to 0 to disable that check.
Maximum number of cookies accepted in the request (0 = unlimited). Default 50.
Maximum number of distinct request headers accepted (0 = unlimited). Default 100.
Proxy-related configuration options.
A list of trusted proxies.
A list of untrusted proxies.
Subdomain-related configuration options.
The offset to use when determining subdomains.
Represents the core HTTP config options for the application. HTTP configuration options that are commonly used across adapters.