# @sempervirens/endpoint
> Middleware for handling Express routes
Latest version **1.0.0** (published 2026-07-06) · MIT license · 0 weekly downloads
## Install
```sh
npm install @sempervirens/endpoint
pnpm add @sempervirens/endpoint
yarn add @sempervirens/endpoint
bun add @sempervirens/endpoint
```
## Health
**Score 50/100 (C)** — status: active.
Positive: esm support; no vulnerabilities.
Warnings: low downloads; no types.
## Facts
| | |
|---|---|
| Version | 1.0.0 |
| Published | 2026-07-06 |
| First published | 2022-07-01 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Module format | ESM + CommonJS |
| Dependencies | 3 |
| Unpacked size | 35.2 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 0 |
| Author | Luke Dupuis |
| Maintainers | sempervirens |
| Keywords | Express, routing, middleware |
## Links
- npm: https://www.npmjs.com/package/@sempervirens/endpoint
- Repository: https://github.com/lukedupuis/sempervirens-endpoint
- Homepage: https://github.com/lukedupuis/sempervirens-endpoint#readme
- Issues: https://github.com/lukedupuis/sempervirens-endpoint/issues
- npm.io page: https://npm.io/package/@sempervirens/endpoint
## Dependencies (3)
- [@sempervirens/dao](https://npm.io/package/@sempervirens/dao.md) 1.0.0
- [@sempervirens/tools](https://npm.io/package/@sempervirens/tools.md) 1.0.0
- [@sempervirens/authorizer](https://npm.io/package/@sempervirens/authorizer.md) 1.0.0
## Alternatives
- [express-promise-router](https://npm.io/package/express-promise-router.md) — 736.1K weekly downloads
- [next-usequerystate](https://npm.io/package/next-usequerystate.md) — 29.8K weekly downloads
- [@bitkyc08/opencodex](https://npm.io/package/@bitkyc08/opencodex.md) — 4.6K weekly downloads
- [lynkr](https://npm.io/package/lynkr.md) — 575 weekly downloads
- [baremetal.js](https://npm.io/package/baremetal.js.md) — 42 weekly downloads
## Recent versions
- 1.0.0 (latest) — 2026-07-06
- 0.9.2 — 2022-08-16
- 0.9.1 — 2022-08-08
- 0.9.0 — 2022-08-06
- 0.8.3 — 2022-07-29
- 0.8.2 — 2022-07-18
- 0.8.1 — 2022-07-17
- 0.8.0 — 2022-07-16
- 0.7.0 — 2022-07-16
- 0.6.0 — 2022-07-16
- 0.5.0 — 2022-07-16
- 0.4.1 — 2022-07-15
- 0.4.0 — 2022-07-14
- 0.3.0 — 2022-07-09
- 0.2.2 — 2022-07-07
- … 3 more at https://npm.io/package/@sempervirens/endpoint/versions
## README
# Sempervirens Endpoint
Middleware for handling Express routes, it provides an organized way to register multiple Express endpoints, an extendable class for isolating endpoint functionality, standardization for sending success and error objects, and built-in authorization with minimal JWT configuration.
 
## Installation
`npm install @sempervirens/endpoint`
## Usage
The following steps provide minimal usage. It is recommneded to have separate files for each `RequestHandler` instance, and a separate `endpoints` file that imports the `RequestHandler` instances and exports an array of endpoint configurations. Also, while `@sempervirens/endpoint` may be used independently, or in conjunction with `@sempervirens/site-loader`, implementation of both is integrated and streamlined in `@sempervirens/server`.
### Non-secure Endpoints
1. Import `express` and Node `http` (or use `@sempervirens/server`).
2. Import `registerEndpoints` and `RequestHandler` from `@sempervirens/endpoint`.
3. Create request handlers.
4. Create an array of endpoint configurations.
5. Create an Express app.
6. Register the endpoints with the app.
7. Start the server.
```
import express from 'express';
import http from 'http';
import { registerEndpoints, RequestHandler } from '@sempervirens/endpoint';
// Recommended usage, in a separate file
class TestRequestHandler extends RequestHandler {
constructor({ req, res, data, isSecure }) {
super({ req, res, data, isSecure });
if (!this.isAuthorized) return;
this.#init();
}
#init() {
console.log(this.data);
// -> { prop1: 'val1' }
this.res.send('Success');
}
}
// In another separate file
const endpoints = [
{
path: 'GET /api/test',
handler: TestRequestHandler
data: { prop1: 'val1' } // Passed into RequestHandler constructor
}
];
const app = express();
registerEndpoints(app, endpoints);
http.createServer(app).listen(80, () => console.log('Listening'));
```
### Secure Endpoints
Passing `isSecure` to the endpoint configuration secures the endpoint by requiring a `Authorization Bearer ${token}` header to be passed in the request. See `@sempervirens/authorizer` or `@sempervirens/server` for details.
1. Import `express` and Node `http`.
2. Import `registerEndpoints` and `RequestHandler` from `@sempervirens/endpoint`.
3. Import `@sempervirens/authorizer`.
4. Initialize `authorizer`;
5. Create request handlers.
6. Create a set of endpoint configurations.
7. Create an Express app.
8. Register the endpoints with the app.
9. Start the server.
```
import express from 'express';
import http from 'http';
import authorizer from '@sempervirens/authorizer';
import { registerEndpoints, RequestHandler } from '@sempervirens/endpoint';
// See @sempervirens/authorizer or @sempervirens/server for details
const jwtPublicKey = readFileSync('./security/jwt/jwtRS256.key.pub', 'utf8');
const jwtPrivateKey = readFileSync('./security/jwt/jwtRS256.key', 'utf8');
authorizer.init({ jwtPublicKey, jwtPrivateKey });
// Recommended usage, in a separate file
class TestRequestHandler extends RequestHandler {
constructor({ req, res, data, isSecure }) {
super({ req, res, data, isSecure });
if (!this.isAuthorized) return;
this.#init();
}
#init() {
this.res.send('Success');
}
}
// In another separate file
const endpoints = [
{
path: 'GET /api/test',
handler: TestRequestHandler,
isSecure: true
}
];
const app = express();
registerEndpoints(app, endpoints);
http.createServer(app).listen(80, () => console.log('Listening'));
```
## API
### registerEndpoints (single function)
| Prop | Type | Params | Description |
|-------|------|--------|-------------|
| `registerEndpoints` | function | `app: Express app, endpoints: { path: string, handler: RequestHandler, data: object, isSecure: boolean }` | Registers the endpoints on the Express app. |
### ErrorCodes (enum)
| Prop | Type | Params | Description |
|-------|------|--------|-------------|
| `SCRIPT_ERROR` | string | n/a | Default error `code` for `RequestHandler error()`, it sends a generic `Server error` message to the client. |
| `USER_ERROR` | string | n/a | When specified as the `code` in `RequestHandler error()`, it sends the error message given in `error: new Error('Message')` to the client. |
### RequestHandler (class)
| Prop | Type | Params | Description |
|-------|------|--------|-------------|
| `constructor` | function | `{ req: Express request, res: Express response, data: {}, isSecure: boolean }` | The main entry point that is called when the Express route is invoked. If `data` is given, it provides the data to all instances as `this.data`, and if the `RequestHandler` is of a `SiteLoader` instance, both `data` parameters are merged with the `RequestHandler` set taking precedence if they have any of the same properties. |
| `send` | function | `{ message: string, data: object }` | Sends a standardized response to the client with a `message` and `data` object. It only sends if an error has not occurred and if a message has not already been sent. |
| `error` | function | `{ number: number, error: Error, code: ErrorCodes, suppressLog: boolean, status: number }` | Sends a standardized `error` object to the client. Typically only `number` and `error` are needed. If `code` is `USER_ERROR`, then it sends the message for the given `error`; otherwise, it sends a generic `Server error` message. It also logs to the server console, which provides server-side logging. Status may also be specified, but usally a soft `200` with an `error` object is sufficient so as not to throw a hard HTTP error in the browser console. |part
---
_Source: https://npm.io/package/@sempervirens/endpoint · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._