Merge remote-tracking branch 'joshkel/type-updates'

Author: devinivy

lib/types/response.d.ts

@@ -316,7 +316,7 @@ export interface ResponseObject extends Podium {
      * Only available after calling the response.redirect() method.
      * [See docs](https://github.com/hapijs/hapi/blob/master/API.md#-responsetemporaryistemporary)
      */
-    temporary(isTemporary: boolean): ResponseObject;
+    temporary(isTemporary?: boolean): ResponseObject;
 
     /**
      * Sets the status code to 301 or 308 (based on the response.rewritable() setting) where:
@@ -325,7 +325,7 @@ export interface ResponseObject extends Podium {
      * Only available after calling the response.redirect() method.
      * [See docs](https://github.com/hapijs/hapi/blob/master/API.md#-responsepermanentispermanent)
      */
-    permanent(isPermanent: boolean): ResponseObject;
+    permanent(isPermanent?: boolean): ResponseObject;
 
     /**
      * Sets the status code to 301/302 for rewritable (allows changing the request method from 'POST' to 'GET') or 307/308 for non-rewritable (does not allow changing the request method from 'POST'
@@ -335,7 +335,7 @@ export interface ResponseObject extends Podium {
      * Only available after calling the response.redirect() method.
      * [See docs](https://github.com/hapijs/hapi/blob/master/API.md#-responserewritableisrewritable)
      */
-    rewritable(isRewritable: boolean): ResponseObject;
+    rewritable(isRewritable?: boolean): ResponseObject;
 }
 
 /**

lib/types/route.d.ts

@@ -187,6 +187,10 @@ export interface RouteOptionsCors {
      * if true, allows user credentials to be sent ('Access-Control-Allow-Credentials'). Defaults to false.
      */
     credentials?: boolean | undefined;
+    /**
+     * the status code used for CORS preflight responses, either 200 or 204. Defaults to 200.
+     */
+    preflightStatusCode?: 200 | 204;
 }
 
 /**
@@ -309,6 +313,13 @@ export interface RouteOptionsPayload {
      */
     parse?: boolean | 'gunzip' | undefined;
 
+    /**
+     * @default to 'error'.
+     * Sets handling of incoming payload that may contain a prototype poisoning security attack.
+     * [See docs](https://github.com/hapijs/hapi/blob/master/API.md#-routeoptionspayloadprotoaction)
+     */
+    protoAction?: 'error' | 'remove' | 'ignore';
+
     /**
      * @default to 10000 (10 seconds).
      * Payload reception timeout in milliseconds. Sets the maximum time allowed for the client to transmit the request payload (body) before giving up and responding with a Request Timeout (408)
@@ -497,15 +508,15 @@ export interface RouteOptionsSecureObject {
         /**
          * the max-age portion of the header, as a number. Default is 15768000.
          */
-        maxAge: number;
+        maxAge?: number;
         /**
          * a boolean specifying whether to add the includeSubDomains flag to the header.
          */
-        includeSubDomains: boolean;
+        includeSubDomains?: boolean;
         /**
          * a boolean specifying whether to add the 'preload' flag (used to submit domains inclusion in Chrome's HTTP Strict Transport Security (HSTS) preload list) to the header.
          */
-        preload: boolean;
+        preload?: boolean;
     } | undefined;
     /**
      * controls the 'X-Frame-Options' header

lib/types/server/options.d.ts

@@ -88,8 +88,8 @@ export interface ServerOptions {
      * false.
      */
     debug?: false | {
-        log?: string[] | false | undefined;
-        request?: string[] | false | undefined;
+        log?: string | string[] | false | undefined;
+        request?: string | string[] | false | undefined;
     } | undefined;
 
     /**
@@ -152,6 +152,19 @@ export interface ServerOptions {
      */
     mime?: MimosOptions | undefined;
 
+    /**
+     * @default { cleanStop: true }
+     * Defines server handling of server operations.
+     */
+    operations?: {
+        /**
+         * @default true
+         * If true, the server keeps track of open connections and properly closes them when the server is stopped.
+         * [See docs](https://github.com/hapijs/hapi/blob/master/API.md#-serveroptionsoperations)
+         */
+        cleanStop?: boolean;
+    }
+
     /**
      * @default {}.
      * Plugin-specific configuration which can later be accessed via server.settings.plugins. plugins is an object where each key is a plugin name and the value is the configuration. Note the

lib/types/server/server.d.ts

@@ -626,7 +626,7 @@ export class Server<A = ServerApplicationState> {
      * * path - the route path.
      * [See docs](https://github.com/hapijs/hapi/blob/master/API.md#-servertablehost)
      */
-    table(host?: string | undefined): RequestRoute[];
+    table(host?: string | string[] | undefined): RequestRoute[];
 
     /**
      * Registers a server validation module used to compile raw validation rules into validation schemas for all routes.

lib/types/server/state.d.ts

@@ -66,6 +66,8 @@ export interface ServerStateCookieOptions {
     strictHeader?: boolean | undefined;
     /** used by proxy plugins (e.g. h2o2). */
     passThrough?: any | undefined;
+    /** a function using the signature `async function(definition, request)` used to override a request-specific cookie settings */
+    contextualize?(definition: ServerStateCookieOptions, request: Request): void | Promise<void>;
 }
 
 /**