website·Indexed 32 days ago
https://hono.zhcndoc.comA small, simple, and ultra-fast web framework built on Web standards. Hono is compatible with any JavaScript runtime, including Cloudflare Workers, Fastly Compute, Deno, Bun, Vercel, Netlify, and AWS Lambda. It features a comprehensive suite of built-in middleware (such as JWT, CORS, and Basic Auth) and helper utilities for HTML, CSS, and streaming.
hono/jsx/dom, a lightweight JSX runtime for creating interactive UIs that run directly in the browser. It is designed to be significantly smaller than React (e.g., a counter example is ~2.8KB Brotli compressed compared to React's ~47.8KB).hono/tiny preset) and zero dependencies.AppType. This ensures the hc (Hono Client) can correctly infer the API types.// authors.ts
import { Hono } from 'hono'
const app = new Hono()
.get('/', (c) => c.json('List authors'))
.get('/:id', (c) => c.json(`Author ${c.req.param('id')}`))
export default app
export type AppType = typeof app
// client.ts
import type { AppType } from './authors'
import { hc } from 'hono/client'
const client = hc<AppType>('http://localhost') // Fully typedHono RPC allows sharing API specifications between a server and a client by exporting the server's application type (AppType). The Hono Client (hc) uses this type to provide full TypeScript inference for request inputs (validators) and response outputs (c.json()).
Critical Requirement: For RPC types to work correctly in a monorepo, both the client and server tsconfig.json files must have "strict": true set in compilerOptions.
The csrf middleware protects against CSRF attacks by verifying the Origin and Sec-Fetch-Site headers. A request is allowed if either validation passes.
To optimize performance and avoid false positives, the middleware only validates requests that meet both of these criteria:
application/x-www-form-urlencoded, multipart/form-data, or text/plain).Caveat: This middleware may not work in environments where the Origin header is stripped by reverse proxies or in very old browsers. In such cases, use a CSRF token-based approach.
import { Hono } from 'hono'
import { csrf } from 'hono/csrf'
const app = new Hono()
// Enable default CSRF protection
app.use(csrf())@marplex/hono-azurefunc-adapter. This allows Hono to handle HTTP requests within the Azure serverless environment.Context object is instantiated for every request and persists until the response is returned. It provides a unified interface to access the HonoRequest and Response objects, set HTTP status codes and headers, and store request-scoped variables.fetch function. This includes core objects for handling HTTP requests and responses such as Request, Response, URL, URLSearchParams, and Headers. Because it adheres to these standards, Hono code is highly portable across different JavaScript runtimes and environments.Hono provides five different router implementations to balance speed, feature support, and bundle size. By default, Hono uses a SmartRouter that combines RegExpRouter and TrieRouter to automatically select the fastest option based on the registered routes.