Scripts: Not able to import external packages about bruno

[helloanoop]

@DivyMohan14 Thanks for taking time and making async scripting work !

[helloanoop]

Hi @DivyMohan14 !

Glad that you like Bruno!
Also, nice to see that you are checking out the external libraries feature.
It's one of the features that makes us unique to other similar tools out there.

The reason for using sandbox is from a security standpoint, the goal being yours script should not access filesystem unless you provide explicit access. This is to protect from any malicious 3rd party libs that might try to access stuff using fs module

The long term plan is to give more flexibility for the user to turn off the sandbox, via a ui toggle in the app OR allow to override it using a property in bruno.json at the collection level

For the short term, I feel we can give access to some core nodejs modules inside the sandbox by default.
I am thinking of opening up access to stream, path, url, util modules

Can you take this up @DivyMohan14 and raise a PR ?
You can import the 4 core node modules here and inject them into the sandbox here

There is a problem that you might run into. The pre-request script works fine with synchronous code, but I don't think it yet handles asynchronous code like fetch. Please let me know how it goes?

[helloanoop]

I spent some time on this today.

Added some node core modules to the sandbox. I also plan to expose node-fetch and axios out of the box as this is a very common use case for people to hit a http endpoint pre/post request.

Here is the PR that is tracking this work: https://github.com/usebruno/bruno/pull/139/files

Currently struggling with making async await work in NodeVM
Raised a github issue here: patriksimek/vm2#513

[DivyMohan14]

Yeah was working on this as well, same thing NodeVM is not waiting for the async function to finish implementation as you already pointed out.

So I thought if this is not fully supported will shift to some sync request libraries like sync-request
This internally uses child_process to spawn a new worker thread and then process the request. Will be trying to set this up and see if I can make this work.

[karl-gustav]

@DivyMohan14 Would you mind posting your resulting access-token pre-request script here for posterity?