fix: 🐛 request.url getter fails when using IPv6 and HTTP2 [#4560] (#4559)

* fix: 🐛 request.url getter fails when using HTTP2 and IPv6

* test: add coverage for :authority header fallback and IPv6 URL building

Made-with: Cursor

* perf: use regex test for IPv6 detection in _isBareIpv6

Made-with: Cursor

Author: gsoldevila

lib/request.js

@@ -184,7 +184,9 @@ exports = module.exports = internals.Request = class {
                 return url;
             }
 
-            this._url = new Url.URL(`${this._core.info.protocol}://${this.info.host || `${this._core.info.host}:${this._core.info.port}`}${source}`);
+            const host = this.info.host || this._formatIpv6Host(this._core.info.host, this._core.info.port);
+
+            this._url = new Url.URL(`${this._core.info.protocol}://${host}${source}`);
         }
         else {
 
@@ -201,6 +203,18 @@ exports = module.exports = internals.Request = class {
         return this._url;
     }
 
+    _isBareIpv6(host) {
+
+        // An IPv6 address contains at least two colons.
+
+        return /:[^:]*:/.test(host);
+    }
+
+    _formatIpv6Host(host, port) {
+
+        return this._isBareIpv6(host) ? `[${host}]:${port}` : `${host}:${port}`;
+    }
+
     _normalizePath(url, options) {
 
         let path = this._core.router.normalize(url.pathname);
@@ -624,7 +638,7 @@ internals.Info = class {
         this._request = request;
 
         const req = request.raw.req;
-        const host = req.headers.host ? req.headers.host.trim() : '';
+        const host = (req.headers.host || req.headers[':authority'] || '').trim();
         const received = Date.now();
 
         this.received = received;

test/request.js

@@ -363,6 +363,16 @@ describe('Request', () => {
         expect(res.payload).to.equal('shot');
     });
 
+    it('sets host info from :authority header when host header is absent', async () => {
+
+        const server = Hapi.server();
+        server.route({ method: 'GET', path: '/', handler: (request) => `${request.info.host}|${request.info.hostname}` });
+
+        const res = await server.inject({ url: '/', headers: { host: '', ':authority': 'example.com:8080' } });
+        expect(res.statusCode).to.equal(200);
+        expect(res.result).to.equal('example.com:8080|example.com');
+    });
+
     it('generates unique request id', async () => {
 
         const server = Hapi.server();
@@ -1765,6 +1775,23 @@ describe('Request', () => {
             expect(res.statusCode).to.equal(200);
             expect(res.result).to.equal('/test');
         });
+
+        it('generates valid URL when server host is IPv6 and host header is absent', async () => {
+
+            const server = Hapi.server({ host: '::1' });
+
+            const handler = (request) => {
+
+                delete request.info.host;
+                expect(request._url).to.not.exist();
+                return request.url.host;
+            };
+
+            server.route({ path: '/test', method: 'GET', handler });
+            const res = await server.inject('/test');
+            expect(res.statusCode).to.equal(200);
+            expect(res.result).to.match(/^\[::1\]:\d+$/);
+        });
     });
 
     describe('_tap()', () => {