axios、node-fetch 和 request 是用于发送 HTTP 请求的客户端库,而 download 是专门用于下载文件并保存到磁盘的工具。axios 支持浏览器和 Node.js,提供拦截器和自动 JSON 转换。node-fetch 在 Node.js 中实现了标准的 Fetch API,轻量且符合 Web 标准。request 曾是 Node.js 最流行的 HTTP 库,但已正式停止维护。download 则简化了文件下载和解压流程,适合需要直接保存文件的场景。
在 Node.js 开发生态中,处理网络请求和文件下载是常见任务。axios、node-fetch、request 和 download 是四个经常被提及的包,但它们的定位和适用场景有很大不同。本文将从架构设计、API 风格、维护状态和实际用例四个维度进行深度解析。
在选择技术栈之前,必须了解包的生命周期。
request 已正式弃用。维护团队在 2020 年宣布不再维护该库,这意味着它不会再收到安全补丁。在新项目中使用它会带来潜在的安全风险。
// request: 已弃用,不推荐使用
// npm 页面明确标记为 deprecated
const request = require('request');
axios 和 node-fetch 处于活跃维护状态,社区支持良好,适合生产环境。
// axios: 活跃维护
import axios from 'axios';
// node-fetch: 活跃维护
import fetch from 'node-fetch';
download 维护状态稳定,但属于特定场景工具,更新频率较低,适合稳定的文件下载需求。
// download: 稳定维护
import download from 'download';
不同包对运行环境的支持决定了它们的适用范围。
axios 是通用型客户端,同时支持浏览器和 Node.js。
// axios: 浏览器 + Node.js
import axios from 'axios';
axios.get('/api/data'); // 两端均可运行
node-fetch 专为 Node.js 设计,浏览器中通常不需要(因为浏览器原生支持 fetch)。
// node-fetch: 仅 Node.js
import fetch from 'node-fetch';
fetch('/api/data'); // Node 环境
request 仅支持 Node.js,无法在浏览器中运行。
// request: 仅 Node.js
const request = require('request');
request('/api/data'); // Node 环境
download 仅支持 Node.js,因为它需要访问文件系统。
// download: 仅 Node.js
import download from 'download';
await download(url, 'dist'); // 需要文件系统权限
发送一个简单的 GET 请求,各包的写法差异反映了它们的设计理念。
axios 基于 Promise,语法简洁,自动处理 JSON。
// axios: Promise 风格
const response = await axios.get('https://api.example.com/data');
console.log(response.data);
node-fetch 遵循 Web 标准,需要手动解析 JSON。
// node-fetch: 标准 Fetch 风格
const response = await fetch('https://api.example.com/data');
const data = await response.json();
console.log(data);
request 基于回调函数,代码嵌套较深,现代开发中较少见。
// request: 回调风格
request('https://api.example.com/data', (error, response, body) => {
console.log(JSON.parse(body));
});
download 不用于普通 API 请求,它专注于下载文件到磁盘。
// download: 文件下载专用
// 不适用于获取 API 数据,它会自动保存文件
await download('https://example.com/file.zip', 'dist');
当需求是将远程文件保存到本地磁盘时,各包的处理方式截然不同。
axios 需要手动处理流和文件系统写入,代码量较多。
// axios: 手动处理流
import axios from 'axios';
import fs from 'fs';
const response = await axios({ url, responseType: 'stream' });
response.data.pipe(fs.createWriteStream('file.zip'));
node-fetch 同样需要手动管道化流,符合 Node.js 原生习惯。
// node-fetch: 手动处理流
import fetch from 'node-fetch';
import fs from 'fs';
const response = await fetch(url);
response.body.pipe(fs.createWriteStream('file.zip'));
request 曾经以流处理简单著称,但现已不再推荐。
// request: 流处理简单但已弃用
import request from 'request';
request(url).pipe(fs.createWriteStream('file.zip'));
download 专为该场景设计,一行代码即可完成下载和解压。
// download: 一键下载
import download from 'download';
await download('https://example.com/file.zip', 'dist');
在大型项目中,往往需要在请求发送前或响应接收后统一处理逻辑(如添加 Token、日志记录)。
axios 提供强大的拦截器机制,是其主要优势之一。
// axios: 支持拦截器
axios.interceptors.request.use(config => {
config.headers.Token = 'xyz';
return config;
});
node-fetch 没有内置拦截器,需要通过封装函数或中间件模式实现。
// node-fetch: 无内置拦截器
// 需自行封装
async function fetchWithToken(url) {
return fetch(url, { headers: { Token: 'xyz' } });
}
request 支持通过插件扩展,但配置较为繁琐。
// request: 支持插件
const r = request.defaults({ headers: { Token: 'xyz' } });
download 不支持请求拦截,因为它专注于文件下载流程。
// download: 不支持拦截器
// 仅支持下载选项配置
await download(url, dest, { headers: { Token: 'xyz' } });
| 特性 | axios | node-fetch | request | download |
|---|---|---|---|---|
| 环境 | 浏览器 + Node | Node.js | Node.js | Node.js |
| API 风格 | Promise | Promise (标准) | 回调 | Promise |
| 自动 JSON | ✅ 支持 | ❌ 需手动 | ❌ 需手动 | ❌ 不适用 |
| 拦截器 | ✅ 内置 | ❌ 需封装 | ⚠️ 有限 | ❌ 不支持 |
| 文件下载 | ⚠️ 需手动流 | ⚠️ 需手动流 | ⚠️ 需手动流 | ✅ 内置支持 |
| 维护状态 | ✅ 活跃 | ✅ 活跃 | ❌ 已弃用 | ✅ 稳定 |
在实际工程选型中,建议遵循以下原则:
axios。它的拦截器和自动 JSON 处理能减少大量样板代码,且前后端通用。node-fetch。如果你的团队熟悉 Fetch API,或者正在迁移到 Node.js 18+(内置 fetch),这是轻量级的选择。download。不要为了下载文件去手动管理流和管道,使用专用工具更安全高效。request,请制定迁移计划。它不再安全,继续使用会增加技术债务。这四个包代表了不同的解决思路。axios 是全能型选手,适合大多数业务场景。node-fetch 是标准践行者,适合追求轻量和新标准的 Node 项目。download 是特种兵,专攻文件下载。而 request 则是时代的眼泪,应尽快淘汰。
选择工具时,不要只看功能,还要看维护状态和生态兼容性。正确的选择能让你的代码更稳定,维护成本更低。
如果你主要在 Node.js 环境开发,且希望使用标准的 Fetch API 以保持与浏览器代码一致,选择 node-fetch。注意 Node.js 18 及以上版本已内置 fetch,可能不再需要此包。
如果你需要在浏览器和 Node.js 之间共享代码,或者需要拦截器、自动 JSON 转换和取消请求等功能,选择 axios。它 API 友好,生态丰富,适合大多数通用 HTTP 请求场景,尤其是前端项目。
不要在新项目中使用 request。该库已正式弃用,不再接收安全更新或功能修复。现有项目应尽快迁移到 axios、node-fetch 或 got 等现代替代方案。
如果你只需要在 Node.js 环境中下载文件并保存到本地磁盘,甚至需要自动解压压缩包,选择 download。它封装了流处理细节,代码最简洁,但不适合用于普通的 API 数据交互。
A light-weight module that brings Fetch API to Node.js.
You might be looking for the v2 docs
Instead of implementing XMLHttpRequest in Node.js to run browser-specific Fetch polyfill, why not go from native http to fetch API directly? Hence, node-fetch, minimal code for a window.fetch compatible API on Node.js runtime.
See Jason Miller's isomorphic-unfetch or Leonardo Quixada's cross-fetch for isomorphic usage (exports node-fetch for server-side, whatwg-fetch for client-side).
window.fetch API.res.text() and res.json()) to UTF-8 automatically.window.fetch offers, feel free to open an issue.Current stable release (3.x) requires at least Node.js 12.20.0.
npm install node-fetch
import fetch from 'node-fetch';
node-fetch from v3 is an ESM-only module - you are not able to import it with require().
If you cannot switch to ESM, please use v2 which remains compatible with CommonJS. Critical bug fixes will continue to be published for v2.
npm install node-fetch@2
Alternatively, you can use the async import() function from CommonJS to load node-fetch asynchronously:
// mod.cjs
const fetch = (...args) => import('node-fetch').then(({default: fetch}) => fetch(...args));
To use fetch() without importing it, you can patch the global object in node:
// fetch-polyfill.js
import fetch, {
Blob,
blobFrom,
blobFromSync,
File,
fileFrom,
fileFromSync,
FormData,
Headers,
Request,
Response,
} from 'node-fetch'
if (!globalThis.fetch) {
globalThis.fetch = fetch
globalThis.Headers = Headers
globalThis.Request = Request
globalThis.Response = Response
}
// index.js
import './fetch-polyfill'
// ...
Using an old version of node-fetch? Check out the following files:
NOTE: The documentation below is up-to-date with 3.x releases, if you are using an older version, please check how to upgrade.
import fetch from 'node-fetch';
const response = await fetch('https://github.com/');
const body = await response.text();
console.log(body);
import fetch from 'node-fetch';
const response = await fetch('https://api.github.com/users/github');
const data = await response.json();
console.log(data);
import fetch from 'node-fetch';
const response = await fetch('https://httpbin.org/post', {method: 'POST', body: 'a=1'});
const data = await response.json();
console.log(data);
import fetch from 'node-fetch';
const body = {a: 1};
const response = await fetch('https://httpbin.org/post', {
method: 'post',
body: JSON.stringify(body),
headers: {'Content-Type': 'application/json'}
});
const data = await response.json();
console.log(data);
URLSearchParams is available on the global object in Node.js as of v10.0.0. See official documentation for more usage methods.
NOTE: The Content-Type header is only set automatically to x-www-form-urlencoded when an instance of URLSearchParams is given as such:
import fetch from 'node-fetch';
const params = new URLSearchParams();
params.append('a', 1);
const response = await fetch('https://httpbin.org/post', {method: 'POST', body: params});
const data = await response.json();
console.log(data);
NOTE: 3xx-5xx responses are NOT exceptions, and should be handled in then(), see the next section.
Wrapping the fetch function into a try/catch block will catch all exceptions, such as errors originating from node core libraries, like network errors, and operational errors which are instances of FetchError. See the error handling document for more details.
import fetch from 'node-fetch';
try {
await fetch('https://domain.invalid/');
} catch (error) {
console.log(error);
}
It is common to create a helper function to check that the response contains no client (4xx) or server (5xx) error responses:
import fetch from 'node-fetch';
class HTTPResponseError extends Error {
constructor(response) {
super(`HTTP Error Response: ${response.status} ${response.statusText}`);
this.response = response;
}
}
const checkStatus = response => {
if (response.ok) {
// response.status >= 200 && response.status < 300
return response;
} else {
throw new HTTPResponseError(response);
}
}
const response = await fetch('https://httpbin.org/status/400');
try {
checkStatus(response);
} catch (error) {
console.error(error);
const errorBody = await error.response.text();
console.error(`Error body: ${errorBody}`);
}
Cookies are not stored by default. However, cookies can be extracted and passed by manipulating request and response headers. See Extract Set-Cookie Header for details.
The "Node.js way" is to use streams when possible. You can pipe res.body to another stream. This example uses stream.pipeline to attach stream error handlers and wait for the download to complete.
import {createWriteStream} from 'node:fs';
import {pipeline} from 'node:stream';
import {promisify} from 'node:util'
import fetch from 'node-fetch';
const streamPipeline = promisify(pipeline);
const response = await fetch('https://github.githubassets.com/images/modules/logos_page/Octocat.png');
if (!response.ok) throw new Error(`unexpected response ${response.statusText}`);
await streamPipeline(response.body, createWriteStream('./octocat.png'));
In Node.js 14 you can also use async iterators to read body; however, be careful to catch
errors -- the longer a response runs, the more likely it is to encounter an error.
import fetch from 'node-fetch';
const response = await fetch('https://httpbin.org/stream/3');
try {
for await (const chunk of response.body) {
console.dir(JSON.parse(chunk.toString()));
}
} catch (err) {
console.error(err.stack);
}
In Node.js 12 you can also use async iterators to read body; however, async iterators with streams
did not mature until Node.js 14, so you need to do some extra work to ensure you handle errors
directly from the stream and wait on it response to fully close.
import fetch from 'node-fetch';
const read = async body => {
let error;
body.on('error', err => {
error = err;
});
for await (const chunk of body) {
console.dir(JSON.parse(chunk.toString()));
}
return new Promise((resolve, reject) => {
body.on('close', () => {
error ? reject(error) : resolve();
});
});
};
try {
const response = await fetch('https://httpbin.org/stream/3');
await read(response.body);
} catch (err) {
console.error(err.stack);
}
import fetch from 'node-fetch';
const response = await fetch('https://github.com/');
console.log(response.ok);
console.log(response.status);
console.log(response.statusText);
console.log(response.headers.raw());
console.log(response.headers.get('content-type'));
Unlike browsers, you can access raw Set-Cookie headers manually using Headers.raw(). This is a node-fetch only API.
import fetch from 'node-fetch';
const response = await fetch('https://example.com');
// Returns an array of values, instead of a string of comma-separated values
console.log(response.headers.raw()['set-cookie']);
import fetch, {
Blob,
blobFrom,
blobFromSync,
File,
fileFrom,
fileFromSync,
} from 'node-fetch'
const mimetype = 'text/plain'
const blob = fileFromSync('./input.txt', mimetype)
const url = 'https://httpbin.org/post'
const response = await fetch(url, { method: 'POST', body: blob })
const data = await response.json()
console.log(data)
node-fetch comes with a spec-compliant FormData implementations for posting multipart/form-data payloads
import fetch, { FormData, File, fileFrom } from 'node-fetch'
const httpbin = 'https://httpbin.org/post'
const formData = new FormData()
const binary = new Uint8Array([ 97, 98, 99 ])
const abc = new File([binary], 'abc.txt', { type: 'text/plain' })
formData.set('greeting', 'Hello, world!')
formData.set('file-upload', abc, 'new name.txt')
const response = await fetch(httpbin, { method: 'POST', body: formData })
const data = await response.json()
console.log(data)
If you for some reason need to post a stream coming from any arbitrary place, then you can append a Blob or a File look-a-like item.
The minimum requirement is that it has:
Symbol.toStringTag getter or property that is either Blob or Filestream() method or a arrayBuffer() method that returns a ArrayBuffer.The stream() must return any async iterable object as long as it yields Uint8Array (or Buffer)
so Node.Readable streams and whatwg streams works just fine.
formData.append('upload', {
[Symbol.toStringTag]: 'Blob',
size: 3,
*stream() {
yield new Uint8Array([97, 98, 99])
},
arrayBuffer() {
return new Uint8Array([97, 98, 99]).buffer
}
}, 'abc.txt')
You may cancel requests with AbortController. A suggested implementation is abort-controller.
An example of timing out a request after 150ms could be achieved as the following:
import fetch, { AbortError } from 'node-fetch';
// AbortController was added in node v14.17.0 globally
const AbortController = globalThis.AbortController || await import('abort-controller')
const controller = new AbortController();
const timeout = setTimeout(() => {
controller.abort();
}, 150);
try {
const response = await fetch('https://example.com', {signal: controller.signal});
const data = await response.json();
} catch (error) {
if (error instanceof AbortError) {
console.log('request was aborted');
}
} finally {
clearTimeout(timeout);
}
See test cases for more examples.
url A string representing the URL for fetchingoptions Options for the HTTP(S) requestPromise<Response>Perform an HTTP(S) fetch.
url should be an absolute URL, such as https://example.com/. A path-relative URL (/file/under/root) or protocol-relative URL (//can-be-http-or-https.com/) will result in a rejected Promise.
The default values are shown after each option key.
{
// These properties are part of the Fetch Standard
method: 'GET',
headers: {}, // Request headers. format is the identical to that accepted by the Headers constructor (see below)
body: null, // Request body. can be null, or a Node.js Readable stream
redirect: 'follow', // Set to `manual` to extract redirect headers, `error` to reject redirect
signal: null, // Pass an instance of AbortSignal to optionally abort requests
// The following properties are node-fetch extensions
follow: 20, // maximum redirect count. 0 to not follow redirect
compress: true, // support gzip/deflate content encoding. false to disable
size: 0, // maximum response body size in bytes. 0 to disable
agent: null, // http(s).Agent instance or function that returns an instance (see below)
highWaterMark: 16384, // the maximum number of bytes to store in the internal buffer before ceasing to read from the underlying resource.
insecureHTTPParser: false // Use an insecure HTTP parser that accepts invalid HTTP headers when `true`.
}
If no values are set, the following request headers will be sent automatically:
| Header | Value |
|---|---|
Accept-Encoding | gzip, deflate, br (when options.compress === true) |
Accept | */* |
Content-Length | (automatically calculated, if possible) |
Host | (host and port information from the target URI) |
Transfer-Encoding | chunked (when req.body is a stream) |
User-Agent | node-fetch |
Note: when body is a Stream, Content-Length is not set automatically.
The agent option allows you to specify networking related options which are out of the scope of Fetch, including and not limited to the following:
See http.Agent for more information.
If no agent is specified, the default agent provided by Node.js is used. Note that this changed in Node.js 19 to have keepalive true by default. If you wish to enable keepalive in an earlier version of Node.js, you can override the agent as per the following code sample.
In addition, the agent option accepts a function that returns http(s).Agent instance given current URL, this is useful during a redirection chain across HTTP and HTTPS protocol.
import http from 'node:http';
import https from 'node:https';
const httpAgent = new http.Agent({
keepAlive: true
});
const httpsAgent = new https.Agent({
keepAlive: true
});
const options = {
agent: function(_parsedURL) {
if (_parsedURL.protocol == 'http:') {
return httpAgent;
} else {
return httpsAgent;
}
}
};
Stream on Node.js have a smaller internal buffer size (16kB, aka highWaterMark) from client-side browsers (>1MB, not consistent across browsers). Because of that, when you are writing an isomorphic app and using res.clone(), it will hang with large response in Node.
The recommended way to fix this problem is to resolve cloned response in parallel:
import fetch from 'node-fetch';
const response = await fetch('https://example.com');
const r1 = response.clone();
const results = await Promise.all([response.json(), r1.text()]);
console.log(results[0]);
console.log(results[1]);
If for some reason you don't like the solution above, since 3.x you are able to modify the highWaterMark option:
import fetch from 'node-fetch';
const response = await fetch('https://example.com', {
// About 1MB
highWaterMark: 1024 * 1024
});
const result = await res.clone().arrayBuffer();
console.dir(result);
Passed through to the insecureHTTPParser option on http(s).request. See http.request for more information.
The redirect: 'manual' option for node-fetch is different from the browser & specification, which
results in an opaque-redirect filtered response.
node-fetch gives you the typical basic filtered response instead.
import fetch from 'node-fetch';
const response = await fetch('https://httpbin.org/status/301', { redirect: 'manual' });
if (response.status === 301 || response.status === 302) {
const locationURL = new URL(response.headers.get('location'), response.url);
const response2 = await fetch(locationURL, { redirect: 'manual' });
console.dir(response2);
}
An HTTP(S) request containing information about URL, method, headers, and the body. This class implements the Body interface.
Due to the nature of Node.js, the following properties are not implemented at this moment:
typedestinationmodecredentialscacheintegritykeepaliveThe following node-fetch extension properties are provided:
followcompresscounteragenthighWaterMarkSee options for exact meaning of these extensions.
(spec-compliant)
input A string representing a URL, or another Request (which will be cloned)options Options for the HTTP(S) requestConstructs a new Request object. The constructor is identical to that in the browser.
In most cases, directly fetch(url, options) is simpler than creating a Request object.
An HTTP(S) response. This class implements the Body interface.
The following properties are not implemented in node-fetch at this moment:
trailer(spec-compliant)
body A String or Readable streamoptions A ResponseInit options dictionaryConstructs a new Response object. The constructor is identical to that in the browser.
Because Node.js does not implement service workers (for which this class was designed), one rarely has to construct a Response directly.
(spec-compliant)
Convenience property representing if the request ended normally. Will evaluate to true if the response status was greater than or equal to 200 but smaller than 300.
(spec-compliant)
Convenience property representing if the request has been redirected at least once. Will evaluate to true if the internal redirect counter is greater than 0.
(deviation from spec)
Convenience property representing the response's type. node-fetch only supports 'default' and 'error' and does not make use of filtered responses.
This class allows manipulating and iterating over a set of HTTP headers. All methods specified in the Fetch Standard are implemented.
(spec-compliant)
init Optional argument to pre-fill the Headers objectConstruct a new Headers object. init can be either null, a Headers object, an key-value map object or any iterable object.
// Example adapted from https://fetch.spec.whatwg.org/#example-headers-class
import {Headers} from 'node-fetch';
const meta = {
'Content-Type': 'text/xml'
};
const headers = new Headers(meta);
// The above is equivalent to
const meta = [['Content-Type', 'text/xml']];
const headers = new Headers(meta);
// You can in fact use any iterable objects, like a Map or even another Headers
const meta = new Map();
meta.set('Content-Type', 'text/xml');
const headers = new Headers(meta);
const copyOfHeaders = new Headers(headers);
Body is an abstract interface with methods that are applicable to both Request and Response classes.
(deviation from spec)
Readable streamData are encapsulated in the Body object. Note that while the Fetch Standard requires the property to always be a WHATWG ReadableStream, in node-fetch it is a Node.js Readable stream.
(spec-compliant)
BooleanA boolean property for if this body has been consumed. Per the specs, a consumed body cannot be used again.
fetch comes with methods to parse multipart/form-data payloads as well as
x-www-form-urlencoded bodies using .formData() this comes from the idea that
Service Worker can intercept such messages before it's sent to the server to
alter them. This is useful for anybody building a server so you can use it to
parse & consume payloads.
import http from 'node:http'
import { Response } from 'node-fetch'
http.createServer(async function (req, res) {
const formData = await new Response(req, {
headers: req.headers // Pass along the boundary value
}).formData()
const allFields = [...formData]
const file = formData.get('uploaded-files')
const arrayBuffer = await file.arrayBuffer()
const text = await file.text()
const whatwgReadableStream = file.stream()
// other was to consume the request could be to do:
const json = await new Response(req).json()
const text = await new Response(req).text()
const arrayBuffer = await new Response(req).arrayBuffer()
const blob = await new Response(req, {
headers: req.headers // So that `type` inherits `Content-Type`
}.blob()
})
(node-fetch extension)
An operational error in the fetching process. See ERROR-HANDLING.md for more info.
(node-fetch extension)
An Error thrown when the request is aborted in response to an AbortSignal's abort event. It has a name property of AbortError. See ERROR-HANDLING.MD for more info.
Since 3.x types are bundled with node-fetch, so you don't need to install any additional packages.
For older versions please use the type definitions from DefinitelyTyped:
npm install --save-dev @types/[email protected]
Thanks to github/fetch for providing a solid implementation reference.
![]() | ![]() | ![]() | ![]() | ![]() |
|---|---|---|---|---|
| David Frank | Jimmy Wärting | Antoni Kepinski | Richie Bendall | Gregor Martynus |