refactor(rsbuild): use basic SSL plugin in Express HTTPS example

rsbuild/express-https/README.md

@@ -2,7 +2,7 @@
 
 Custom [Express](https://expressjs.com/) **HTTPS** server integrated with Rsbuild's dev middlewares and HMR.
 
-The plain HTTP version lives in [`../express`](../express). Setting only `server.https` in `rsbuild.config` is not enough for a custom Express server: `app.listen()` still creates an HTTP server. This example creates the TLS socket with `https.createServer` and passes the same certificate into Rsbuild so the client uses `https` / `wss`.
+The plain HTTP version lives in [`../express`](../express). Setting only `server.https` in `rsbuild.config` is not enough for a custom Express server: `app.listen()` still creates an HTTP server. This example uses [`@rsbuild/plugin-basic-ssl`](https://github.com/rstackjs/rsbuild-plugin-basic-ssl) to generate and cache a self-signed certificate. After `createDevServer()`, it reads `server.https` from `rsbuild.getNormalizedConfig()` and passes the HTTPS options to `https.createServer`.
 
 ## Setup
 
@@ -20,15 +20,15 @@ Start the HTTPS dev server:
 pnpm dev
 ```
 
-Open the printed `https://localhost:<port>/` URL. The certificate is self-signed (`selfsigned`), so the browser will show a warning — continue once for local development.
+Open the printed `https://localhost:<port>/` URL. The certificate is self-signed, so the browser will show a warning — continue once for local development.
 
 Build the app for production:
 
 ```bash
 pnpm build
 ```
 
-Preview the production build locally (Rsbuild preview server; use `server.https` or `@rsbuild/plugin-basic-ssl` if you need HTTPS for preview):
+Preview the production build locally with Rsbuild's HTTPS preview server:
 
 ```bash
 pnpm preview

rsbuild/express-https/package.json

@@ -10,10 +10,10 @@
   },
   "devDependencies": {
     "@rsbuild/core": "2.2.0",
+    "@rsbuild/plugin-basic-ssl": "^2.0.0",
     "@types/express": "^5.0.6",
     "@types/node": "^24.12.4",
     "express": "^5.2.1",
-    "selfsigned": "^5.5.0",
     "typescript": "^5.9.3"
   }
 }

rsbuild/express-https/rsbuild.config.js

@@ -1,6 +1,8 @@
 import { defineConfig } from '@rsbuild/core';
+import { pluginBasicSsl } from '@rsbuild/plugin-basic-ssl';
 
 export default defineConfig({
+  plugins: [pluginBasicSsl()],
   // Custom Express owns the HTTPS listen socket; keep Rsbuild in middleware mode.
   server: {
     middlewareMode: true,

rsbuild/express-https/server.js

@@ -1,30 +1,12 @@
 import https from 'node:https';
 import express from 'express';
 import { createRsbuild, loadConfig } from '@rsbuild/core';
-import selfsigned from 'selfsigned';
 
 export async function startDevServer() {
   const { content } = await loadConfig({});
 
-  // Generate an untrusted self-signed certificate for local HTTPS.
-  // Your browser will warn once; confirm to continue (same as plugin-basic-ssl).
-  const pems = await selfsigned.generate([{ name: 'commonName', value: 'localhost' }]);
-  const httpsOptions = {
-    key: pems.private,
-    cert: pems.cert,
-  };
-
-  // Pass the same HTTPS options into Rsbuild so asset/HMR URLs use https/wss.
-  // Do not rely on `server.https` alone with `app.listen()` — that stays HTTP.
   const rsbuild = await createRsbuild({
-    rsbuildConfig: {
-      ...content,
-      server: {
-        ...content.server,
-        middlewareMode: true,
-        https: httpsOptions,
-      },
-    },
+    rsbuildConfig: content,
   });
 
   const app = express();
@@ -35,6 +17,8 @@ export async function startDevServer() {
   // Apply Rsbuild’s built-in middlewares
   app.use(rsbuildServer.middlewares);
 
+  // Read the HTTPS options after plugin-basic-ssl has generated the certificate.
+  const { https: httpsOptions } = rsbuild.getNormalizedConfig().server;
   const httpsServer = https.createServer(httpsOptions, app);
 
   httpsServer.listen(rsbuildServer.port, async () => {