@_linked/server 3.4.0 → 3.5.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @\_linked/server
 
+## 3.5.0
+
+### Minor Changes
+
+- [#193](https://github.com/linked-fw/server/pull/193) [`e4f2510`](https://github.com/linked-fw/server/commit/e4f251007b3f8f28ada5ed2d83daef4cda8ec15c) Thanks [@flyon](https://github.com/flyon)! - The server enforces and reports the `'signed-in'` callable level from `@_linked/server-utils` 1.14: a `'signed-in'` method answers 401 without a session. A method declared with the deprecated alias `'user'` is treated exactly the same, and `resolveCallable` reports it as `'signed-in'`. Requires `@_linked/server-utils` ^1.14.0.
+
+## 3.4.1
+
+### Patch Changes
+
+- [#192](https://github.com/linked-fw/server/pull/192) [`9109073`](https://github.com/linked-fw/server/commit/9109073db79ed4b8fe90cdf89cda61f45905a7e2) Thanks [@flyon](https://github.com/flyon)! - `RemoteDataset` no longer imports `@_linked/server-utils/utils/CallContext` (which imports `node:async_hooks`): it reads the call context from the store that module shares on `globalThis`, so the store loads in the browser again.
+
 ## 3.4.0
 
 ### Minor Changes

package/lib/esm/shapes/LinkedServer.d.ts

@@ -249,7 +249,10 @@ export declare class LinkedServer extends Shape {
      *   (in 'warn' mode it is logged once and runs).
      */
     private assertDispatchAllowed;
-    /** A declared `'user'` method needs a session: 401 without one, in every mode. */
+    /**
+     * A declared `'signed-in'` method (or one declared with its deprecated alias
+     * `'user'`) needs a session: 401 without one, in every mode.
+     */
     private assertSessionForLevel;
     handleErrors(fn: any): (req: any, res: any, next: any) => Promise<any>;
     handleErrorsJson(fn: any): (req: any, res: any, next: any) => Promise<any>;

package/lib/esm/shapes/LinkedServer.js

@@ -1685,10 +1685,13 @@ let LinkedServer = class LinkedServer extends Shape {
             warnUndeclaredCall(pkg, resolution.owner, method, hasSession(request));
         }
     }
-    /** A declared `'user'` method needs a session: 401 without one, in every mode. */
+    /**
+     * A declared `'signed-in'` method (or one declared with its deprecated alias
+     * `'user'`) needs a session: 401 without one, in every mode.
+     */
     assertSessionForLevel(pkg, method, resolution, request) {
         if (resolution.status === 'callable' &&
-            resolution.level === 'user' &&
+            resolution.level === 'signed-in' &&
             !hasSession(request)) {
             throw new ServerCallError(401, 'Authentication required');
         }