@appwarden/middleware 1.4.3 → 1.5.1

package/README.md

@@ -1,6 +1,6 @@
 # @appwarden/middleware
 
-![Test Coverage](https://img.shields.io/badge/coverage-92.74%25-brightgreen)
+![Test Coverage](https://img.shields.io/badge/coverage-97%25-brightgreen)
 [![npm version](https://img.shields.io/npm/v/@appwarden/middleware.svg)](https://www.npmjs.com/package/@appwarden/middleware)
 [![npm provenance](https://img.shields.io/badge/npm-provenance-green)](https://docs.npmjs.com/generating-provenance-statements)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)

package/{chunk-GTGPYCQY.js → chunk-TP5CHUTK.js}

@@ -49,6 +49,7 @@ var CSPModeSchema = z2.union([
   z2.literal("enforced")
 ]).optional().default("disabled");
 var UseCSPInputSchema = z2.object({
+  hostname: z2.string().optional(),
   mode: CSPModeSchema,
   directives: CSPDirectivesSchema.optional().refine(
     (val) => {
@@ -114,6 +115,9 @@ var useContentSecurityPolicy = (input) => {
   const config = parsedInput.data;
   return async (context, next) => {
     await next();
+    if (config.hostname && context.hostname !== config.hostname) {
+      return;
+    }
     const { response } = context;
     if (
       // if the csp is disabled

package/{cloudflare-2PkEr25r.d.ts → cloudflare-0sboFQGC.d.ts}

@@ -94,6 +94,7 @@ type Bindings = {
     CSP_MODE: "disabled" | "report-only" | "enforced";
     CSP_DIRECTIVES: string | ContentSecurityPolicyType;
     APPWARDEN_API_TOKEN: string;
+    APPWARDEN_API_HOSTNAME?: string;
 };
 
 export type { Bindings as B };

package/cloudflare.d.ts

@@ -1,7 +1,7 @@
-import { B as Bindings } from './cloudflare-2PkEr25r.js';
+import { B as Bindings } from './cloudflare-0sboFQGC.js';
 import { z } from 'zod';
-import { M as Middleware } from './use-content-security-policy-C89AROtC.js';
-export { u as useContentSecurityPolicy } from './use-content-security-policy-C89AROtC.js';
+import { M as Middleware } from './use-content-security-policy-D4ccKJVd.js';
+export { u as useContentSecurityPolicy } from './use-content-security-policy-D4ccKJVd.js';
 
 declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<{
     env: CloudflareEnv;
@@ -11,10 +11,18 @@ declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<{
     env: CloudflareEnv;
     cf: Record<string, unknown>;
     ctx: unknown;
-}>], z.ZodUnknown>, z.ZodObject<{
+}>], z.ZodUnknown>, z.ZodEffects<z.ZodObject<{
     debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
-    lockPageSlug: z.ZodString;
+    lockPageSlug: z.ZodOptional<z.ZodString>;
+    multidomainConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        lockPageSlug: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        lockPageSlug: string;
+    }, {
+        lockPageSlug: string;
+    }>>>;
     appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
+    appwardenApiHostname: z.ZodOptional<z.ZodString>;
 } & {
     middleware: z.ZodDefault<z.ZodObject<{
         before: z.ZodDefault<z.ZodArray<z.ZodType<Middleware, z.ZodTypeDef, Middleware>, "many">>;
@@ -25,19 +33,27 @@ declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     debug: boolean;
-    lockPageSlug: string;
     appwardenApiToken: string;
     middleware: {
         before: Middleware[];
     };
+    lockPageSlug?: string | undefined;
+    multidomainConfig?: Record<string, {
+        lockPageSlug: string;
+    }> | undefined;
+    appwardenApiHostname?: string | undefined;
 }, {
-    lockPageSlug: string;
     appwardenApiToken: string;
+    lockPageSlug?: string | undefined;
     debug?: string | boolean | undefined;
+    multidomainConfig?: Record<string, {
+        lockPageSlug: string;
+    }> | undefined;
+    appwardenApiHostname?: string | undefined;
     middleware?: {
         before?: Middleware[] | undefined;
     } | undefined;
-}>>;
+}>, any, any>>;
 type CloudflareConfigType = ReturnType<z.infer<typeof ConfigFnInputSchema>>;
 
 declare const withAppwarden: (inputFn: CloudflareConfigType) => ExportedHandlerFetchHandler<Bindings>;

package/cloudflare.js

@@ -1,6 +1,6 @@
 import {
   useContentSecurityPolicy
-} from "./chunk-GTGPYCQY.js";
+} from "./chunk-TP5CHUTK.js";
 import {
   BooleanSchema,
   LockValue,
@@ -23,17 +23,33 @@ import { z as z2 } from "zod";
 
 // src/schemas/use-appwarden.ts
 import { z } from "zod";
+var AppwardenMultidomainConfigSchema = z.record(
+  z.string(),
+  z.object({
+    lockPageSlug: z.string()
+  })
+);
 var UseAppwardenInputSchema = z.object({
   debug: BooleanSchema.default(false),
-  lockPageSlug: z.string(),
-  appwardenApiToken: z.string().refine((val) => !!val, { path: ["appwardenApiToken"] })
+  lockPageSlug: z.string().optional(),
+  multidomainConfig: AppwardenMultidomainConfigSchema.optional(),
+  appwardenApiToken: z.string().refine((val) => !!val, { path: ["appwardenApiToken"] }),
+  appwardenApiHostname: z.string().optional()
 });
+var lockPageSlugRefinement = (schema) => schema.refine(
+  (data) => data.lockPageSlug || data.multidomainConfig,
+  {
+    message: "lockPageSlug must be provided"
+  }
+);
 
 // src/schemas/cloudflare.ts
 var ConfigFnInputSchema = z2.function().args(z2.custom()).returns(
-  UseAppwardenInputSchema.extend({
-    middleware: z2.object({ before: z2.custom().array().default([]) }).default({})
-  })
+  lockPageSlugRefinement(
+    UseAppwardenInputSchema.extend({
+      middleware: z2.object({ before: z2.custom().array().default([]) }).default({})
+    })
+  )
 );
 
 // src/utils/middleware.ts
@@ -198,10 +214,12 @@ var APIError = class extends Error {
     this.name = "APIError";
   }
 };
+var DEFAULT_API_HOSTNAME = "https://api.appwarden.io";
 var syncEdgeValue = async (context) => {
   debug(`syncing with api`);
   try {
-    const response = await fetch(new URL("/v1/status/check", "https://api.appwarden.io"), {
+    const apiHostname = context.appwardenApiHostname ?? DEFAULT_API_HOSTNAME;
+    const response = await fetch(new URL("/v1/status/check", apiHostname), {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify({
@@ -312,6 +330,10 @@ var useAppwarden = (input) => async (context, next) => {
     const isHTMLRequest = response.headers.get("Content-Type")?.includes("text/html");
     const isMonitoringRequest = request.headers.get("User-Agent") === APPWARDEN_USER_AGENT;
     if (isHTMLRequest && !isMonitoringRequest) {
+      const lockPageSlug = input.multidomainConfig?.[requestUrl.hostname]?.lockPageSlug ?? input.lockPageSlug;
+      if (!lockPageSlug) {
+        return;
+      }
       const innerContext = {
         keyName,
         request,
@@ -319,8 +341,9 @@ var useAppwarden = (input) => async (context, next) => {
         requestUrl,
         provider,
         debug: input.debug,
-        lockPageSlug: input.lockPageSlug,
+        lockPageSlug,
         appwardenApiToken: input.appwardenApiToken,
+        appwardenApiHostname: input.appwardenApiHostname,
         waitUntil: (fn) => context.waitUntil(fn)
       };
       await maybeQuarantine(innerContext, {

package/index.d.ts

@@ -1,5 +1,5 @@
-export { B as Bindings } from './cloudflare-2PkEr25r.js';
-export { C as CSPDirectivesSchema, a as CSPModeSchema, M as Middleware, u as useContentSecurityPolicy } from './use-content-security-policy-C89AROtC.js';
+export { B as Bindings } from './cloudflare-0sboFQGC.js';
+export { C as CSPDirectivesSchema, a as CSPModeSchema, M as Middleware, u as useContentSecurityPolicy } from './use-content-security-policy-D4ccKJVd.js';
 import { z } from 'zod';
 
 declare const LOCKDOWN_TEST_EXPIRY_MS: number;

package/index.js

@@ -7,7 +7,7 @@ import {
   CSPDirectivesSchema,
   CSPModeSchema,
   useContentSecurityPolicy
-} from "./chunk-GTGPYCQY.js";
+} from "./chunk-TP5CHUTK.js";
 import {
   APPWARDEN_CACHE_KEY,
   APPWARDEN_USER_AGENT,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appwarden/middleware",
-  "version": "1.4.3",
+  "version": "1.5.1",
   "description": "Instantly shut off access your app deployed on Cloudflare or Vercel",
   "type": "module",
   "license": "MIT",

package/{use-content-security-policy-C89AROtC.d.ts → use-content-security-policy-D4ccKJVd.d.ts}

@@ -1,4 +1,4 @@
-import './cloudflare-2PkEr25r.js';
+import './cloudflare-0sboFQGC.js';
 import { z } from 'zod';
 
 interface MiddlewareContext {
@@ -95,6 +95,7 @@ declare const CSPDirectivesSchema: z.ZodUnion<[z.ZodString, z.ZodObject<{
 }>]>;
 declare const CSPModeSchema: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>>>;
 declare const UseCSPInputSchema: z.ZodEffects<z.ZodObject<{
+    hostname: z.ZodOptional<z.ZodString>;
     mode: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>>>;
     directives: z.ZodEffects<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodObject<{
         "default-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
@@ -316,6 +317,7 @@ declare const UseCSPInputSchema: z.ZodEffects<z.ZodObject<{
         "trusted-types"?: string | boolean | string[] | undefined;
         "require-trusted-types-for"?: string | boolean | string[] | undefined;
     } | undefined;
+    hostname?: string | undefined;
 }, {
     mode?: "disabled" | "report-only" | "enforced" | undefined;
     directives?: string | {
@@ -346,6 +348,7 @@ declare const UseCSPInputSchema: z.ZodEffects<z.ZodObject<{
         "trusted-types"?: string | boolean | string[] | undefined;
         "require-trusted-types-for"?: string | boolean | string[] | undefined;
     } | undefined;
+    hostname?: string | undefined;
 }>, {
     mode: "disabled" | "report-only" | "enforced";
     directives?: {
@@ -376,6 +379,7 @@ declare const UseCSPInputSchema: z.ZodEffects<z.ZodObject<{
         "trusted-types"?: string | boolean | string[] | undefined;
         "require-trusted-types-for"?: string | boolean | string[] | undefined;
     } | undefined;
+    hostname?: string | undefined;
 }, {
     mode?: "disabled" | "report-only" | "enforced" | undefined;
     directives?: string | {
@@ -406,6 +410,7 @@ declare const UseCSPInputSchema: z.ZodEffects<z.ZodObject<{
         "trusted-types"?: string | boolean | string[] | undefined;
         "require-trusted-types-for"?: string | boolean | string[] | undefined;
     } | undefined;
+    hostname?: string | undefined;
 }>;
 type UseCSPInput = z.infer<typeof UseCSPInputSchema>;
 

package/vercel.d.ts

@@ -1,6 +1,6 @@
 import * as next_dist_server_web_types from 'next/dist/server/web/types';
 import * as next_server from 'next/server';
-import './cloudflare-2PkEr25r.js';
+import './cloudflare-0sboFQGC.js';
 import { z } from 'zod';
 
 declare const BaseNextJsConfigSchema: z.ZodObject<{