@appwarden/middleware 3.2.0 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. package/README.md +257 -22
  2. package/{chunk-COV6SHCD.js → chunk-7AVYENM2.js} +2 -4
  3. package/chunk-BYRGGUK7.js +51 -0
  4. package/{chunk-FGAJVKNM.js → chunk-HCGLR3Z3.js} +22 -75
  5. package/chunk-PH77FI6C.js +70 -0
  6. package/{chunk-ZX5QO4Y2.js → chunk-SUZPTFWY.js} +2 -58
  7. package/chunk-ZBYVJ3HA.js +354 -0
  8. package/cloudflare/astro.d.ts +4 -0
  9. package/cloudflare/astro.js +33 -9
  10. package/cloudflare/nextjs.d.ts +4 -0
  11. package/cloudflare/nextjs.js +35 -8
  12. package/cloudflare/react-router.d.ts +5 -0
  13. package/cloudflare/react-router.js +33 -9
  14. package/cloudflare/tanstack-start.d.ts +5 -0
  15. package/cloudflare/tanstack-start.js +33 -9
  16. package/cloudflare-LUT5TVEV.js +28 -0
  17. package/cloudflare.d.ts +440 -8
  18. package/cloudflare.js +25 -47
  19. package/index.d.ts +2 -1
  20. package/index.js +5 -4
  21. package/package.json +8 -3
  22. package/use-content-security-policy-CjlLe4yU.d.ts +16 -0
  23. package/{use-content-security-policy-DjRTjIpm.d.ts → use-content-security-policy-DUYpyUPy.d.ts} +1 -18
  24. package/vercel.d.ts +677 -0
  25. package/vercel.js +59 -9
  26. package/chunk-L5EQIJZB.js +0 -54
  27. package/chunk-MDODCAA3.js +0 -232
package/cloudflare/tanstack-start.js CHANGED
@@ -1,20 +1,26 @@
1
+ import {
2
+ useContentSecurityPolicy
3
+ } from "../chunk-BYRGGUK7.js";
1
4
  import {
2
5
  validateConfig
3
- } from "../chunk-COV6SHCD.js";
6
+ } from "../chunk-7AVYENM2.js";
4
7
  import {
5
8
  checkLockStatus
6
- } from "../chunk-MDODCAA3.js";
9
+ } from "../chunk-PH77FI6C.js";
7
10
  import {
8
- AppwardenApiTokenSchema,
9
- BooleanSchema,
10
11
  buildLockPageUrl,
11
12
  createRedirect,
12
13
  isOnLockPage
13
- } from "../chunk-ZX5QO4Y2.js";
14
+ } from "../chunk-SUZPTFWY.js";
14
15
  import {
15
- isHTMLRequest,
16
+ UseCSPInputSchema,
17
+ isHTMLRequest
18
+ } from "../chunk-HCGLR3Z3.js";
19
+ import {
20
+ AppwardenApiTokenSchema,
21
+ BooleanSchema,
16
22
  printMessage
17
- } from "../chunk-L5EQIJZB.js";
23
+ } from "../chunk-ZBYVJ3HA.js";
18
24
 
19
25
  // src/schemas/tanstack-start-cloudflare.ts
20
26
  import { z } from "zod";
@@ -26,7 +32,9 @@ var TanStackStartCloudflareConfigSchema = z.object({
26
32
  /** Optional custom API hostname (defaults to https://api.appwarden.io) */
27
33
  appwardenApiHostname: z.string().optional(),
28
34
  /** Enable debug logging */
29
- debug: BooleanSchema.default(false)
35
+ debug: BooleanSchema.default(false),
36
+ /** Optional Content Security Policy configuration */
37
+ contentSecurityPolicy: z.lazy(() => UseCSPInputSchema).optional()
30
38
  });
31
39
 
32
40
  // src/adapters/tanstack-start-cloudflare.ts
@@ -69,7 +77,23 @@ function createAppwardenMiddleware(configFn) {
69
77
  const lockPageUrl = buildLockPageUrl(config.lockPageSlug, request.url);
70
78
  throw createRedirect(lockPageUrl);
71
79
  }
72
- return next();
80
+ const response = await next();
81
+ if (config.contentSecurityPolicy && response instanceof Response) {
82
+ const cspContext = {
83
+ request,
84
+ response,
85
+ hostname: new URL(request.url).hostname,
86
+ waitUntil: (fn) => cloudflare.ctx.waitUntil(fn)
87
+ };
88
+ await useContentSecurityPolicy(config.contentSecurityPolicy)(
89
+ cspContext,
90
+ async () => {
91
+ }
92
+ // no-op next
93
+ );
94
+ return cspContext.response;
95
+ }
96
+ return response;
73
97
  } catch (error) {
74
98
  if (error instanceof Response) {
75
99
  throw error;
package/cloudflare-LUT5TVEV.js ADDED
@@ -0,0 +1,28 @@
1
+ import {
2
+ CSP_KEYWORDS,
3
+ autoQuoteCSPDirectiveArray,
4
+ autoQuoteCSPDirectiveValue,
5
+ autoQuoteCSPKeyword,
6
+ deleteEdgeValue,
7
+ getLockValue,
8
+ insertErrorLogs,
9
+ isCSPKeyword,
10
+ isQuoted,
11
+ makeCSPHeader,
12
+ store,
13
+ syncEdgeValue
14
+ } from "./chunk-ZBYVJ3HA.js";
15
+ export {
16
+ CSP_KEYWORDS,
17
+ autoQuoteCSPDirectiveArray,
18
+ autoQuoteCSPDirectiveValue,
19
+ autoQuoteCSPKeyword,
20
+ deleteEdgeValue,
21
+ getLockValue,
22
+ insertErrorLogs,
23
+ isCSPKeyword,
24
+ isQuoted,
25
+ makeCSPHeader,
26
+ store,
27
+ syncEdgeValue
28
+ };
package/cloudflare.d.ts CHANGED
@@ -1,16 +1,391 @@
1
- import { M as Middleware, B as Bindings } from './use-content-security-policy-DjRTjIpm.js';
2
- export { u as useContentSecurityPolicy } from './use-content-security-policy-DjRTjIpm.js';
1
+ import { B as Bindings } from './use-content-security-policy-DUYpyUPy.js';
3
2
  import { z } from 'zod';
3
+ export { u as useContentSecurityPolicy } from './use-content-security-policy-CjlLe4yU.js';
4
4
 
5
5
  declare const UseAppwardenInputSchema: z.ZodObject<{
6
6
  debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
7
7
  lockPageSlug: z.ZodOptional<z.ZodString>;
8
8
  multidomainConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
9
9
  lockPageSlug: z.ZodString;
10
+ contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodEffects<z.ZodObject<{
11
+ mode: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>>>;
12
+ directives: z.ZodEffects<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodObject<{
13
+ "default-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
14
+ "script-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
15
+ "style-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
16
+ "img-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
17
+ "connect-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
18
+ "font-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
19
+ "object-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
20
+ "media-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
21
+ "frame-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
22
+ sandbox: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
23
+ "report-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
24
+ "child-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
25
+ "form-action": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
26
+ "frame-ancestors": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
27
+ "plugin-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
28
+ "base-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
29
+ "report-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
30
+ "worker-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
31
+ "manifest-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
32
+ "prefetch-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
33
+ "navigate-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
34
+ "require-sri-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
35
+ "block-all-mixed-content": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
36
+ "upgrade-insecure-requests": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
37
+ "trusted-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
38
+ "require-trusted-types-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
39
+ }, "strip", z.ZodTypeAny, {
40
+ "default-src"?: string | boolean | string[] | undefined;
41
+ "script-src"?: string | boolean | string[] | undefined;
42
+ "style-src"?: string | boolean | string[] | undefined;
43
+ "img-src"?: string | boolean | string[] | undefined;
44
+ "connect-src"?: string | boolean | string[] | undefined;
45
+ "font-src"?: string | boolean | string[] | undefined;
46
+ "object-src"?: string | boolean | string[] | undefined;
47
+ "media-src"?: string | boolean | string[] | undefined;
48
+ "frame-src"?: string | boolean | string[] | undefined;
49
+ sandbox?: string | boolean | string[] | undefined;
50
+ "report-uri"?: string | boolean | string[] | undefined;
51
+ "child-src"?: string | boolean | string[] | undefined;
52
+ "form-action"?: string | boolean | string[] | undefined;
53
+ "frame-ancestors"?: string | boolean | string[] | undefined;
54
+ "plugin-types"?: string | boolean | string[] | undefined;
55
+ "base-uri"?: string | boolean | string[] | undefined;
56
+ "report-to"?: string | boolean | string[] | undefined;
57
+ "worker-src"?: string | boolean | string[] | undefined;
58
+ "manifest-src"?: string | boolean | string[] | undefined;
59
+ "prefetch-src"?: string | boolean | string[] | undefined;
60
+ "navigate-to"?: string | boolean | string[] | undefined;
61
+ "require-sri-for"?: string | boolean | string[] | undefined;
62
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
63
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
64
+ "trusted-types"?: string | boolean | string[] | undefined;
65
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
66
+ }, {
67
+ "default-src"?: string | boolean | string[] | undefined;
68
+ "script-src"?: string | boolean | string[] | undefined;
69
+ "style-src"?: string | boolean | string[] | undefined;
70
+ "img-src"?: string | boolean | string[] | undefined;
71
+ "connect-src"?: string | boolean | string[] | undefined;
72
+ "font-src"?: string | boolean | string[] | undefined;
73
+ "object-src"?: string | boolean | string[] | undefined;
74
+ "media-src"?: string | boolean | string[] | undefined;
75
+ "frame-src"?: string | boolean | string[] | undefined;
76
+ sandbox?: string | boolean | string[] | undefined;
77
+ "report-uri"?: string | boolean | string[] | undefined;
78
+ "child-src"?: string | boolean | string[] | undefined;
79
+ "form-action"?: string | boolean | string[] | undefined;
80
+ "frame-ancestors"?: string | boolean | string[] | undefined;
81
+ "plugin-types"?: string | boolean | string[] | undefined;
82
+ "base-uri"?: string | boolean | string[] | undefined;
83
+ "report-to"?: string | boolean | string[] | undefined;
84
+ "worker-src"?: string | boolean | string[] | undefined;
85
+ "manifest-src"?: string | boolean | string[] | undefined;
86
+ "prefetch-src"?: string | boolean | string[] | undefined;
87
+ "navigate-to"?: string | boolean | string[] | undefined;
88
+ "require-sri-for"?: string | boolean | string[] | undefined;
89
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
90
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
91
+ "trusted-types"?: string | boolean | string[] | undefined;
92
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
93
+ }>]>>, string | {
94
+ "default-src"?: string | boolean | string[] | undefined;
95
+ "script-src"?: string | boolean | string[] | undefined;
96
+ "style-src"?: string | boolean | string[] | undefined;
97
+ "img-src"?: string | boolean | string[] | undefined;
98
+ "connect-src"?: string | boolean | string[] | undefined;
99
+ "font-src"?: string | boolean | string[] | undefined;
100
+ "object-src"?: string | boolean | string[] | undefined;
101
+ "media-src"?: string | boolean | string[] | undefined;
102
+ "frame-src"?: string | boolean | string[] | undefined;
103
+ sandbox?: string | boolean | string[] | undefined;
104
+ "report-uri"?: string | boolean | string[] | undefined;
105
+ "child-src"?: string | boolean | string[] | undefined;
106
+ "form-action"?: string | boolean | string[] | undefined;
107
+ "frame-ancestors"?: string | boolean | string[] | undefined;
108
+ "plugin-types"?: string | boolean | string[] | undefined;
109
+ "base-uri"?: string | boolean | string[] | undefined;
110
+ "report-to"?: string | boolean | string[] | undefined;
111
+ "worker-src"?: string | boolean | string[] | undefined;
112
+ "manifest-src"?: string | boolean | string[] | undefined;
113
+ "prefetch-src"?: string | boolean | string[] | undefined;
114
+ "navigate-to"?: string | boolean | string[] | undefined;
115
+ "require-sri-for"?: string | boolean | string[] | undefined;
116
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
117
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
118
+ "trusted-types"?: string | boolean | string[] | undefined;
119
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
120
+ } | undefined, string | {
121
+ "default-src"?: string | boolean | string[] | undefined;
122
+ "script-src"?: string | boolean | string[] | undefined;
123
+ "style-src"?: string | boolean | string[] | undefined;
124
+ "img-src"?: string | boolean | string[] | undefined;
125
+ "connect-src"?: string | boolean | string[] | undefined;
126
+ "font-src"?: string | boolean | string[] | undefined;
127
+ "object-src"?: string | boolean | string[] | undefined;
128
+ "media-src"?: string | boolean | string[] | undefined;
129
+ "frame-src"?: string | boolean | string[] | undefined;
130
+ sandbox?: string | boolean | string[] | undefined;
131
+ "report-uri"?: string | boolean | string[] | undefined;
132
+ "child-src"?: string | boolean | string[] | undefined;
133
+ "form-action"?: string | boolean | string[] | undefined;
134
+ "frame-ancestors"?: string | boolean | string[] | undefined;
135
+ "plugin-types"?: string | boolean | string[] | undefined;
136
+ "base-uri"?: string | boolean | string[] | undefined;
137
+ "report-to"?: string | boolean | string[] | undefined;
138
+ "worker-src"?: string | boolean | string[] | undefined;
139
+ "manifest-src"?: string | boolean | string[] | undefined;
140
+ "prefetch-src"?: string | boolean | string[] | undefined;
141
+ "navigate-to"?: string | boolean | string[] | undefined;
142
+ "require-sri-for"?: string | boolean | string[] | undefined;
143
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
144
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
145
+ "trusted-types"?: string | boolean | string[] | undefined;
146
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
147
+ } | undefined>, {
148
+ "default-src"?: string | boolean | string[] | undefined;
149
+ "script-src"?: string | boolean | string[] | undefined;
150
+ "style-src"?: string | boolean | string[] | undefined;
151
+ "img-src"?: string | boolean | string[] | undefined;
152
+ "connect-src"?: string | boolean | string[] | undefined;
153
+ "font-src"?: string | boolean | string[] | undefined;
154
+ "object-src"?: string | boolean | string[] | undefined;
155
+ "media-src"?: string | boolean | string[] | undefined;
156
+ "frame-src"?: string | boolean | string[] | undefined;
157
+ sandbox?: string | boolean | string[] | undefined;
158
+ "report-uri"?: string | boolean | string[] | undefined;
159
+ "child-src"?: string | boolean | string[] | undefined;
160
+ "form-action"?: string | boolean | string[] | undefined;
161
+ "frame-ancestors"?: string | boolean | string[] | undefined;
162
+ "plugin-types"?: string | boolean | string[] | undefined;
163
+ "base-uri"?: string | boolean | string[] | undefined;
164
+ "report-to"?: string | boolean | string[] | undefined;
165
+ "worker-src"?: string | boolean | string[] | undefined;
166
+ "manifest-src"?: string | boolean | string[] | undefined;
167
+ "prefetch-src"?: string | boolean | string[] | undefined;
168
+ "navigate-to"?: string | boolean | string[] | undefined;
169
+ "require-sri-for"?: string | boolean | string[] | undefined;
170
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
171
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
172
+ "trusted-types"?: string | boolean | string[] | undefined;
173
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
174
+ } | undefined, string | {
175
+ "default-src"?: string | boolean | string[] | undefined;
176
+ "script-src"?: string | boolean | string[] | undefined;
177
+ "style-src"?: string | boolean | string[] | undefined;
178
+ "img-src"?: string | boolean | string[] | undefined;
179
+ "connect-src"?: string | boolean | string[] | undefined;
180
+ "font-src"?: string | boolean | string[] | undefined;
181
+ "object-src"?: string | boolean | string[] | undefined;
182
+ "media-src"?: string | boolean | string[] | undefined;
183
+ "frame-src"?: string | boolean | string[] | undefined;
184
+ sandbox?: string | boolean | string[] | undefined;
185
+ "report-uri"?: string | boolean | string[] | undefined;
186
+ "child-src"?: string | boolean | string[] | undefined;
187
+ "form-action"?: string | boolean | string[] | undefined;
188
+ "frame-ancestors"?: string | boolean | string[] | undefined;
189
+ "plugin-types"?: string | boolean | string[] | undefined;
190
+ "base-uri"?: string | boolean | string[] | undefined;
191
+ "report-to"?: string | boolean | string[] | undefined;
192
+ "worker-src"?: string | boolean | string[] | undefined;
193
+ "manifest-src"?: string | boolean | string[] | undefined;
194
+ "prefetch-src"?: string | boolean | string[] | undefined;
195
+ "navigate-to"?: string | boolean | string[] | undefined;
196
+ "require-sri-for"?: string | boolean | string[] | undefined;
197
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
198
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
199
+ "trusted-types"?: string | boolean | string[] | undefined;
200
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
201
+ } | undefined>;
202
+ }, "strip", z.ZodTypeAny, {
203
+ mode: "disabled" | "report-only" | "enforced";
204
+ directives?: {
205
+ "default-src"?: string | boolean | string[] | undefined;
206
+ "script-src"?: string | boolean | string[] | undefined;
207
+ "style-src"?: string | boolean | string[] | undefined;
208
+ "img-src"?: string | boolean | string[] | undefined;
209
+ "connect-src"?: string | boolean | string[] | undefined;
210
+ "font-src"?: string | boolean | string[] | undefined;
211
+ "object-src"?: string | boolean | string[] | undefined;
212
+ "media-src"?: string | boolean | string[] | undefined;
213
+ "frame-src"?: string | boolean | string[] | undefined;
214
+ sandbox?: string | boolean | string[] | undefined;
215
+ "report-uri"?: string | boolean | string[] | undefined;
216
+ "child-src"?: string | boolean | string[] | undefined;
217
+ "form-action"?: string | boolean | string[] | undefined;
218
+ "frame-ancestors"?: string | boolean | string[] | undefined;
219
+ "plugin-types"?: string | boolean | string[] | undefined;
220
+ "base-uri"?: string | boolean | string[] | undefined;
221
+ "report-to"?: string | boolean | string[] | undefined;
222
+ "worker-src"?: string | boolean | string[] | undefined;
223
+ "manifest-src"?: string | boolean | string[] | undefined;
224
+ "prefetch-src"?: string | boolean | string[] | undefined;
225
+ "navigate-to"?: string | boolean | string[] | undefined;
226
+ "require-sri-for"?: string | boolean | string[] | undefined;
227
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
228
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
229
+ "trusted-types"?: string | boolean | string[] | undefined;
230
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
231
+ } | undefined;
232
+ }, {
233
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
234
+ directives?: string | {
235
+ "default-src"?: string | boolean | string[] | undefined;
236
+ "script-src"?: string | boolean | string[] | undefined;
237
+ "style-src"?: string | boolean | string[] | undefined;
238
+ "img-src"?: string | boolean | string[] | undefined;
239
+ "connect-src"?: string | boolean | string[] | undefined;
240
+ "font-src"?: string | boolean | string[] | undefined;
241
+ "object-src"?: string | boolean | string[] | undefined;
242
+ "media-src"?: string | boolean | string[] | undefined;
243
+ "frame-src"?: string | boolean | string[] | undefined;
244
+ sandbox?: string | boolean | string[] | undefined;
245
+ "report-uri"?: string | boolean | string[] | undefined;
246
+ "child-src"?: string | boolean | string[] | undefined;
247
+ "form-action"?: string | boolean | string[] | undefined;
248
+ "frame-ancestors"?: string | boolean | string[] | undefined;
249
+ "plugin-types"?: string | boolean | string[] | undefined;
250
+ "base-uri"?: string | boolean | string[] | undefined;
251
+ "report-to"?: string | boolean | string[] | undefined;
252
+ "worker-src"?: string | boolean | string[] | undefined;
253
+ "manifest-src"?: string | boolean | string[] | undefined;
254
+ "prefetch-src"?: string | boolean | string[] | undefined;
255
+ "navigate-to"?: string | boolean | string[] | undefined;
256
+ "require-sri-for"?: string | boolean | string[] | undefined;
257
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
258
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
259
+ "trusted-types"?: string | boolean | string[] | undefined;
260
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
261
+ } | undefined;
262
+ }>, {
263
+ mode: "disabled" | "report-only" | "enforced";
264
+ directives?: {
265
+ "default-src"?: string | boolean | string[] | undefined;
266
+ "script-src"?: string | boolean | string[] | undefined;
267
+ "style-src"?: string | boolean | string[] | undefined;
268
+ "img-src"?: string | boolean | string[] | undefined;
269
+ "connect-src"?: string | boolean | string[] | undefined;
270
+ "font-src"?: string | boolean | string[] | undefined;
271
+ "object-src"?: string | boolean | string[] | undefined;
272
+ "media-src"?: string | boolean | string[] | undefined;
273
+ "frame-src"?: string | boolean | string[] | undefined;
274
+ sandbox?: string | boolean | string[] | undefined;
275
+ "report-uri"?: string | boolean | string[] | undefined;
276
+ "child-src"?: string | boolean | string[] | undefined;
277
+ "form-action"?: string | boolean | string[] | undefined;
278
+ "frame-ancestors"?: string | boolean | string[] | undefined;
279
+ "plugin-types"?: string | boolean | string[] | undefined;
280
+ "base-uri"?: string | boolean | string[] | undefined;
281
+ "report-to"?: string | boolean | string[] | undefined;
282
+ "worker-src"?: string | boolean | string[] | undefined;
283
+ "manifest-src"?: string | boolean | string[] | undefined;
284
+ "prefetch-src"?: string | boolean | string[] | undefined;
285
+ "navigate-to"?: string | boolean | string[] | undefined;
286
+ "require-sri-for"?: string | boolean | string[] | undefined;
287
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
288
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
289
+ "trusted-types"?: string | boolean | string[] | undefined;
290
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
291
+ } | undefined;
292
+ }, {
293
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
294
+ directives?: string | {
295
+ "default-src"?: string | boolean | string[] | undefined;
296
+ "script-src"?: string | boolean | string[] | undefined;
297
+ "style-src"?: string | boolean | string[] | undefined;
298
+ "img-src"?: string | boolean | string[] | undefined;
299
+ "connect-src"?: string | boolean | string[] | undefined;
300
+ "font-src"?: string | boolean | string[] | undefined;
301
+ "object-src"?: string | boolean | string[] | undefined;
302
+ "media-src"?: string | boolean | string[] | undefined;
303
+ "frame-src"?: string | boolean | string[] | undefined;
304
+ sandbox?: string | boolean | string[] | undefined;
305
+ "report-uri"?: string | boolean | string[] | undefined;
306
+ "child-src"?: string | boolean | string[] | undefined;
307
+ "form-action"?: string | boolean | string[] | undefined;
308
+ "frame-ancestors"?: string | boolean | string[] | undefined;
309
+ "plugin-types"?: string | boolean | string[] | undefined;
310
+ "base-uri"?: string | boolean | string[] | undefined;
311
+ "report-to"?: string | boolean | string[] | undefined;
312
+ "worker-src"?: string | boolean | string[] | undefined;
313
+ "manifest-src"?: string | boolean | string[] | undefined;
314
+ "prefetch-src"?: string | boolean | string[] | undefined;
315
+ "navigate-to"?: string | boolean | string[] | undefined;
316
+ "require-sri-for"?: string | boolean | string[] | undefined;
317
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
318
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
319
+ "trusted-types"?: string | boolean | string[] | undefined;
320
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
321
+ } | undefined;
322
+ }>>>;
10
323
  }, "strip", z.ZodTypeAny, {
11
324
  lockPageSlug: string;
325
+ contentSecurityPolicy?: {
326
+ mode: "disabled" | "report-only" | "enforced";
327
+ directives?: {
328
+ "default-src"?: string | boolean | string[] | undefined;
329
+ "script-src"?: string | boolean | string[] | undefined;
330
+ "style-src"?: string | boolean | string[] | undefined;
331
+ "img-src"?: string | boolean | string[] | undefined;
332
+ "connect-src"?: string | boolean | string[] | undefined;
333
+ "font-src"?: string | boolean | string[] | undefined;
334
+ "object-src"?: string | boolean | string[] | undefined;
335
+ "media-src"?: string | boolean | string[] | undefined;
336
+ "frame-src"?: string | boolean | string[] | undefined;
337
+ sandbox?: string | boolean | string[] | undefined;
338
+ "report-uri"?: string | boolean | string[] | undefined;
339
+ "child-src"?: string | boolean | string[] | undefined;
340
+ "form-action"?: string | boolean | string[] | undefined;
341
+ "frame-ancestors"?: string | boolean | string[] | undefined;
342
+ "plugin-types"?: string | boolean | string[] | undefined;
343
+ "base-uri"?: string | boolean | string[] | undefined;
344
+ "report-to"?: string | boolean | string[] | undefined;
345
+ "worker-src"?: string | boolean | string[] | undefined;
346
+ "manifest-src"?: string | boolean | string[] | undefined;
347
+ "prefetch-src"?: string | boolean | string[] | undefined;
348
+ "navigate-to"?: string | boolean | string[] | undefined;
349
+ "require-sri-for"?: string | boolean | string[] | undefined;
350
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
351
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
352
+ "trusted-types"?: string | boolean | string[] | undefined;
353
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
354
+ } | undefined;
355
+ } | undefined;
12
356
  }, {
13
357
  lockPageSlug: string;
358
+ contentSecurityPolicy?: {
359
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
360
+ directives?: string | {
361
+ "default-src"?: string | boolean | string[] | undefined;
362
+ "script-src"?: string | boolean | string[] | undefined;
363
+ "style-src"?: string | boolean | string[] | undefined;
364
+ "img-src"?: string | boolean | string[] | undefined;
365
+ "connect-src"?: string | boolean | string[] | undefined;
366
+ "font-src"?: string | boolean | string[] | undefined;
367
+ "object-src"?: string | boolean | string[] | undefined;
368
+ "media-src"?: string | boolean | string[] | undefined;
369
+ "frame-src"?: string | boolean | string[] | undefined;
370
+ sandbox?: string | boolean | string[] | undefined;
371
+ "report-uri"?: string | boolean | string[] | undefined;
372
+ "child-src"?: string | boolean | string[] | undefined;
373
+ "form-action"?: string | boolean | string[] | undefined;
374
+ "frame-ancestors"?: string | boolean | string[] | undefined;
375
+ "plugin-types"?: string | boolean | string[] | undefined;
376
+ "base-uri"?: string | boolean | string[] | undefined;
377
+ "report-to"?: string | boolean | string[] | undefined;
378
+ "worker-src"?: string | boolean | string[] | undefined;
379
+ "manifest-src"?: string | boolean | string[] | undefined;
380
+ "prefetch-src"?: string | boolean | string[] | undefined;
381
+ "navigate-to"?: string | boolean | string[] | undefined;
382
+ "require-sri-for"?: string | boolean | string[] | undefined;
383
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
384
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
385
+ "trusted-types"?: string | boolean | string[] | undefined;
386
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
387
+ } | undefined;
388
+ } | undefined;
14
389
  }>>>;
15
390
  appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
16
391
  appwardenApiHostname: z.ZodOptional<z.ZodString>;
@@ -20,6 +395,37 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
20
395
  lockPageSlug?: string | undefined;
21
396
  multidomainConfig?: Record<string, {
22
397
  lockPageSlug: string;
398
+ contentSecurityPolicy?: {
399
+ mode: "disabled" | "report-only" | "enforced";
400
+ directives?: {
401
+ "default-src"?: string | boolean | string[] | undefined;
402
+ "script-src"?: string | boolean | string[] | undefined;
403
+ "style-src"?: string | boolean | string[] | undefined;
404
+ "img-src"?: string | boolean | string[] | undefined;
405
+ "connect-src"?: string | boolean | string[] | undefined;
406
+ "font-src"?: string | boolean | string[] | undefined;
407
+ "object-src"?: string | boolean | string[] | undefined;
408
+ "media-src"?: string | boolean | string[] | undefined;
409
+ "frame-src"?: string | boolean | string[] | undefined;
410
+ sandbox?: string | boolean | string[] | undefined;
411
+ "report-uri"?: string | boolean | string[] | undefined;
412
+ "child-src"?: string | boolean | string[] | undefined;
413
+ "form-action"?: string | boolean | string[] | undefined;
414
+ "frame-ancestors"?: string | boolean | string[] | undefined;
415
+ "plugin-types"?: string | boolean | string[] | undefined;
416
+ "base-uri"?: string | boolean | string[] | undefined;
417
+ "report-to"?: string | boolean | string[] | undefined;
418
+ "worker-src"?: string | boolean | string[] | undefined;
419
+ "manifest-src"?: string | boolean | string[] | undefined;
420
+ "prefetch-src"?: string | boolean | string[] | undefined;
421
+ "navigate-to"?: string | boolean | string[] | undefined;
422
+ "require-sri-for"?: string | boolean | string[] | undefined;
423
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
424
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
425
+ "trusted-types"?: string | boolean | string[] | undefined;
426
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
427
+ } | undefined;
428
+ } | undefined;
23
429
  }> | undefined;
24
430
  appwardenApiHostname?: string | undefined;
25
431
  }, {
@@ -28,16 +434,42 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
28
434
  lockPageSlug?: string | undefined;
29
435
  multidomainConfig?: Record<string, {
30
436
  lockPageSlug: string;
437
+ contentSecurityPolicy?: {
438
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
439
+ directives?: string | {
440
+ "default-src"?: string | boolean | string[] | undefined;
441
+ "script-src"?: string | boolean | string[] | undefined;
442
+ "style-src"?: string | boolean | string[] | undefined;
443
+ "img-src"?: string | boolean | string[] | undefined;
444
+ "connect-src"?: string | boolean | string[] | undefined;
445
+ "font-src"?: string | boolean | string[] | undefined;
446
+ "object-src"?: string | boolean | string[] | undefined;
447
+ "media-src"?: string | boolean | string[] | undefined;
448
+ "frame-src"?: string | boolean | string[] | undefined;
449
+ sandbox?: string | boolean | string[] | undefined;
450
+ "report-uri"?: string | boolean | string[] | undefined;
451
+ "child-src"?: string | boolean | string[] | undefined;
452
+ "form-action"?: string | boolean | string[] | undefined;
453
+ "frame-ancestors"?: string | boolean | string[] | undefined;
454
+ "plugin-types"?: string | boolean | string[] | undefined;
455
+ "base-uri"?: string | boolean | string[] | undefined;
456
+ "report-to"?: string | boolean | string[] | undefined;
457
+ "worker-src"?: string | boolean | string[] | undefined;
458
+ "manifest-src"?: string | boolean | string[] | undefined;
459
+ "prefetch-src"?: string | boolean | string[] | undefined;
460
+ "navigate-to"?: string | boolean | string[] | undefined;
461
+ "require-sri-for"?: string | boolean | string[] | undefined;
462
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
463
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
464
+ "trusted-types"?: string | boolean | string[] | undefined;
465
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
466
+ } | undefined;
467
+ } | undefined;
31
468
  }> | undefined;
32
469
  appwardenApiHostname?: string | undefined;
33
470
  }>;
34
471
 
35
- type CloudflareConfigType = z.infer<typeof UseAppwardenInputSchema> & {
36
- middleware: {
37
- before: Middleware[];
38
- after: Middleware[];
39
- };
40
- };
472
+ type CloudflareConfigType = z.infer<typeof UseAppwardenInputSchema>;
41
473
 
42
474
  declare const createAppwardenMiddleware: (inputFn: CloudflareConfigType) => ExportedHandlerFetchHandler<Bindings>;
43
475