@arcote.tech/arc-host 0.4.10 → 0.5.0

package/dist/src/create-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../../src/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOjD,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EACb,MAAM,oBAAoB,CAAC;AAG5B,KAAK,aAAa,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,SAAS,CAAC,CAkKpB"}
+{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../../src/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOjD,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EACb,MAAM,oBAAoB,CAAC;AAG5B,KAAK,aAAa,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,SAAS,CAAC,CAmLpB"}

package/package.json

@@ -4,18 +4,18 @@
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
-  "version": "0.4.10",
+  "version": "0.5.0",
   "private": false,
   "author": "Przemysław Krasiński [arcote.tech]",
   "dependencies": {
-    "@arcote.tech/arc-adapter-db-sqlite": "^0.4.10",
+    "@arcote.tech/arc-adapter-db-sqlite": "^0.5.0",
     "croner": "^9.0.0",
     "jsonwebtoken": "^9.0.2"
   },
   "scripts": {
     "build": "rm -rf dist && bun build ./index.ts --target=bun --outdir=dist --sourcemap --external @arcote.tech/arc && bun run build:declaration",
     "build:declaration": "tsc --emitDeclarationOnly --declarationMap --project tsconfig.types.json",
-    "postbuild": "rimraf tsconfig.types.tsbuildinfo",
+    "postbuild": "rm -f tsconfig.types.tsbuildinfo",
     "type-check": "tsc",
     "dev": "nodemon --ignore dist -e ts,tsx --exec 'bun run build'"
   },
@@ -24,6 +24,6 @@
     "@types/bun": "^1.2.0"
   },
   "peerDependencies": {
-    "@arcote.tech/arc": "^0.4.10"
+    "@arcote.tech/arc": "^0.5.0"
   }
 }

package/src/create-server.ts

@@ -66,12 +66,17 @@ export async function createArcServer(
 
   const connectionManager = new ConnectionManager();
 
-  const corsHeaders = {
-    "Access-Control-Allow-Origin": "*",
-    "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, PATCH, OPTIONS",
-    "Access-Control-Allow-Headers":
-      "Content-Type, Authorization, X-Arc-Scope, X-Arc-Tokens",
-  };
+  function buildCorsHeaders(req?: Request) {
+    const origin = req?.headers.get("Origin") || "*";
+    return {
+      "Access-Control-Allow-Origin": origin,
+      "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, PATCH, OPTIONS",
+      "Access-Control-Allow-Headers":
+        "Content-Type, Authorization, X-Arc-Scope, X-Arc-Tokens",
+      "Access-Control-Allow-Credentials": "true",
+    };
+  }
+  const corsHeaders = buildCorsHeaders();
 
   function verifyToken(token: string): TokenPayload | null {
     try {
@@ -127,16 +132,28 @@ export async function createArcServer(
     async fetch(req, server) {
       const url = new URL(req.url);
 
+      // Build CORS headers with request origin
+      const corsHeaders = buildCorsHeaders(req);
+
       // CORS preflight
       if (req.method === "OPTIONS") {
         return new Response(null, { headers: corsHeaders });
       }
 
-      // Token extraction
+      // Token extraction: Authorization header > query param > cookie
       const authHeader = req.headers.get("Authorization");
-      const rawToken =
+      let rawToken =
         authHeader?.replace("Bearer ", "") ||
         url.searchParams.get("token");
+
+      if (!rawToken) {
+        const cookieHeader = req.headers.get("Cookie");
+        if (cookieHeader) {
+          const match = cookieHeader.match(/arc_token=([^;]+)/);
+          if (match) rawToken = decodeURIComponent(match[1]);
+        }
+      }
+
       const tokenPayload = rawToken ? verifyToken(rawToken) : null;
 
       // WebSocket upgrade