@arkstack/notifications 0.17.13 → 0.17.15

package/dist/index.d.ts

@@ -431,8 +431,18 @@ declare class PusherRealtimeDriver implements RealtimeDriver {
    *
    * @param authEndpoint
    * @param middleware
+   * @param config
+   * @param channelPrefix
    */
-  registerAuthRoute(authEndpoint?: string, middleware?: unknown | unknown[]): Promise<void>;
+  static registerAuthRoute(authEndpoint?: string, middleware?: unknown | unknown[], channelPrefix?: string, config?: PusherTransportConfig): Promise<void>;
+  /**
+   * Register a realtime autorization route
+   *
+   * @param authEndpoint
+   * @param middleware
+   * @param channelPrefix
+   */
+  registerAuthRoute(authEndpoint?: string, middleware?: unknown | unknown[], channelPrefix?: string): Promise<void>;
 }
 //#endregion
 //#region src/Contracts/RealtimeDriver.d.ts

package/dist/index.js

@@ -1,4 +1,4 @@
-import { config, env, getModel } from "@arkstack/common";
+import { RequestException, config as config$1, env, getModel } from "@arkstack/common";
 import { mkdir, writeFile } from "node:fs/promises";
 import path, { join } from "node:path";
 import nodemailer from "nodemailer";
@@ -192,7 +192,7 @@ var DbNotification = class extends NotificationContract {
 //#region src/config.ts
 const configure = (key, defaultValue) => {
 	try {
-		return config(`notifications.${key}`, defaultValue);
+		return config$1(`notifications.${key}`, defaultValue);
 	} catch {
 		return defaultValue;
 	}
@@ -366,7 +366,7 @@ var MailNotification = class extends NotificationContract {
 	*/
 	async send(message, subject, recipient, data) {
 		const mergedData = {
-			app_name: config("app.name", "Arkstack"),
+			app_name: config$1("app.name", "Arkstack"),
 			...this.mergeData(data)
 		};
 		const resolvedSubject = interpolate(subject ?? this.subjectLine ?? "", mergedData);
@@ -535,7 +535,7 @@ var FirebaseRealtimeDriver = class {
 * The `pusher` server SDK is an optional peer dependency, imported lazily so the
 * package installs without it; it is only required when this transport is used.
 */
-var PusherRealtimeDriver = class {
+var PusherRealtimeDriver = class PusherRealtimeDriver {
 	options;
 	clientPromise;
 	constructor(options = {}) {
@@ -575,8 +575,20 @@ var PusherRealtimeDriver = class {
 	* 
 	* @param authEndpoint 
 	* @param middleware 
+	* @param config 
+	* @param channelPrefix 
 	*/
-	async registerAuthRoute(authEndpoint = "/realtime/auth", middleware) {
+	static async registerAuthRoute(authEndpoint = "/realtime/auth", middleware, channelPrefix, config = {}) {
+		return new PusherRealtimeDriver(config).registerAuthRoute(authEndpoint, middleware, channelPrefix);
+	}
+	/**
+	* Register a realtime autorization route
+	* 
+	* @param authEndpoint 
+	* @param middleware 
+	* @param channelPrefix 
+	*/
+	async registerAuthRoute(authEndpoint = "/realtime/auth", middleware, channelPrefix) {
 		const client = await this.client();
 		for (const [name, path] of Object.entries({
 			express: "@arkstack/driver-express",
@@ -587,9 +599,11 @@ var PusherRealtimeDriver = class {
 				const { Router } = await import(path);
 				const { auth } = await import(midsPath);
 				const middlewares = new Set(Array.isArray(middleware) ? middleware.concat(auth) : [middleware, auth]);
-				Router.post(authEndpoint, ({ clearRequest }) => {
+				Router.post(authEndpoint, ({ clearRequest, req }) => {
 					const channel = clearRequest.input("channel_name");
 					const socketId = clearRequest.input("socket_id");
+					const expected = channelPrefix ?? `${config("notifications.drivers.realtime.channel_prefix", "user.")}${req.user?.id ?? clearRequest.user?.id}`;
+					RequestException.abortIf(channel !== expected, "Channel access denied", 403);
 					return client.authorizeChannel(socketId, channel);
 				}).middleware(Array.from(middlewares));
 				break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkstack/notifications",
-  "version": "0.17.13",
+  "version": "0.17.15",
   "type": "module",
   "description": "Framework-agnostic notification module for Arkstack and Nodejs, providing support for multi-channel notification delivery.",
   "homepage": "https://arkstack.toneflix.net/guide/notifications",
@@ -34,16 +34,16 @@
     "africastalking": "^0.8.0",
     "nodemailer": "^9.0.3",
     "twilio": "^6.0.2",
-    "@arkstack/common": "^0.17.13"
+    "@arkstack/common": "^0.17.15"
   },
   "peerDependencies": {
     "@kanun-hq/plugin-phone": "^0.1.8",
     "firebase-admin": "^13.0.0",
     "pusher": "^5.2.0",
-    "@arkstack/contract": "^0.17.13",
-    "@arkstack/database": "^0.17.13",
-    "@arkstack/driver-express": "^0.17.13",
-    "@arkstack/driver-h3": "^0.17.13"
+    "@arkstack/contract": "^0.17.15",
+    "@arkstack/database": "^0.17.15",
+    "@arkstack/driver-express": "^0.17.15",
+    "@arkstack/driver-h3": "^0.17.15"
   },
   "peerDependenciesMeta": {
     "@arkstack/driver-express": {