@blocklet/sdk 1.17.3-beta-20251125-042047-1bcefd39 → 1.17.3-beta-20251126-121502-d0926972

package/lib/middlewares/csrf.d.ts

@@ -16,7 +16,7 @@ export interface CSRFOptions {
  * @note: 我们需要意识到 1. csrf token 不会被攻击者从 cookie 中得到 2. csrf token 的校验是需要当前用户的 login token 的，3. csrf token 不应该有过期时间
  * @returns
  */
-declare function defaultGenerateToken(req: Request): void;
+declare function defaultGenerateToken(req: Request, res: CSRFOptionsResponse): void;
 declare function defaultVerifyToken(req: Request): void;
 export declare function csrf(options?: CSRFOptions): RequestHandler;
 export {};

package/lib/middlewares/csrf.js

@@ -7,9 +7,11 @@ exports.csrf = csrf;
 const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
 const joi_1 = __importDefault(require("joi"));
 const jwt_decode_1 = __importDefault(require("jwt-decode"));
+const debug_1 = __importDefault(require("debug"));
 const csrf_1 = require("../util/csrf");
 const wallet_1 = require("../util/wallet");
 const config_1 = __importDefault(require("../config"));
+const debug = (0, debug_1.default)('@blocklet/sdk:csrf');
 function printCookieParserNotInstalledWarning() {
     config_1.default.logger.warn('cookie-parser middleware is required for the csrf middleware to work properly.');
 }
@@ -21,10 +23,26 @@ function printCookieParserNotInstalledWarning() {
  * @note: 我们需要意识到 1. csrf token 不会被攻击者从 cookie 中得到 2. csrf token 的校验是需要当前用户的 login token 的，3. csrf token 不应该有过期时间
  * @returns
  */
-function defaultGenerateToken(req) {
+function defaultGenerateToken(req, res) {
     if (!req.cookies) {
         printCookieParserNotInstalledWarning();
     }
+    if (req.cookies.login_token) {
+        const newCsrfToken = (0, csrf_1.sign)((0, csrf_1.getCsrfSecret)(), req.cookies.login_token);
+        const oldCsrfToken = req.cookies['x-csrf-token'];
+        if (newCsrfToken !== oldCsrfToken) {
+            debug('defaultGenerateToken.createCsrfToken', {
+                newCsrfToken,
+                oldCsrfToken,
+                loginTokenPart: req.cookies.login_token.slice(-32),
+                loginTokenDecoded: (0, jwt_decode_1.default)(req.cookies.login_token),
+            });
+            res.cookie('x-csrf-token', newCsrfToken, {
+                sameSite: 'strict',
+                secure: true,
+            });
+        }
+    }
 }
 function defaultVerifyToken(req) {
     if (!req.cookies) {
@@ -92,10 +110,10 @@ function csrf(options = { generateToken: defaultGenerateToken, verifyToken: defa
             else if (shouldVerifyToken(req)) {
                 await data.verifyToken(req, res);
             }
-            return next();
+            next();
         }
         catch (err) {
-            return next(err);
+            res.status(403).send(err.message);
         }
     };
 }

package/lib/service/blocklet.d.ts

@@ -96,5 +96,8 @@ interface BlockletService {
     migrateOrgResource(params: OmitTeamDid<Client.RequestMigrateOrgResourceInput>): Promise<Client.ResponseOrgResourceOperation>;
     configBlocklet(params: OmitDid<Client.RequestConfigBlockletInput>): Promise<Client.ResponseBlocklet>;
     configNavigations(params: OmitDid<Client.RequestConfigNavigationsInput>): Promise<Client.ResponseBlocklet>;
+    addRoutingRule(params: OmitTeamDid<Client.RequestAddRoutingRuleInput>): Promise<Client.ResponseRoutingSite>;
+    updateRoutingRule(params: OmitTeamDid<Client.RequestUpdateRoutingRuleInput>): Promise<Client.ResponseRoutingSite>;
+    deleteRoutingRule(params: OmitTeamDid<Client.RequestDeleteRoutingRuleInput>): Promise<Client.ResponseRoutingSite>;
 }
 export { BlockletService };

package/lib/service/blocklet.js

@@ -179,6 +179,10 @@ class BlockletService {
             // config
             'configBlocklet',
             'configNavigations',
+            // routing
+            'addRoutingRule',
+            'updateRoutingRule',
+            'deleteRoutingRule',
         ];
         const teamDid = process.env.BLOCKLET_APP_PID;
         const componentDid = process.env.BLOCKLET_COMPONENT_DID;
@@ -226,6 +230,9 @@ class BlockletService {
             getAccessKey: (fn) => (params) => fn({ input: { ...params, teamDid } }),
             configBlocklet: (fn) => (params) => fn({ input: { ...params, did: [teamDid] } }),
             configNavigations: (fn) => (params) => fn({ input: { ...params, did: teamDid } }),
+            addRoutingRule: (fn) => (params) => fn({ input: { ...params, teamDid } }),
+            updateRoutingRule: (fn) => (params) => fn({ input: { ...params, teamDid } }),
+            deleteRoutingRule: (fn) => (params) => fn({ input: { ...params, teamDid } }),
         };
         apiList.forEach((api) => {
             const fn = client[api];

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.17.3-beta-20251125-042047-1bcefd39",
+  "version": "1.17.3-beta-20251126-121502-d0926972",
   "description": "graphql client to read/write data on abt node",
   "homepage": "https://www.arcblock.io/docs/blocklet-sdk-nodejs",
   "main": "lib/index.js",
@@ -26,26 +26,26 @@
   "author": "linchen1987 <linchen.1987@foxmail.com> (http://github.com/linchen1987)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/constant": "1.17.3-beta-20251125-042047-1bcefd39",
-    "@abtnode/db-cache": "1.17.3-beta-20251125-042047-1bcefd39",
-    "@abtnode/util": "1.17.3-beta-20251125-042047-1bcefd39",
-    "@arcblock/did": "^1.27.7",
-    "@arcblock/did-connect-js": "^1.27.7",
-    "@arcblock/did-ext": "^1.27.7",
-    "@arcblock/jwt": "^1.27.7",
-    "@arcblock/ws": "^1.27.7",
-    "@blocklet/constant": "1.17.3-beta-20251125-042047-1bcefd39",
-    "@blocklet/env": "1.17.3-beta-20251125-042047-1bcefd39",
+    "@abtnode/constant": "1.17.3-beta-20251126-121502-d0926972",
+    "@abtnode/db-cache": "1.17.3-beta-20251126-121502-d0926972",
+    "@abtnode/util": "1.17.3-beta-20251126-121502-d0926972",
+    "@arcblock/did": "^1.27.12",
+    "@arcblock/did-connect-js": "^1.27.12",
+    "@arcblock/did-ext": "^1.27.12",
+    "@arcblock/jwt": "^1.27.12",
+    "@arcblock/ws": "^1.27.12",
+    "@blocklet/constant": "1.17.3-beta-20251126-121502-d0926972",
+    "@blocklet/env": "1.17.3-beta-20251126-121502-d0926972",
     "@blocklet/error": "^0.3.3",
-    "@blocklet/meta": "1.17.3-beta-20251125-042047-1bcefd39",
-    "@blocklet/server-js": "1.17.3-beta-20251125-042047-1bcefd39",
-    "@blocklet/theme": "^3.2.6",
+    "@blocklet/meta": "1.17.3-beta-20251126-121502-d0926972",
+    "@blocklet/server-js": "1.17.3-beta-20251126-121502-d0926972",
+    "@blocklet/theme": "^3.2.10",
     "@did-connect/authenticator": "^2.2.8",
     "@did-connect/handler": "^2.2.8",
     "@nedb/core": "^2.1.5",
-    "@ocap/mcrypto": "^1.27.7",
-    "@ocap/util": "^1.27.7",
-    "@ocap/wallet": "^1.27.7",
+    "@ocap/mcrypto": "^1.27.12",
+    "@ocap/util": "^1.27.12",
+    "@ocap/wallet": "^1.27.12",
     "axios": "^1.7.9",
     "debug": "^4.4.1",
     "fs-extra": "^11.2.0",
@@ -82,5 +82,5 @@
     "ts-node": "^10.9.1",
     "typescript": "^5.6.3"
   },
-  "gitHead": "aa12c79fd75c9e7e06c3f3255bb73e278eec02d4"
+  "gitHead": "7039cacaad2a14a9573371e24e57cbbd6b6525c8"
 }