@c9up/ream 0.1.17 → 0.1.18

package/dist/rpc/RpcProvider.d.ts

@@ -24,6 +24,14 @@ export interface RpcProviderOptions {
 export interface RpcConfig {
     /** HTTP path the JSON-RPC endpoint is mounted at. Default `/rpc`. */
     path?: string;
+    /**
+     * Guards applied to the `/rpc` route itself (e.g. `['jwt']`), so warden
+     * authenticates the endpoint at the edge and populates `ctx.auth` for every
+     * call — which per-method `.guard()` / `authorizeRpc()` then read. Without
+     * this, the inline-mounted route carries no guard metadata, so warden treats
+     * it as public and never populates `ctx.auth` (every guarded method 401s).
+     */
+    guards?: string[];
 }
 export declare class RpcProvider extends Provider {
     readonly rpc: RpcRouter;

package/dist/rpc/RpcProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RpcProvider.d.ts","sourceRoot":"","sources":["../../src/rpc/RpcProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,MAAM,CAAC,EAAE,SAAS,CAAA;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,qBAAa,WAAY,SAAQ,QAAQ;IACvC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;gBAEX,GAAG,EAAE,UAAU,EAAE,OAAO,GAAE,kBAAuB;IAKpD,QAAQ,IAAI,IAAI;IAgBV,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAOrC;AAMD,eAAe,WAAW,CAAA"}
+{"version":3,"file":"RpcProvider.d.ts","sourceRoot":"","sources":["../../src/rpc/RpcProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,MAAM,CAAC,EAAE,SAAS,CAAA;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,qBAAa,WAAY,SAAQ,QAAQ;IACvC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;gBAEX,GAAG,EAAE,UAAU,EAAE,OAAO,GAAE,kBAAuB;IAKpD,QAAQ,IAAI,IAAI;IAgBV,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAarC;AAMD,eAAe,WAAW,CAAA"}

package/dist/rpc/RpcProvider.js

@@ -36,11 +36,18 @@ export class RpcProvider extends Provider {
         container.singleton('rpc', () => this.rpc);
     }
     async boot() {
-        const path = this.app.config.get('rpc')?.path ?? '/rpc';
+        const config = this.app.config.get('rpc');
+        const path = config?.path ?? '/rpc';
         const router = this.app.container.make('router');
         // RpcRouter.handle() reads the registered methods at request time, so the
         // mount can happen before apps finish registering methods.
-        router.post(path, (ctx) => this.rpc.handle(ctx));
+        const route = router.post(path, (ctx) => this.rpc.handle(ctx));
+        // Apply route-level guards (e.g. ['jwt']) so warden authenticates the
+        // endpoint at the edge and populates ctx.auth — the inline route has no
+        // decorator metadata otherwise.
+        const guards = config?.guards ?? [];
+        if (guards.length > 0)
+            route.guard(...guards);
     }
 }
 // Also expose as the default export so reamrc's provider loader can do

package/dist/rpc/RpcProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"RpcProvider.js","sourceRoot":"","sources":["../../src/rpc/RpcProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAY1C,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAC9B,GAAG,CAAW;IAEvB,YAAY,GAAe,EAAE,UAA8B,EAAE;QAC3D,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,SAAS,EAAE,CAAA;IAC9C,CAAC;IAEQ,QAAQ;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAA;QACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;gBAAE,OAAM,CAAC,4BAA4B;YAC9E,MAAM,IAAI,SAAS,CACjB,iCAAiC,EACjC,gEAAgE,EAChE;gBACE,IAAI,EAAE,kGAAkG;aACzG,CACF,CAAA;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QAChC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAY,KAAK,CAAC,EAAE,IAAI,IAAI,MAAM,CAAA;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,QAAQ,CAAC,CAAA;QACxD,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,CAAC;CACF;AAED,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,4BAA4B;AAC5B,eAAe,WAAW,CAAA"}
+{"version":3,"file":"RpcProvider.js","sourceRoot":"","sources":["../../src/rpc/RpcProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAoB1C,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAC9B,GAAG,CAAW;IAEvB,YAAY,GAAe,EAAE,UAA8B,EAAE;QAC3D,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,SAAS,EAAE,CAAA;IAC9C,CAAC;IAEQ,QAAQ;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAA;QACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;gBAAE,OAAM,CAAC,4BAA4B;YAC9E,MAAM,IAAI,SAAS,CACjB,iCAAiC,EACjC,gEAAgE,EAChE;gBACE,IAAI,EAAE,kGAAkG;aACzG,CACF,CAAA;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QAChC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAY,KAAK,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAA;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,QAAQ,CAAC,CAAA;QACxD,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3E,sEAAsE;QACtE,wEAAwE;QACxE,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAA;IAC/C,CAAC;CACF;AAED,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,4BAA4B;AAC5B,eAAe,WAAW,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c9up/ream",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "Ream — Rust-powered Node.js application framework",
   "license": "MIT",
   "type": "module",

package/src/rpc/RpcProvider.ts

@@ -30,6 +30,14 @@ export interface RpcProviderOptions {
 export interface RpcConfig {
   /** HTTP path the JSON-RPC endpoint is mounted at. Default `/rpc`. */
   path?: string
+  /**
+   * Guards applied to the `/rpc` route itself (e.g. `['jwt']`), so warden
+   * authenticates the endpoint at the edge and populates `ctx.auth` for every
+   * call — which per-method `.guard()` / `authorizeRpc()` then read. Without
+   * this, the inline-mounted route carries no guard metadata, so warden treats
+   * it as public and never populates `ctx.auth` (every guarded method 401s).
+   */
+  guards?: string[]
 }
 
 export class RpcProvider extends Provider {
@@ -57,11 +65,17 @@ export class RpcProvider extends Provider {
   }
 
   override async boot(): Promise<void> {
-    const path = this.app.config.get<RpcConfig>('rpc')?.path ?? '/rpc'
+    const config = this.app.config.get<RpcConfig>('rpc')
+    const path = config?.path ?? '/rpc'
     const router = this.app.container.make<Router>('router')
     // RpcRouter.handle() reads the registered methods at request time, so the
     // mount can happen before apps finish registering methods.
-    router.post(path, (ctx: HttpContext) => this.rpc.handle(ctx))
+    const route = router.post(path, (ctx: HttpContext) => this.rpc.handle(ctx))
+    // Apply route-level guards (e.g. ['jwt']) so warden authenticates the
+    // endpoint at the edge and populates ctx.auth — the inline route has no
+    // decorator metadata otherwise.
+    const guards = config?.guards ?? []
+    if (guards.length > 0) route.guard(...guards)
   }
 }