@colyseus/core 0.18.12 → 0.18.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@colyseus/core",
-  "version": "0.18.12",
+  "version": "0.18.14",
   "description": "Multiplayer Framework for Node.js.",
   "type": "module",
   "input": "./src/index.ts",
@@ -51,8 +51,8 @@
     "debug": "^4.3.4",
     "msgpackr": "^2.0.1",
     "nanoid": "^3.3.11",
-    "@colyseus/shared-types": "^0.18.2",
     "@colyseus/better-call": "^1.3.1",
+    "@colyseus/shared-types": "^0.18.2",
     "@colyseus/greeting-banner": "^4.0.2"
   },
   "devDependencies": {
@@ -68,9 +68,9 @@
     "@pm2/io": "^6.1.0",
     "express": "^4.16.0 || ^5.0.0",
     "zod": "^4.1.12",
+    "@colyseus/better-call": "^1.3.1",
     "@colyseus/auth": "^0.18.2",
-    "@colyseus/ws-transport": "^0.18.2",
-    "@colyseus/better-call": "^1.3.1"
+    "@colyseus/ws-transport": "^0.18.2"
   },
   "peerDependenciesMeta": {
     "@colyseus/auth": {

package/src/MatchMaker.ts

@@ -618,6 +618,10 @@ export async function handleCreateRoom(roomName: string, clientOptions: ClientOp
 
     } catch (e: any) {
       debugAndPrintError(e);
+
+      // no matchMaker listeners yet, so this only releases the room's own timers and presence
+      room['_events'].emit('dispose');
+
       throw new ServerError(
         e.code || ErrorCode.MATCHMAKE_UNHANDLED,
         e.message,

package/src/Room.ts

@@ -1790,15 +1790,22 @@ export class Room<T extends RoomOptions = RoomOptions> {
       try {
         if (authData) {
           client.auth = authData;
+        }
+
+        // only an own static onAuth() skips instance/plugin onAuth, not @colyseus/auth's default
+        const authedStatically = authData && (this.constructor as typeof Room).onAuth !== Room.onAuth;
 
-        } else if (this.onAuth !== Room.prototype.onAuth) {
+        if (!authedStatically && this.onAuth !== Room.prototype.onAuth) {
           try {
-            client.auth = await this.onAuth(client, joinOptions, authContext);
+            const result = await this.onAuth(client, joinOptions, authContext);
 
-            if (!client.auth) {
+            if (!result) {
               throw new ServerError(ErrorCode.AUTH_FAILED, 'onAuth failed');
             }
 
+            // `true` adds nothing: keep the payload the default static onAuth decoded
+            client.auth = (result === true && authData) || result;
+
           } catch (e) {
             // remove seat reservation
             delete this._reservedSeats[sessionId];