@connexis/transport-sse 1.0.1 → 1.0.2

package/dist/index.d.mts

@@ -4,6 +4,7 @@ interface SSETransportOptions {
     publishUrl?: string;
     publish?: (topic: string, data: any) => Promise<void>;
     withCredentials?: boolean;
+    authToken?: string | (() => string | Promise<string>);
 }
 declare class SSETransport implements Transport {
     private url;

package/dist/index.d.ts

@@ -4,6 +4,7 @@ interface SSETransportOptions {
     publishUrl?: string;
     publish?: (topic: string, data: any) => Promise<void>;
     withCredentials?: boolean;
+    authToken?: string | (() => string | Promise<string>);
 }
 declare class SSETransport implements Transport {
     private url;

package/dist/index.js

@@ -44,9 +44,15 @@ var SSETransport = class _SSETransport {
       return;
     }
     this.updateState("connecting");
+    let connectionUrl = this.url;
+    if (this.options.authToken) {
+      const token = typeof this.options.authToken === "function" ? await this.options.authToken() : this.options.authToken;
+      const separator = connectionUrl.includes("?") ? "&" : "?";
+      connectionUrl = `${connectionUrl}${separator}token=${encodeURIComponent(token)}`;
+    }
     return new Promise((resolve, reject) => {
       try {
-        this.eventSource = new EventSource(this.url, {
+        this.eventSource = new EventSource(connectionUrl, {
           withCredentials: this.options.withCredentials
         });
       } catch (err) {
@@ -95,11 +101,16 @@ var SSETransport = class _SSETransport {
       return;
     }
     if (this.options.publishUrl) {
+      const headers = {
+        "Content-Type": "application/json"
+      };
+      if (this.options.authToken) {
+        const token = typeof this.options.authToken === "function" ? await this.options.authToken() : this.options.authToken;
+        headers["Authorization"] = `Bearer ${token}`;
+      }
       const response = await fetch(this.options.publishUrl, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json"
-        },
+        headers,
         body: JSON.stringify({ topic, data })
       });
       if (!response.ok) {

package/dist/index.mjs

@@ -20,9 +20,15 @@ var SSETransport = class _SSETransport {
       return;
     }
     this.updateState("connecting");
+    let connectionUrl = this.url;
+    if (this.options.authToken) {
+      const token = typeof this.options.authToken === "function" ? await this.options.authToken() : this.options.authToken;
+      const separator = connectionUrl.includes("?") ? "&" : "?";
+      connectionUrl = `${connectionUrl}${separator}token=${encodeURIComponent(token)}`;
+    }
     return new Promise((resolve, reject) => {
       try {
-        this.eventSource = new EventSource(this.url, {
+        this.eventSource = new EventSource(connectionUrl, {
           withCredentials: this.options.withCredentials
         });
       } catch (err) {
@@ -71,11 +77,16 @@ var SSETransport = class _SSETransport {
       return;
     }
     if (this.options.publishUrl) {
+      const headers = {
+        "Content-Type": "application/json"
+      };
+      if (this.options.authToken) {
+        const token = typeof this.options.authToken === "function" ? await this.options.authToken() : this.options.authToken;
+        headers["Authorization"] = `Bearer ${token}`;
+      }
       const response = await fetch(this.options.publishUrl, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json"
-        },
+        headers,
         body: JSON.stringify({ topic, data })
       });
       if (!response.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@connexis/transport-sse",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Server-Sent Events (SSE) transport for @connexis",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -13,7 +13,7 @@
     }
   },
   "dependencies": {
-    "@connexis/core": "1.0.1"
+    "@connexis/core": "1.0.2"
   },
   "devDependencies": {
     "typescript": "^5.5.2"

package/src/__tests__/sse-transport.test.ts

@@ -0,0 +1,89 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { SSETransport } from '../index.js';
+
+// Setup Mock EventSource class
+class MockEventSource {
+  public static lastInstance: MockEventSource | null = null;
+  public onopen: (() => void) | null = null;
+  public onerror: (() => void) | null = null;
+  public onmessage: ((e: any) => void) | null = null;
+  public url: string;
+  public options: any;
+
+  constructor(url: string, options?: any) {
+    this.url = url;
+    this.options = options;
+    MockEventSource.lastInstance = this;
+
+    setTimeout(() => {
+      this.onopen?.();
+    }, 10);
+  }
+
+  close() {}
+}
+
+describe('SSETransport Auth', () => {
+  beforeEach(() => {
+    vi.stubGlobal('EventSource', MockEventSource);
+    vi.stubGlobal('fetch', vi.fn().mockResolvedValue({ ok: true, status: 200 }));
+    MockEventSource.lastInstance = null;
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+    vi.restoreAllMocks();
+  });
+
+  it('should append token as query parameter for static authToken', async () => {
+    const transport = new SSETransport('http://localhost/sse', {
+      authToken: 'static-sse-token'
+    });
+
+    await transport.connect();
+
+    expect(MockEventSource.lastInstance).not.toBeNull();
+    expect(MockEventSource.lastInstance!.url).toBe('http://localhost/sse?token=static-sse-token');
+
+    await transport.disconnect();
+  });
+
+  it('should resolve and append token for dynamic async getAuthToken callback', async () => {
+    const mockGetToken = vi.fn().mockResolvedValue('dynamic-sse-token');
+    const transport = new SSETransport('http://localhost/sse', {
+      authToken: mockGetToken
+    });
+
+    await transport.connect();
+
+    expect(mockGetToken).toHaveBeenCalled();
+    expect(MockEventSource.lastInstance).not.toBeNull();
+    expect(MockEventSource.lastInstance!.url).toBe('http://localhost/sse?token=dynamic-sse-token');
+
+    await transport.disconnect();
+  });
+
+  it('should include Authorization Bearer header when publishing via HTTP publishUrl', async () => {
+    const transport = new SSETransport('http://localhost/sse', {
+      publishUrl: 'http://localhost/publish',
+      authToken: 'publish-sse-token'
+    });
+
+    await transport.connect();
+    await transport.publish('test_topic', { value: 123 });
+
+    expect(globalThis.fetch).toHaveBeenCalledWith(
+      'http://localhost/publish',
+      expect.objectContaining({
+        method: 'POST',
+        headers: expect.objectContaining({
+          'Authorization': 'Bearer publish-sse-token',
+          'Content-Type': 'application/json'
+        }),
+        body: JSON.stringify({ topic: 'test_topic', data: { value: 123 } })
+      })
+    );
+
+    await transport.disconnect();
+  });
+});

package/src/index.ts

@@ -4,6 +4,7 @@ export interface SSETransportOptions {
   publishUrl?: string;
   publish?: (topic: string, data: any) => Promise<void>;
   withCredentials?: boolean;
+  authToken?: string | (() => string | Promise<string>);
 }
 
 export class SSETransport implements Transport {
@@ -31,9 +32,18 @@ export class SSETransport implements Transport {
 
     this.updateState('connecting');
 
+    let connectionUrl = this.url;
+    if (this.options.authToken) {
+      const token = typeof this.options.authToken === 'function'
+        ? await this.options.authToken()
+        : this.options.authToken;
+      const separator = connectionUrl.includes('?') ? '&' : '?';
+      connectionUrl = `${connectionUrl}${separator}token=${encodeURIComponent(token)}`;
+    }
+
     return new Promise<void>((resolve, reject) => {
       try {
-        this.eventSource = new EventSource(this.url, {
+        this.eventSource = new EventSource(connectionUrl, {
           withCredentials: this.options.withCredentials
         });
       } catch (err) {
@@ -94,11 +104,20 @@ export class SSETransport implements Transport {
     }
 
     if (this.options.publishUrl) {
+      const headers: Record<string, string> = {
+        'Content-Type': 'application/json'
+      };
+
+      if (this.options.authToken) {
+        const token = typeof this.options.authToken === 'function'
+          ? await this.options.authToken()
+          : this.options.authToken;
+        headers['Authorization'] = `Bearer ${token}`;
+      }
+
       const response = await fetch(this.options.publishUrl, {
         method: 'POST',
-        headers: {
-          'Content-Type': 'application/json'
-        },
+        headers,
         body: JSON.stringify({ topic, data })
       });
       if (!response.ok) {