@constructive-io/graphql-server 5.20.7 → 5.20.8

package/esm/middleware/graphile.js

@@ -174,10 +174,16 @@ const buildPreset = (pool, schemas, anonRole, roleName, databaseSettings, apiId,
                             'jwt.claims.principal_id': headerActorId,
                             ...context
                         };
+                        // The entity pair travels together: the tenant's writers reject an
+                        // entity id whose type they cannot interpret (`ENTITY_TYPE_REQUIRED`).
                         const headerEntityId = req.get('X-Entity-Id');
+                        const headerEntityType = req.get('X-Entity-Type');
                         if (headerEntityId) {
                             pgSettings['jwt.claims.entity_id'] = headerEntityId;
                         }
+                        if (headerEntityType) {
+                            pgSettings['jwt.claims.entity_type'] = headerEntityType;
+                        }
                         const headerOrganizationId = req.get('X-Organization-Id');
                         if (headerOrganizationId) {
                             pgSettings['jwt.claims.organization_id'] = headerOrganizationId;
@@ -188,11 +194,20 @@ const buildPreset = (pool, schemas, anonRole, roleName, databaseSettings, apiId,
                         return { pgSettings };
                     }
                 }
+                // No actor to name, so the tenant database the request addresses carries
+                // the attribution — the same rule the sync gateway applies to a request
+                // that arrives without a credential. Without it the tenant's own writers
+                // refuse the work an anonymous request legitimately does
+                // (`ATTRIBUTION_REQUIRED`), so a public mutation cannot enqueue a job.
                 const anonSettings = {
                     ...timeouts,
                     role: anonRole,
                     ...context
                 };
+                if (req?.databaseId) {
+                    anonSettings['jwt.claims.entity_id'] = req.databaseId;
+                    anonSettings['jwt.claims.entity_type'] = 'database';
+                }
                 if (req?.requestId) {
                     anonSettings['request.id'] = req.requestId;
                 }

package/middleware/graphile.js

@@ -180,10 +180,16 @@ const buildPreset = (pool, schemas, anonRole, roleName, databaseSettings, apiId,
                             'jwt.claims.principal_id': headerActorId,
                             ...context
                         };
+                        // The entity pair travels together: the tenant's writers reject an
+                        // entity id whose type they cannot interpret (`ENTITY_TYPE_REQUIRED`).
                         const headerEntityId = req.get('X-Entity-Id');
+                        const headerEntityType = req.get('X-Entity-Type');
                         if (headerEntityId) {
                             pgSettings['jwt.claims.entity_id'] = headerEntityId;
                         }
+                        if (headerEntityType) {
+                            pgSettings['jwt.claims.entity_type'] = headerEntityType;
+                        }
                         const headerOrganizationId = req.get('X-Organization-Id');
                         if (headerOrganizationId) {
                             pgSettings['jwt.claims.organization_id'] = headerOrganizationId;
@@ -194,11 +200,20 @@ const buildPreset = (pool, schemas, anonRole, roleName, databaseSettings, apiId,
                         return { pgSettings };
                     }
                 }
+                // No actor to name, so the tenant database the request addresses carries
+                // the attribution — the same rule the sync gateway applies to a request
+                // that arrives without a credential. Without it the tenant's own writers
+                // refuse the work an anonymous request legitimately does
+                // (`ATTRIBUTION_REQUIRED`), so a public mutation cannot enqueue a job.
                 const anonSettings = {
                     ...timeouts,
                     role: anonRole,
                     ...context
                 };
+                if (req?.databaseId) {
+                    anonSettings['jwt.claims.entity_id'] = req.databaseId;
+                    anonSettings['jwt.claims.entity_type'] = 'database';
+                }
                 if (req?.requestId) {
                     anonSettings['request.id'] = req.requestId;
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/graphql-server",
-  "version": "5.20.7",
+  "version": "5.20.8",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive GraphQL Server",
   "main": "index.js",
@@ -96,5 +96,5 @@
     "supertest": "^7.2.2",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "5e0bfead2856d1a062b495d343a43e543343f9b8"
+  "gitHead": "4deb5b9a00ead37453857d24274007255092822e"
 }