@cosmicdrift/kumiko-dev-server 0.68.0 → 0.71.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cosmicdrift/kumiko-dev-server",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.71.0",
|
|
4
4
|
"description": "Development server bootstrap for Kumiko apps. Bundles the client, mints dev-JWTs, injects the resolved AppSchema, and seeds an admin. Not for production.",
|
|
5
5
|
"license": "BUSL-1.1",
|
|
6
6
|
"author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
|
|
@@ -50,8 +50,8 @@
|
|
|
50
50
|
"kumiko-schema-check": "./bin/kumiko-schema-check.ts"
|
|
51
51
|
},
|
|
52
52
|
"dependencies": {
|
|
53
|
-
"@cosmicdrift/kumiko-bundled-features": "0.
|
|
54
|
-
"@cosmicdrift/kumiko-framework": "0.
|
|
53
|
+
"@cosmicdrift/kumiko-bundled-features": "0.71.0",
|
|
54
|
+
"@cosmicdrift/kumiko-framework": "0.71.0",
|
|
55
55
|
"ts-morph": "^28.0.0"
|
|
56
56
|
},
|
|
57
57
|
"publishConfig": {
|
|
@@ -56,4 +56,20 @@ describe("runDevApp — auth allowedOrigins forwarding (#399/1)", () => {
|
|
|
56
56
|
// proof — the allowlist reached the server build.
|
|
57
57
|
expect(handle).toBeDefined();
|
|
58
58
|
});
|
|
59
|
+
|
|
60
|
+
test("cookieDomain + unsafeSkipOriginCheck clears the guard without an allowlist", async () => {
|
|
61
|
+
// The escape hatch must also forward: cookieDomain alone fails closed
|
|
62
|
+
// (first test), but unsafeSkipOriginCheck=true bypasses it. A dropped/
|
|
63
|
+
// mis-spread key would let the guard fire → /allowedOrigins is empty/.
|
|
64
|
+
handle = await runDevApp({
|
|
65
|
+
features: [validFeature()],
|
|
66
|
+
port: 0,
|
|
67
|
+
auth: {
|
|
68
|
+
admin: ADMIN,
|
|
69
|
+
cookieDomain: "example.eu",
|
|
70
|
+
unsafeSkipOriginCheck: true,
|
|
71
|
+
},
|
|
72
|
+
});
|
|
73
|
+
expect(handle).toBeDefined();
|
|
74
|
+
});
|
|
59
75
|
});
|
package/src/schema-apply.ts
CHANGED
|
@@ -82,7 +82,7 @@ export async function runSchemaApply(opts: SchemaApplyOptions): Promise<number>
|
|
|
82
82
|
|
|
83
83
|
return 0;
|
|
84
84
|
} catch (e) {
|
|
85
|
-
console.error(`\n ✗ ${e instanceof Error ? e.message : String(e)}\n`);
|
|
85
|
+
console.error(`\n ✗ ${e instanceof Error ? (e.stack ?? e.message) : String(e)}\n`);
|
|
86
86
|
return 1;
|
|
87
87
|
} finally {
|
|
88
88
|
await close();
|