@crvouga/mockingbird-service-fcm 2.10.5 → 2.10.7

package/dist/admin.js

@@ -1,6 +1,6 @@
 import {
   fcmCredential
-} from "./chunk-7FHD4M64.js";
+} from "./chunk-H2HUYYC3.js";
 
 // src/admin.ts
 import { Agent, createServer } from "node:https";

package/dist/{chunk-VNYD5QSJ.js → chunk-A5MO4ZGW.js}

@@ -9,7 +9,7 @@ import {
   parseFaultHeader,
   resolveAdminPrefix,
   restoreClock
-} from "./chunk-7FHD4M64.js";
+} from "./chunk-H2HUYYC3.js";
 
 // ../../adapters/node/dist/cli.js
 import { readFile as readFile5 } from "node:fs/promises";
@@ -3057,7 +3057,7 @@ async function preflightFleet(config, options) {
             break;
         }
       }
-      targets.set(name, { ...target, packageVersion: packageVersion ?? "2.10.5" });
+      targets.set(name, { ...target, packageVersion: packageVersion ?? "2.10.7" });
     } catch (error) {
       throw new Error(`service ${name}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
@@ -5025,4 +5025,4 @@ export {
   createServer2 as createServer,
   serveTarget
 };
-//# sourceMappingURL=chunk-VNYD5QSJ.js.map
+//# sourceMappingURL=chunk-A5MO4ZGW.js.map

package/dist/{chunk-7FHD4M64.js → chunk-H2HUYYC3.js}

@@ -2666,6 +2666,17 @@ var createNamespaceControls = (options) => {
   };
 };
 
+// ../core/dist/signing.js
+var encoder = new TextEncoder();
+var timingSafeEqual = (a, b) => {
+  if (a.length !== b.length)
+    return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++)
+    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+};
+
 // ../core/dist/surface.js
 var defineMock = (runtime) => runtime;
 var ADMIN_ROUTE_REFERENCE = {
@@ -2784,6 +2795,10 @@ var assertAdminPrefixAvailable = (prefix, paths) => {
   }
 };
 var ADMIN_KEY_HEADER = CONTROL_HEADERS.adminKey;
+var hasAdminKey = (headers, adminKey) => {
+  const sent = headers.get(ADMIN_KEY_HEADER);
+  return sent !== null && timingSafeEqual(sent, adminKey);
+};
 var NAMESPACE_HEADER = CONTROL_HEADERS.namespace;
 var ADMIN_DOCS_URL = "https://mockingbird.chrisvouga.dev/docs/admin-controls";
 var ADMIN_CONTROL_PAGES = [
@@ -3257,7 +3272,7 @@ var createControlPlane = (context) => {
       }
       const path = url.pathname.slice(adminPrefix.length) || "/";
       const shell = request.method === "GET" && (path === "/ui" || path === "/ui/");
-      if (!shell && context.adminKey !== void 0 && request.headers.get(ADMIN_KEY_HEADER) !== context.adminKey) {
+      if (!shell && context.adminKey !== void 0 && !hasAdminKey(request.headers, context.adminKey)) {
         return adminError(401, `missing or wrong ${ADMIN_KEY_HEADER}`);
       }
       for (const route of routes) {
@@ -4025,7 +4040,7 @@ var stateAdminRoutes = (routes) => {
 };
 
 // ../core/dist/version.js
-var PACKAGE_VERSION = true ? "2.10.5" : UNRELEASED_VERSION;
+var PACKAGE_VERSION = true ? "2.10.7" : UNRELEASED_VERSION;
 
 // ../core/dist/webhooks.js
 var json4 = (status, body) => new Response(JSON.stringify(body), {
@@ -5006,7 +5021,7 @@ var createRuntime = (options) => {
         throw error;
       }
       const rewinds = at !== void 0 && selectedBranch === "main" && MUTATING_METHODS.has(request.method);
-      if ((requested || rewinds) && options.adminKey !== void 0 && request.headers.get(ADMIN_KEY_HEADER) !== options.adminKey)
+      if ((requested || rewinds) && options.adminKey !== void 0 && !hasAdminKey(request.headers, options.adminKey))
         return refuse(401, `control headers need ${ADMIN_KEY_HEADER}`);
       controls.ensure(namespace);
       if (requested?.restore !== void 0 && !snapshotStore.get(namespace, requested.restore))
@@ -6155,4 +6170,4 @@ export {
   fcmCredential,
   FcmAPI
 };
-//# sourceMappingURL=chunk-7FHD4M64.js.map
+//# sourceMappingURL=chunk-H2HUYYC3.js.map