@djangocfg/centrifugo 2.1.224 → 2.1.226

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/centrifugo",
-  "version": "2.1.224",
+  "version": "2.1.226",
   "description": "Production-ready Centrifugo WebSocket client for React with real-time subscriptions, RPC patterns, and connection state management",
   "keywords": [
     "centrifugo",
@@ -63,10 +63,10 @@
     "centrifuge": "^5.2.2"
   },
   "peerDependencies": {
-    "@djangocfg/api": "^2.1.224",
-    "@djangocfg/i18n": "^2.1.224",
-    "@djangocfg/ui-core": "^2.1.224",
-    "@djangocfg/ui-tools": "^2.1.224",
+    "@djangocfg/api": "^2.1.226",
+    "@djangocfg/i18n": "^2.1.226",
+    "@djangocfg/ui-core": "^2.1.226",
+    "@djangocfg/ui-tools": "^2.1.226",
     "consola": "^3.4.2",
     "lucide-react": "^0.545.0",
     "moment": "^2.30.1",
@@ -74,11 +74,11 @@
     "react-dom": "^19.1.0"
   },
   "devDependencies": {
-    "@djangocfg/api": "^2.1.224",
-    "@djangocfg/i18n": "^2.1.224",
-    "@djangocfg/typescript-config": "^2.1.224",
-    "@djangocfg/ui-core": "^2.1.224",
-    "@djangocfg/ui-tools": "^2.1.224",
+    "@djangocfg/api": "^2.1.226",
+    "@djangocfg/i18n": "^2.1.226",
+    "@djangocfg/typescript-config": "^2.1.226",
+    "@djangocfg/ui-core": "^2.1.226",
+    "@djangocfg/ui-tools": "^2.1.226",
     "@types/node": "^24.7.2",
     "@types/react": "^19.1.0",
     "@types/react-dom": "^19.1.0",

package/src/core/utils/resolveWsUrl.ts

@@ -0,0 +1,108 @@
+/**
+ * Resolve Centrifugo WebSocket URL.
+ *
+ * Priority:
+ * 1. Explicit `url` prop passed to CentrifugoProvider
+ * 2. `centrifugo_url` from JWT token (set by Django backend — correct for prod)
+ * 3. `NEXT_PUBLIC_CENTRIFUGO_URL` env var
+ * 4. Auto-derive from `NEXT_PUBLIC_API_URL` in dev (http://host → ws://host:8120)
+ * 5. '' — disabled, no connection attempted
+ *
+ * Prod safety: if resolved URL contains `localhost` or `127.0.0.1`, treat as
+ * disabled in production builds — Centrifugo is never on localhost in prod.
+ */
+
+const CENTRIFUGO_WS_PATH = '/connection/websocket';
+const DEV_CENTRIFUGO_PORT = '8120';
+
+/** Convert http(s):// API URL to ws(s):// Centrifugo URL on the dev port. */
+function deriveWsUrlFromApiUrl(apiUrl: string): string {
+  try {
+    const u = new URL(apiUrl);
+    const wsProto = u.protocol === 'https:' ? 'wss:' : 'ws:';
+    u.protocol = wsProto;
+    u.port = DEV_CENTRIFUGO_PORT;
+    u.pathname = CENTRIFUGO_WS_PATH;
+    return u.toString();
+  } catch {
+    return '';
+  }
+}
+
+/** True if URL points to localhost — not valid in production. */
+function isLocalhost(url: string): boolean {
+  try {
+    const { hostname } = new URL(url);
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1';
+  } catch {
+    return false;
+  }
+}
+
+export interface ResolveWsUrlOptions {
+  /** Explicit URL from CentrifugoProvider props. Highest priority. */
+  urlProp?: string;
+  /** centrifugo_url from JWT token payload (set by Django). */
+  tokenUrl?: string;
+  /** NODE_ENV — pass `process.env.NODE_ENV`. */
+  nodeEnv?: string;
+  /** NEXT_PUBLIC_CENTRIFUGO_URL — pass `process.env.NEXT_PUBLIC_CENTRIFUGO_URL`. */
+  envCentrifugoUrl?: string;
+  /** NEXT_PUBLIC_API_URL — used for dev auto-derive. */
+  envApiUrl?: string;
+}
+
+export interface ResolvedWsUrl {
+  /** Final WebSocket URL to connect to, or '' if disabled. */
+  url: string;
+  /** Whether to attempt connection at all. False = disabled cleanly, no retries. */
+  enabled: boolean;
+  /** How the URL was resolved — useful for debug logging. */
+  source: 'prop' | 'token' | 'env' | 'derived' | 'disabled';
+}
+
+export function resolveWsUrl({
+  urlProp,
+  tokenUrl,
+  nodeEnv,
+  envCentrifugoUrl,
+  envApiUrl,
+}: ResolveWsUrlOptions): ResolvedWsUrl {
+  const isDev = nodeEnv === 'development';
+  const isProd = !isDev;
+
+  // 1. Explicit prop
+  if (urlProp) {
+    if (isProd && isLocalhost(urlProp)) {
+      return { url: '', enabled: false, source: 'disabled' };
+    }
+    return { url: urlProp, enabled: true, source: 'prop' };
+  }
+
+  // 2. JWT token url (Django sends this for authenticated users)
+  if (tokenUrl) {
+    if (isProd && isLocalhost(tokenUrl)) {
+      return { url: '', enabled: false, source: 'disabled' };
+    }
+    return { url: tokenUrl, enabled: true, source: 'token' };
+  }
+
+  // 3. Env var NEXT_PUBLIC_CENTRIFUGO_URL
+  if (envCentrifugoUrl) {
+    if (isProd && isLocalhost(envCentrifugoUrl)) {
+      return { url: '', enabled: false, source: 'disabled' };
+    }
+    return { url: envCentrifugoUrl, enabled: true, source: 'env' };
+  }
+
+  // 4. Dev only: auto-derive from API URL
+  if (isDev && envApiUrl) {
+    const derived = deriveWsUrlFromApiUrl(envApiUrl);
+    if (derived) {
+      return { url: derived, enabled: true, source: 'derived' };
+    }
+  }
+
+  // 5. Nothing resolved — disable cleanly
+  return { url: '', enabled: false, source: 'disabled' };
+}

package/src/index.ts

@@ -116,6 +116,9 @@ export { useCodegenTip } from './hooks/useCodegenTip';
 export { centrifugoConfig, isDevelopment, isProduction, isStaticBuild } from './config';
 export type { CentrifugoConfig } from './config';
 
+export { resolveWsUrl } from './core/utils/resolveWsUrl';
+export type { ResolveWsUrlOptions, ResolvedWsUrl } from './core/utils/resolveWsUrl';
+
 // ─────────────────────────────────────────────────────────────────────────
 // Errors
 // ─────────────────────────────────────────────────────────────────────────

package/src/providers/CentrifugoProvider/CentrifugoProvider.tsx

@@ -17,6 +17,7 @@ import {
     CentrifugoMonitorDialog
 } from '../../components/CentrifugoMonitor/CentrifugoMonitorDialog';
 import { isDevelopment, reconnectConfig } from '../../config';
+import { resolveWsUrl } from '../../core/utils/resolveWsUrl';
 import { CentrifugoRPCClient } from '../../core/client';
 import { getConsolaLogger } from '../../core/logger/consolaLogger';
 import { useCodegenTip } from '../../hooks/useCodegenTip';
@@ -138,16 +139,19 @@ function CentrifugoProviderInner({
     return delay;
   }, []);
 
-  const wsUrl = useMemo(() => {
-    if (url) return url;
-    if (centrifugoToken?.centrifugo_url) return centrifugoToken.centrifugo_url;
-    return '';
-  }, [url, centrifugoToken?.centrifugo_url]);
+  const { url: wsUrl, enabled: wsEnabled, source: wsSource } = useMemo(() => resolveWsUrl({
+    urlProp: url,
+    tokenUrl: centrifugoToken?.centrifugo_url,
+    nodeEnv: process.env.NODE_ENV,
+    envCentrifugoUrl: process.env.NEXT_PUBLIC_CENTRIFUGO_URL,
+    envApiUrl: process.env.NEXT_PUBLIC_API_URL,
+  }), [url, centrifugoToken?.centrifugo_url]);
 
   const autoConnect = autoConnectProp &&
                       (isAuthenticated && !isLoading) &&
                       enabled &&
-                      hasCentrifugoToken;
+                      hasCentrifugoToken &&
+                      wsEnabled;
 
   // Log connection decision
   useEffect(() => {
@@ -158,6 +162,8 @@ function CentrifugoProviderInner({
         enabled,
         hasToken: hasCentrifugoToken,
         url: wsUrl,
+        urlSource: wsSource,
+        wsEnabled,
       });
     }
   }, [autoConnect, isAuthenticated, isLoading, enabled, hasCentrifugoToken, logger, wsUrl]);
@@ -316,12 +322,13 @@ function CentrifugoProviderInner({
       reconnectStoppedRef.current = false;
     } catch (err) {
       const error = err instanceof Error ? err : new Error('Connection failed');
+      hasConnectedRef.current = false;
+      isConnectingRef.current = false;
+      if (!isMountedRef.current) return;
       setError(error);
       setClient(null);
       setIsConnected(false);
       setConnectionTime(null);
-      hasConnectedRef.current = false;
-      isConnectingRef.current = false;
 
       const isAuthError = error.message.includes('token') ||
                           error.message.includes('auth') ||
@@ -363,7 +370,9 @@ function CentrifugoProviderInner({
           }
 
           reconnectTimeoutRef.current = setTimeout(() => {
-            connectRef.current?.();
+            if (isMountedRef.current) {
+              connectRef.current?.();
+            }
           }, delay);
         } else {
           // Max attempts reached - stop reconnecting
@@ -372,7 +381,10 @@ function CentrifugoProviderInner({
         }
       }
     } finally {
-      setIsConnecting(false);
+      isConnectingRef.current = false;
+      if (isMountedRef.current) {
+        setIsConnecting(false);
+      }
     }
   }, [wsUrl, centrifugoToken, user, logger, isConnecting, isConnected, getReconnectDelay, onTokenRefresh]);