@experteam-mx/ngx-services 20.8.8 → 20.8.9

package/fesm2022/experteam-mx-ngx-services.mjs

@@ -5582,11 +5582,14 @@ var DocumentStatusCode;
     DocumentStatusCode[DocumentStatusCode["WITH_ERRORS"] = 3] = "WITH_ERRORS";
 })(DocumentStatusCode || (DocumentStatusCode = {}));
 
+const SOCKETS_AUTH_PATH = '/sockets/auth';
 class WebSocketsService {
     pusher = null;
     appKey = null;
     connectPromise = null;
     environments = inject(ENVIRONMENT_TOKEN);
+    getAuthToken = null;
+    channelAuthHeaders = {};
     /**
      * Stores the Pusher/Soketi application key without opening a connection.
      * The first `channelSub` / `eventBind` opens Pusher via `ensureConnected`.
@@ -5596,6 +5599,15 @@ class WebSocketsService {
     setAppKey(appKey) {
         this.appKey = appKey;
     }
+    /**
+     * Registers a live token provider used when authorizing private/presence channels.
+     * The provider is called at subscribe/authorize time; the token is not snapshotted here.
+     *
+     * @param {() => string | null} getToken - Returns the current session token, or null.
+     */
+    setAuthTokenProvider(getToken) {
+        this.getAuthToken = getToken;
+    }
     /**
      * Connects to Pusher using the given app key and env `sockets` url/port/debug.
      * No-ops if already connected with the same key; reconnects if the key changed.
@@ -5618,13 +5630,27 @@ class WebSocketsService {
                 this.pusher.disconnect();
                 this.pusher = null;
             }
-            const pusher = new Pusher(appKey, {
+            const options = {
                 wsHost: sockets.url,
                 wsPort: sockets.port,
                 enabledTransports: ['wss', 'ws'],
                 forceTLS: false,
                 enableStats: false,
-            });
+            };
+            const { apiSecurityUrl } = this.environments;
+            if (apiSecurityUrl) {
+                this.refreshChannelAuthHeader();
+                options.channelAuthorization = {
+                    transport: 'ajax',
+                    endpoint: `${apiSecurityUrl}${SOCKETS_AUTH_PATH}`,
+                    headers: this.channelAuthHeaders,
+                    headersProvider: () => {
+                        this.refreshChannelAuthHeader();
+                        return this.channelAuthHeaders;
+                    },
+                };
+            }
+            const pusher = new Pusher(appKey, options);
             if (sockets.debug) {
                 Pusher.logToConsole = true;
             }
@@ -5653,12 +5679,14 @@ class WebSocketsService {
      */
     async channelSub(channelName) {
         const pusher = await this.ensureConnected();
+        this.refreshChannelAuthHeader();
         const attempts = 3;
         for (let attempt = 0; attempt <= attempts; attempt++) {
             const channel = pusher.channel(channelName);
             if (channel?.subscribed) {
                 return channel;
             }
+            this.refreshChannelAuthHeader();
             pusher.subscribe(channelName);
             if (attempt < attempts) {
                 await this.wait();
@@ -5679,6 +5707,7 @@ class WebSocketsService {
             void (async () => {
                 try {
                     const pusher = await this.ensureConnected();
+                    this.refreshChannelAuthHeader();
                     if (channel?.name) {
                         channel.bind(event, (data) => subscriber.next(data));
                     }
@@ -5723,6 +5752,15 @@ class WebSocketsService {
             throw error;
         }
     }
+    refreshChannelAuthHeader() {
+        const token = this.getAuthToken?.() ?? null;
+        if (token) {
+            this.channelAuthHeaders['Authorization'] = `Bearer ${token}`;
+        }
+        else {
+            delete this.channelAuthHeaders['Authorization'];
+        }
+    }
     async wait() {
         const waitTime = 3 * 1000;
         return new Promise((resolve) => setTimeout(resolve, waitTime));