@flowselections/floriday-authenticatie-module 1.0.65 → 1.0.68

package/dist-lib/lib/shell-routes.d.ts

@@ -15,6 +15,12 @@ export type ShellRoutesReport = {
     advice: string | null;
     error?: string;
 };
+/**
+ * Bediend = geen HTML en (geen 404, of 404 met onze JSON-weigering {ok:false}).
+ * webhook-in antwoordt bewust 404 {ok:false} zonder geldig token; dezelfde
+ * regel als probeWebhookCallbackBase in gateway/webhook-subscribe.ts.
+ */
+export declare function isServedRouteResponse(status: number, contentType: string, body: string): boolean;
 /** Controleert alle gateway-routes op `base` (standaard: shell-host uit Central Auth). */
 export declare function checkShellRoutes(opts?: {
     base?: string | null;

package/dist-lib/lib/shell-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell-routes.d.ts","sourceRoot":"","sources":["../../src/lib/shell-routes.ts"],"names":[],"mappings":"AAYA,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,wwBAsBvB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAyBF,0FAA0F;AAC1F,wBAAsB,gBAAgB,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4CvH;AAED,8FAA8F;AAC9F,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlH"}
+{"version":3,"file":"shell-routes.d.ts","sourceRoot":"","sources":["../../src/lib/shell-routes.ts"],"names":[],"mappings":"AAYA,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,wwBAsBvB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAKF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAShG;AAqBD,0FAA0F;AAC1F,wBAAsB,gBAAgB,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4CvH;AAED,8FAA8F;AAC9F,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlH"}

package/dist-lib/lib/shell-routes.js

@@ -35,6 +35,24 @@ export const SHELL_GATEWAY_ROUTES = [
 ];
 const TTL_MS = 5 * 60 * 1000;
 const cache = new Map();
+/**
+ * Bediend = geen HTML en (geen 404, of 404 met onze JSON-weigering {ok:false}).
+ * webhook-in antwoordt bewust 404 {ok:false} zonder geldig token; dezelfde
+ * regel als probeWebhookCallbackBase in gateway/webhook-subscribe.ts.
+ */
+export function isServedRouteResponse(status, contentType, body) {
+    if (contentType.includes("text/html"))
+        return false;
+    if (status !== 404)
+        return true;
+    try {
+        const j = JSON.parse(body);
+        return !!j && typeof j === "object" && j.ok === false;
+    }
+    catch {
+        return false;
+    }
+}
 async function probe(base, path) {
     try {
         const res = await fetch(`${base}${path}`, {
@@ -44,9 +62,8 @@ async function probe(base, path) {
             signal: AbortSignal.timeout(8000),
         });
         const ct = res.headers.get("content-type") ?? "";
-        await res.text().catch(() => "");
-        const isHtml = ct.includes("text/html");
-        if (res.status === 404 || isHtml) {
+        const body = await res.text().catch(() => "");
+        if (!isServedRouteResponse(res.status, ct, body)) {
             return { path, present: false, status: res.status, reason: "Shell kent deze route niet (404/website-pagina)" };
         }
         return { path, present: true, status: res.status, reason: null };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-authenticatie-module",
-  "version": "1.0.65",
+  "version": "1.0.68",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",