@friggframework/core 2.0.0--canary.540.c5ef83f.0 → 2.0.0--canary.540.9264ad8.0

package/handlers/app-handler-helpers.js

@@ -32,19 +32,7 @@ const createApp = (applyMiddleware) => {
             flushDebugLog(boomError);
             res.status(statusCode).json({ error: 'Internal Server Error' });
         } else {
-            try {
-                const allHeaders = Object.entries(req.headers).reduce((acc, [key, value]) => {
-                    if (key === 'x-frigg-api-key' || key === 'authorization') {
-                        acc[key] = `${String(value).substring(0, 6)}...(redacted)`;
-                    } else {
-                        acc[key] = value;
-                    }
-                    return acc;
-                }, {});
-                console.warn(`[Frigg] ${req.method} ${req.path} -> ${statusCode}: ${err.message}`, JSON.stringify({ headers: allHeaders }));
-            } catch (logErr) {
-                console.warn(`[Frigg] ${req.method} ${req.path} -> ${statusCode}: ${err.message} (header logging failed: ${logErr.message})`);
-            }
+            console.warn(`[Frigg] ${req.method} ${req.path} -> ${statusCode}: ${err.message}`);
             res.status(statusCode).json({ error: err.message });
         }
     });

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@friggframework/core",
     "prettier": "@friggframework/prettier-config",
-    "version": "2.0.0--canary.540.c5ef83f.0",
+    "version": "2.0.0--canary.540.9264ad8.0",
     "dependencies": {
         "@aws-sdk/client-apigatewaymanagementapi": "^3.588.0",
         "@aws-sdk/client-kms": "^3.588.0",
@@ -38,9 +38,9 @@
         }
     },
     "devDependencies": {
-        "@friggframework/eslint-config": "2.0.0--canary.540.c5ef83f.0",
-        "@friggframework/prettier-config": "2.0.0--canary.540.c5ef83f.0",
-        "@friggframework/test": "2.0.0--canary.540.c5ef83f.0",
+        "@friggframework/eslint-config": "2.0.0--canary.540.9264ad8.0",
+        "@friggframework/prettier-config": "2.0.0--canary.540.9264ad8.0",
+        "@friggframework/test": "2.0.0--canary.540.9264ad8.0",
         "@prisma/client": "^6.17.0",
         "@types/lodash": "4.17.15",
         "@typescript-eslint/eslint-plugin": "^8.0.0",
@@ -80,5 +80,5 @@
     "publishConfig": {
         "access": "public"
     },
-    "gitHead": "c5ef83fae0876e66e46a74a0950750c742f0ceae"
+    "gitHead": "9264ad8042a5d4d7bb45dd30d5c7a2d39583c66c"
 }

package/user/use-cases/authenticate-user.js

@@ -2,12 +2,12 @@ const Boom = require('@hapi/boom');
 
 /**
  * Use case for authenticating a user using multiple authentication strategies.
- * 
+ *
  * Supports three authentication modes in priority order:
  * 1. Shared Secret (backend-to-backend with x-frigg-api-key + x-frigg headers)
  * 2. Adopter JWT (custom JWT authentication)
  * 3. Frigg Native Token (bearer token from /user/login)
- * 
+ *
  * x-frigg-appUserId and x-frigg-appOrgId headers are automatically supported
  * for user identification with any auth mode. When present with JWT or Frigg
  * tokens, they are validated to match the authenticated user.
@@ -50,29 +50,18 @@ class AuthenticateUser {
         const authModes = this.userConfig.authModes || { friggToken: true };
         const appUserId = req.headers['x-frigg-appuserid'];
         const appOrgId = req.headers['x-frigg-apporgid'];
-        let user = null;
-
-        // DEBUG: Log ALL request headers to catch misspellings
-        const allHeaders = Object.entries(req.headers).reduce((acc, [key, value]) => {
-            if (key === 'x-frigg-api-key' || key === 'authorization') {
-                acc[key] = `${String(value).substring(0, 6)}...(redacted)`;
-            } else {
-                acc[key] = value;
-            }
-            return acc;
-        }, {});
-        console.log(`[Frigg][DEBUG] ${req.method} ${req.path} - ALL headers:`, JSON.stringify(allHeaders));
-        console.log(`[Frigg][DEBUG] Parsed auth values:`, JSON.stringify({
-            appUserId: appUserId ?? '(undefined)',
-            appOrgId: appOrgId ?? '(undefined)',
-            enabledAuthModes: authModes,
-        }));
+        console.log(
+            '[Frigg] header list:',
+            JSON.stringify(Object.keys(req.headers))
+        );
 
         // Priority 1: Shared Secret (backend-to-backend with API key)
         if (authModes.sharedSecret !== false) {
             const apiKey = req.headers['x-frigg-api-key'];
             if (apiKey) {
-                console.log(`[Frigg][DEBUG] Taking shared secret auth path`);
+                console.log(
+                    '[Frigg] Attempting shared secret authentication with API key'
+                );
                 // Validate the API key (authentication)
                 await this.authenticateWithSharedSecret.execute(apiKey);
                 // Get user from x-frigg headers (authorization)
@@ -81,6 +70,9 @@ class AuthenticateUser {
                     appOrgId
                 );
             }
+            console.log(
+                '[Frigg] No x-frigg-api-key header found, skipping shared secret authentication'
+            );
         }
 
         // Priority 2: Adopter JWT (if enabled)
@@ -88,10 +80,11 @@ class AuthenticateUser {
             authModes.adopterJwt === true &&
             req.headers.authorization?.startsWith('Bearer ')
         ) {
+            console.log('[Frigg] Attempting Adopter JWT authentication');
             const token = req.headers.authorization.split(' ')[1];
             // Detect JWT format (3 parts separated by dots)
             if (token && token.split('.').length === 3) {
-                user = await this.getUserFromAdopterJwt.execute(token);
+                const user = await this.getUserFromAdopterJwt.execute(token);
                 // Validate x-frigg headers match JWT claims if present
                 if (appUserId || appOrgId) {
                     this.validateUserMatch(user, appUserId, appOrgId);
@@ -102,7 +95,8 @@ class AuthenticateUser {
 
         // Priority 3: Frigg native token (default)
         if (authModes.friggToken !== false && req.headers.authorization) {
-            user = await this.getUserFromBearerToken.execute(
+            console.log('[Frigg] Attempting Frigg native token authentication');
+            const user = await this.getUserFromBearerToken.execute(
                 req.headers.authorization
             );
             // Validate x-frigg headers match token user if present
@@ -140,5 +134,3 @@ class AuthenticateUser {
 }
 
 module.exports = { AuthenticateUser };
-
-

package/user/use-cases/get-user-from-x-frigg-headers.js

@@ -28,15 +28,6 @@ class GetUserFromXFriggHeaders {
      * @throws {Boom} 400 Bad Request if neither ID is provided or if both IDs are provided but belong to different users.
      */
     async execute(appUserId, appOrgId) {
-        console.log(`[Frigg][DEBUG] getUserFromXFriggHeaders called with:`, JSON.stringify({
-            appUserId: appUserId || '(falsy)',
-            appOrgId: appOrgId || '(falsy)',
-            appUserIdType: typeof appUserId,
-            appOrgIdType: typeof appOrgId,
-            individualUserRequired: this.userConfig.individualUserRequired,
-            organizationUserRequired: this.userConfig.organizationUserRequired,
-        }));
-
         // At least one header must be provided
         if (!appUserId && !appOrgId) {
             throw Boom.badRequest(