@getstrata/bootstrap 0.2.57 → 0.2.58
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4 -0
- package/README.md +1 -1
- package/dist/entries/createRoutes.js +2 -1
- package/dist/entries/schedule.js +2 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
package/README.md
CHANGED
|
@@ -32,7 +32,7 @@ import { createHttpKernel, createAppContext, coreProviders } from "@getstrata/bo
|
|
|
32
32
|
|
|
33
33
|
Sibling HTMX apps should bind `createCookieSessionAuthManager` from `@getstrata/bootstrap/web/session` instead of HMAC `SessionGuard`. Use `signIn` / `signOut` (or the redirect helpers) instead of calling `CookieSessionStore` from controllers. Pass `mapUser` to map roles in the app. Pass `loadSessionUser` when the default `learn_subscriber` / `is_admin` SELECT does not match your schema. WorkHub’s table is `sessions` (`0031_create_sessions`); its loader is `loadWorkhubSessionUser` (maps `users.role`, decrypts email). WorkHub web login itself stays on HMAC `SessionGuard`.
|
|
34
34
|
|
|
35
|
-
`wrapWeb` applies the web group (CSRF + flash) and `withErrorHandling`, so CSRF `ForbiddenError` becomes an HTML 403 in `FRONTEND_MODE=server-htmx`. `wrapWebLogin` / `wrapWebRegister` include that web group plus throttle — do not wrap them with `wrapWeb` again.
|
|
35
|
+
`wrapWeb` applies the web group (CSRF + flash) and `withErrorHandling`, so CSRF `ForbiddenError` becomes an HTML 403 in `FRONTEND_MODE=server-htmx`. `wrapWebLogin` / `wrapWebRegister` include that web group plus throttle — do not wrap them with `wrapWeb` again. The throttle callback should return an HTML form at 429 (WorkHub’s `/login` and `/register` do).
|
|
36
36
|
|
|
37
37
|
These subpaths remain WorkHub-oriented and are not a generic starter API: `@getstrata/bootstrap/createRoutes` (includes SCIM), `@getstrata/bootstrap/schedule`, and `@getstrata/bootstrap/createWebRoutes` (redirects `/` to `/organizations`).
|
|
38
38
|
|
|
@@ -32,7 +32,8 @@ function readFeatureFlags() {
|
|
|
32
32
|
siemExport: (process.env.FEATURE_SIEM_EXPORT ?? "true") !== "false",
|
|
33
33
|
publicReads: (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false",
|
|
34
34
|
emailVerification: (process.env.FEATURE_EMAIL_VERIFICATION ?? "false") === "true",
|
|
35
|
-
mfa: (process.env.FEATURE_MFA ?? "false") === "true"
|
|
35
|
+
mfa: (process.env.FEATURE_MFA ?? "false") === "true",
|
|
36
|
+
registration: (process.env.FEATURE_REGISTRATION ?? "true") !== "false"
|
|
36
37
|
};
|
|
37
38
|
}
|
|
38
39
|
var featureFlags = readFeatureFlags();
|
package/dist/entries/schedule.js
CHANGED
|
@@ -19,7 +19,8 @@ function readFeatureFlags() {
|
|
|
19
19
|
siemExport: (process.env.FEATURE_SIEM_EXPORT ?? "true") !== "false",
|
|
20
20
|
publicReads: (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false",
|
|
21
21
|
emailVerification: (process.env.FEATURE_EMAIL_VERIFICATION ?? "false") === "true",
|
|
22
|
-
mfa: (process.env.FEATURE_MFA ?? "false") === "true"
|
|
22
|
+
mfa: (process.env.FEATURE_MFA ?? "false") === "true",
|
|
23
|
+
registration: (process.env.FEATURE_REGISTRATION ?? "true") !== "false"
|
|
23
24
|
};
|
|
24
25
|
}
|
|
25
26
|
var featureFlags = readFeatureFlags();
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@getstrata/bootstrap",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.58",
|
|
4
4
|
"description": "Strata application bootstrap — HttpKernel, DI, web session helpers",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|
|
@@ -180,7 +180,7 @@
|
|
|
180
180
|
"access": "public"
|
|
181
181
|
},
|
|
182
182
|
"peerDependencies": {
|
|
183
|
-
"@getstrata/core": "^0.5.
|
|
183
|
+
"@getstrata/core": "^0.5.71",
|
|
184
184
|
"typescript": "^5.9.0"
|
|
185
185
|
}
|
|
186
186
|
}
|