@getstrata/core 0.5.65 → 0.5.66

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @getstrata/core changelog
 
+## 0.5.66
+
+- `createValidateSignatureMiddleware()` on `@getstrata/core/http/signedUrl` is Laravel’s `signed` / `ValidateSignature` middleware. Invalid or expired links throw `ForbiddenError`.
+
 ## 0.5.65
 
 - Identity helpers on `@getstrata/core/runtime/appKeyPrefix` (`smtpEhloHost`, `siemEventType`, `appUserAgent`, `otelServiceName`, `appDisplayName`, `webhookSignatureHeader`) so sibling apps are not stuck with WorkHub SMTP/SIEM/OTEL/OAuth names.

package/README.md

@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
 Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
 
 1. Add `NPM_TOKEN` to GitHub repository secrets.
-2. Tag a release: `git tag v0.5.67 && git push origin v0.5.67`
+2. Tag a release: `git tag v0.5.68 && git push origin v0.5.68`
 3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
 
 Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.

package/dist/core/http/signedUrl.d.ts

@@ -1,3 +1,4 @@
+import type { Middleware } from "./middleware";
 interface TemporarySignedUrlOptions {
     expiresInSeconds?: number;
     query?: Record<string, string | number>;
@@ -7,5 +8,6 @@ declare function temporarySignedUrl(path: string, expiresInSeconds: number, quer
 declare function absoluteTemporarySignedUrl(path: string, expiresInSeconds: number, query?: Record<string, string | number>, origin?: string): string;
 declare function hasValidSignature(input: Request | URL | string): boolean;
 declare function assertValidSignature(input: Request | URL | string): void;
+declare function createValidateSignatureMiddleware(): Middleware;
 export type { TemporarySignedUrlOptions };
-export { absoluteTemporarySignedUrl, assertValidSignature, hasValidSignature, signedUrl, temporarySignedUrl, };
+export { absoluteTemporarySignedUrl, assertValidSignature, createValidateSignatureMiddleware, hasValidSignature, signedUrl, temporarySignedUrl, };

package/dist/entries/http/signedUrl.js

@@ -88,9 +88,16 @@ function assertValidSignature(input) {
     throw new ForbiddenError("Invalid or expired signed URL.");
   }
 }
+function createValidateSignatureMiddleware() {
+  return async (request, next) => {
+    assertValidSignature(request);
+    return await next();
+  };
+}
 export {
   absoluteTemporarySignedUrl,
   assertValidSignature,
+  createValidateSignatureMiddleware,
   hasValidSignature,
   signedUrl,
   temporarySignedUrl

package/dist/framework/public-api.d.ts

@@ -83,7 +83,7 @@ export type { RouteRequest } from "../core/http/route.ts";
 export { loginRedirectLocation, safeInternalRedirectPath, sanitizeInternalPath, } from "../core/http/safeInternalPath.ts";
 export { createScimThrottleMiddleware } from "../core/http/scimThrottleMiddleware.ts";
 export { createSecurityHeadersMiddleware } from "../core/http/securityHeadersMiddleware.ts";
-export { absoluteTemporarySignedUrl, assertValidSignature, hasValidSignature, signedUrl, temporarySignedUrl, } from "../core/http/signedUrl.ts";
+export { absoluteTemporarySignedUrl, assertValidSignature, createValidateSignatureMiddleware, hasValidSignature, signedUrl, temporarySignedUrl, } from "../core/http/signedUrl.ts";
 export { createThrottleMiddleware } from "../core/http/throttleMiddleware.ts";
 export { WebFormRequest } from "../core/http/webFormRequest.ts";
 export { installGracefulShutdownSignals, registerShutdownHandler, runGracefulShutdown, } from "../core/lifecycle/gracefulShutdown.ts";

package/dist/index.js

@@ -5790,6 +5790,12 @@ function assertValidSignature(input) {
     throw new ForbiddenError("Invalid or expired signed URL.");
   }
 }
+function createValidateSignatureMiddleware() {
+  return async (request, next) => {
+    assertValidSignature(request);
+    return await next();
+  };
+}
 // ../../src/core/http/throttleMiddleware.ts
 var {RedisClient: RedisClient4 } = globalThis.Bun;
 function resolveThrottleIdentity(request) {
@@ -7223,6 +7229,7 @@ export {
   createThrottleMiddleware,
   createTracingMiddleware,
   createTrackedJob,
+  createValidateSignatureMiddleware,
   createdResponse,
   currentAuthUser,
   currentOrgRole,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "0.5.65",
+  "version": "0.5.66",
   "description": "Strata — Laravel-inspired Bun framework public API",
   "type": "module",
   "license": "MIT",