@guardian/pan-domain-node 1.1.0 → 1.2.2

package/.github/workflows/check-labels.yaml

@@ -0,0 +1,9 @@
+name: CORE4 label enforcement
+permissions:
+  contents: read
+on:
+  pull_request:
+    types: [opened, labeled, unlabeled, synchronize, reopened, edited]
+jobs:
+  require-label:
+    uses: guardian/.github/.github/workflows/require-label.yaml@4cb5024736632ffcc564b7f4b772c38b8e5ce739 #  v2.0.0

package/.github/workflows/node-release.yml

@@ -22,6 +22,11 @@ jobs:
           cache: npm
           cache-dependency-path: "package-lock.json"
 
+      # See https://docs.npmjs.com/trusted-publishers
+      # Find the latest version with `npm info npm@latest version`
+      - name: Install suitable NPM version for trusted publishing
+        run: npm install -g npm@11.10.1
+
       - name: Install
         run: npm ci
 
@@ -54,4 +59,3 @@ jobs:
 
         env:
           GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @guardian/pan-domain-node
 
+## 1.2.2
+
+### Patch Changes
+
+- 567436a: no-op release to test migration to NPM trusted publishing #2
+
+## 1.2.1
+
+### Patch Changes
+
+- 502bbd5: no-op release to test migration to NPM trusted publishing
+
+## 1.2.0
+
+### Minor Changes
+
+- 5c14027: Fix app crash with no cookie value
+
 ## 1.1.0
 
 ### Minor Changes

package/dist/src/panda.d.ts

@@ -17,5 +17,5 @@ export declare class PanDomainAuthentication {
     constructor(cookieName: string, region: string, bucket: string, keyFile: string, validateUser: ValidateUserFn, credentialsProvider?: AwsCredentialIdentityProvider);
     stop(): void;
     getPublicKey(): Promise<string>;
-    verify(requestCookies: string): Promise<AuthenticationResult>;
+    verify(requestCookies: string | undefined): Promise<AuthenticationResult>;
 }

package/dist/src/panda.js

@@ -157,7 +157,7 @@ class PanDomainAuthentication {
     }
     verify(requestCookies) {
         return this.getPublicKey().then(publicKey => {
-            const cookies = cookie.parse(requestCookies);
+            const cookies = cookie.parse(requestCookies !== null && requestCookies !== void 0 ? requestCookies : '');
             const pandaCookie = cookies[this.cookieName];
             return verifyUser(pandaCookie, publicKey, new Date(), this.validateUser);
         });

package/dist/test/panda.test.js

@@ -283,5 +283,16 @@ describe('panda class', function () {
             };
             expect(authenticationResult).toStrictEqual(expected);
         }));
+        it('should fail to authenticate with no-cookie reason if no cookie is present at all', () => __awaiter(this, void 0, void 0, function* () {
+            jest.setSystemTime(100);
+            const panda = new panda_1.PanDomainAuthentication('rightcookiename', 'region', 'bucket', 'keyfile', api_1.guardianValidation);
+            const noCookie = undefined;
+            const authenticationResult = yield panda.verify(noCookie);
+            const expected = {
+                success: false,
+                reason: "no-cookie"
+            };
+            expect(authenticationResult).toStrictEqual(expected);
+        }));
     });
 });

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@guardian/pan-domain-node",
-  "version": "1.1.0",
+  "version": "1.2.2",
   "description": "NodeJs implementation of Guardian pan-domain auth verification",
   "main": "dist/src/api.js",
   "types": "dist/src/api.d.ts",
   "repository": {
     "type": "git",
-    "url": "https://github.com/guardian/pan-domain-authentication.git"
+    "url": "git+https://github.com/guardian/pan-domain-node.git"
   },
   "keywords": [
     "auth",

package/src/panda.ts

@@ -146,9 +146,9 @@ export class PanDomainAuthentication {
         });
     }
 
-    verify(requestCookies: string): Promise<AuthenticationResult> {
+    verify(requestCookies: string | undefined): Promise<AuthenticationResult> {
         return this.getPublicKey().then(publicKey => {
-            const cookies = cookie.parse(requestCookies);
+            const cookies = cookie.parse(requestCookies ?? '');
             const pandaCookie = cookies[this.cookieName];
             return verifyUser(pandaCookie, publicKey, new Date(), this.validateUser);
         });

package/test/panda.test.ts

@@ -349,6 +349,20 @@ describe('panda class', function () {
       };
       expect(authenticationResult).toStrictEqual(expected);
     });
+
+    it('should fail to authenticate with no-cookie reason if no cookie is present at all', async () => {
+      jest.setSystemTime(100);
+
+      const panda = new PanDomainAuthentication('rightcookiename', 'region', 'bucket', 'keyfile', guardianValidation);
+      const noCookie = undefined;
+      const authenticationResult = await panda.verify(noCookie);
+
+      const expected: CookieFailure = {
+        success: false,
+        reason: "no-cookie"
+      };
+      expect(authenticationResult).toStrictEqual(expected);
+    });
   });
 
 });