@heyatom/bastion-client 0.7.2 → 0.8.0

package/dist/esm/nest/request-context.d.ts

@@ -0,0 +1,10 @@
+/** Express/Fastify middleware: keeps the request reachable for the rest of its async chain. */
+export declare function requestContextMiddleware(req: {
+    id?: unknown;
+}, _res: unknown, next: () => void): void;
+/**
+ * The served request's own id, `req.id` as set by pino-http (`genReqId`, api.md §7):
+ * the default `requestId` of `BastionModule`. Read lazily, so the logger
+ * middleware may run before or after this one.
+ */
+export declare function currentRequestId(): string | undefined;

package/dist/esm/nest/request-context.js

@@ -0,0 +1,15 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+const store = new AsyncLocalStorage();
+/** Express/Fastify middleware: keeps the request reachable for the rest of its async chain. */
+export function requestContextMiddleware(req, _res, next) {
+    store.run(req, next);
+}
+/**
+ * The served request's own id, `req.id` as set by pino-http (`genReqId`, api.md §7):
+ * the default `requestId` of `BastionModule`. Read lazily, so the logger
+ * middleware may run before or after this one.
+ */
+export function currentRequestId() {
+    const id = store.getStore()?.id;
+    return typeof id === 'string' ? id : undefined;
+}

package/dist/esm/webhooks/index.d.ts

@@ -29,7 +29,8 @@ export interface VerifyWebhookOptions {
      * Accept the legacy body-only `X-Bastion-Signature` when v2 is absent.
      * Default `false`: legacy carries no timestamp or delivery id, so accepting
      * it lets anyone holding an old delivery replay it by stripping the v2
-     * header. Opt in only while migrating a consumer that cannot see v2 yet.
+     * header. Bastion no longer sends the legacy header, so there is nothing
+     * left to migrate: leave it off.
      */
     allowLegacySignature?: boolean;
     /** Max age of `t` on a v2 signature, default 300 s. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyatom/bastion-client",
-  "version": "0.7.2",
+  "version": "0.8.0",
   "description": "Consumer SDK for the Bastion identity provider: JWKS verification, service-client auth, audit writes, NestJS guards",
   "license": "MIT",
   "author": "Andrea Tombolato <hey@heyatom.dev> (https://heyatom.dev)",
@@ -10,7 +10,8 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "main": "./dist/cjs/core/index.js",
   "module": "./dist/esm/core/index.js",
@@ -60,7 +61,6 @@
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",
     "@nestjs/core": "^11.0.0",
-    "jose": "^6.0.0",
     "reflect-metadata": "^0.2.0",
     "rxjs": "^7.0.0"
   },