@hot-updater/cloudflare 0.36.1 → 0.36.2

package/worker/src/index.integration.spec.ts

@@ -4,6 +4,7 @@ import {
   type GetBundlesArgs,
   NIL_UUID,
 } from "@hot-updater/core";
+import { signToken } from "@hot-updater/js";
 import {
   setupBsdiffManifestUpdateInfoTestSuite,
   setupGetUpdateInfoTestSuite,
@@ -337,6 +338,24 @@ describe.sequential("cloudflare worker runtime acceptance", () => {
     });
   });
 
+  it("serves signed R2 URLs for percent-encoded object keys", async () => {
+    const encodedKey = "bundles/assets/bootsplash/logo-ios%402x.png";
+    await putR2Object(
+      "assets/bootsplash/logo-ios@2x.png",
+      "asset",
+      "text/plain",
+    );
+    const token = await signToken(encodedKey, env.JWT_SECRET);
+
+    const response = await worker.fetch(
+      new Request(`${PUBLIC_BASE_URL}/${encodedKey}?token=${token}`),
+      env,
+    );
+
+    expect(response.status).toBe(200);
+    await expect(response.text()).resolves.toBe("asset");
+  });
+
   it("does not support the legacy exact path", async () => {
     const response = await worker.fetch(
       new Request(`${PUBLIC_BASE_URL}${HOT_UPDATER_BASE_PATH}`),

package/worker/src/index.ts

@@ -1,3 +1,4 @@
+import { decodeStorageObjectKey } from "@hot-updater/plugin-core";
 import { createHotUpdater } from "@hot-updater/server";
 import { Hono } from "hono";
 
@@ -61,11 +62,11 @@ app.mount(
 
 app.get("*", async (c) => {
   const result = await verifyJwtSignedUrl({
-    path: c.req.path,
+    path: new URL(c.req.url).pathname,
     token: c.req.query("token"),
     jwtSecret: c.env.JWT_SECRET,
     handler: async (storageUri) => {
-      const [, ...key] = storageUri.split("/");
+      const [, ...key] = decodeStorageObjectKey(storageUri).split("/");
       const object = await c.env.BUCKET.get(key.join("/"));
       if (!object) {
         return null;