@jskit-ai/realtime 0.1.213 → 0.1.214

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/realtime",
-  "version": "0.1.213",
+  "version": "0.1.214",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -20,8 +20,8 @@
     "socket.io-client": "^4.8.3"
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.216",
-    "@jskit-ai/shell-web": "0.1.220",
+    "@jskit-ai/kernel": "0.1.217",
+    "@jskit-ai/shell-web": "0.1.221",
     "vue": "^3.5.13"
   },
   "description": "Thin, generic realtime runtime wrappers for socket.io server and client.",

package/patterns/realtime-application/example/package.json

@@ -2,7 +2,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/realtime": "0.1.213",
-    "@jskit-ai/shell-web": "0.1.220"
+    "@jskit-ai/realtime": "0.1.214",
+    "@jskit-ai/shell-web": "0.1.221"
   }
 }

package/src/server/realtimeAudience.js

@@ -193,8 +193,14 @@ async function resolveSocketActor(authService, socket) {
   const request = {
     cookies: parseCookieHeader(handshakeHeaders.cookie || requestHeaders.cookie)
   };
-  if (host) request.headers = { host };
-  if (remoteAddress) request.socket = { remoteAddress };
+  const headers = host ? { host } : {};
+  for (const name of ["origin", "x-forwarded-proto"]) {
+    const value = handshakeHeaders[name] ?? requestHeaders[name];
+    if (value !== undefined) headers[name] = value;
+  }
+  if (Object.keys(headers).length > 0) request.headers = headers;
+  request.socket = { encrypted: socket?.request?.socket?.encrypted === true };
+  if (remoteAddress) request.socket.remoteAddress = remoteAddress;
   const result = await authService.authenticateRequest(request);
   const id = result?.authenticated === true
     ? normalizeRecordId(result?.actor?.id, { fallback: null }) : null;

package/test/providerRuntime.test.js

@@ -177,16 +177,21 @@ test("socket audience bootstrap authenticates explicitly and joins actor workspa
   });
   const joinedRooms = [];
   const socket = {
-    handshake: { headers: { cookie: "session=abc123; theme=dark", host: "127.0.0.1:3100" } },
-    request: { headers: {}, socket: { remoteAddress: "127.0.0.1" } },
+    handshake: { headers: {
+      cookie: "session=abc123; theme=dark", host: "127.0.0.1:3100",
+      origin: "https://127.0.0.1:3100", "x-forwarded-proto": "https"
+    } },
+    request: { headers: {}, socket: { remoteAddress: "127.0.0.1", encrypted: true } },
     data: {},
     join(room) { joinedRooms.push(room); }
   };
   await connectionHandler(socket);
   assert.deepEqual(authenticateCalls, [{
     cookies: { session: "abc123", theme: "dark" },
-    headers: { host: "127.0.0.1:3100" },
-    socket: { remoteAddress: "127.0.0.1" }
+    headers: {
+      host: "127.0.0.1:3100", origin: "https://127.0.0.1:3100", "x-forwarded-proto": "https"
+    },
+    socket: { remoteAddress: "127.0.0.1", encrypted: true }
   }]);
   assert.equal(socket.data.actorId, "9");
   assert.deepEqual(joinedRooms, [