@mastra/nestjs 0.2.15 → 0.2.16-alpha.1

package/dist/index.js

@@ -363,6 +363,22 @@ let MastraExceptionFilter = _MastraExceptionFilter = class MastraExceptionFilter
 };
 MastraExceptionFilter = _MastraExceptionFilter = __decorate([Catch()], MastraExceptionFilter);
 //#endregion
+//#region src/utils/to-web-request.ts
+/**
+* Convert an Express request to a Web API Request.
+* Auth providers and route handlers expect this canonical header/cookie shape.
+*/
+function toWebRequest(req) {
+	const url = `${req.protocol || "http"}://${req.get("host") || "localhost"}${req.originalUrl || req.url}`;
+	const headers = new Headers();
+	for (const [key, value] of Object.entries(req.headers)) if (value) if (Array.isArray(value)) value.forEach((v) => headers.append(key, v));
+	else headers.set(key, value);
+	return new globalThis.Request(url, {
+		method: req.method,
+		headers
+	});
+}
+//#endregion
 //#region src/services/auth.service.ts
 var _AuthService;
 let AuthService = _AuthService = class AuthService {
@@ -399,7 +415,7 @@ let AuthService = _AuthService = class AuthService {
 		if (!token) throw new UnauthorizedException("Authentication required");
 		try {
 			let user;
-			if (typeof authConfig?.authenticateToken === "function") user = await authConfig.authenticateToken(token, request);
+			if (typeof authConfig?.authenticateToken === "function") user = await authConfig.authenticateToken(token, toWebRequest(request));
 			else throw new Error("No token verification method configured");
 			if (!user) throw new UnauthorizedException("Invalid or expired token");
 			request.user = user;
@@ -418,7 +434,7 @@ let AuthService = _AuthService = class AuthService {
 	*/
 	async authorize(request, path, method, user, authConfig) {
 		if (typeof authConfig.authorizeUser === "function") {
-			if (!await authConfig.authorizeUser(user, request)) throw new ForbiddenException("Access denied");
+			if (!await authConfig.authorizeUser(user, toWebRequest(request))) throw new ForbiddenException("Access denied");
 			return;
 		}
 		if (typeof authConfig.authorize === "function") {
@@ -427,7 +443,7 @@ let AuthService = _AuthService = class AuthService {
 					if (key === "mastra") return this.mastra;
 					if (key === "customRouteAuthConfig") return this.options.customRouteAuthConfig;
 				},
-				req: request
+				req: toWebRequest(request)
 			};
 			if (!await authConfig.authorize(path, method, user, context)) throw new ForbiddenException("Access denied");
 			return;
@@ -10739,19 +10755,6 @@ function parseMultipartFormData(request, options = {}) {
 }
 //#endregion
 //#region src/controllers/mastra.controller.ts
-/**
-* Convert Express request to Web API Request for accessing headers, cookies, etc.
-*/
-function toWebRequest(req) {
-	const url = `${req.protocol || "http"}://${req.get("host") || "localhost"}${req.originalUrl || req.url}`;
-	const headers = new Headers();
-	for (const [key, value] of Object.entries(req.headers)) if (value) if (Array.isArray(value)) value.forEach((v) => headers.append(key, v));
-	else headers.set(key, value);
-	return new globalThis.Request(url, {
-		method: req.method,
-		headers
-	});
-}
 let MastraController = class MastraController {
 	options;
 	routeHandler;