@medialane/sdk 0.129.0 → 0.129.2

package/README.md

@@ -465,6 +465,40 @@ try {
 }
 ```
 
+### Showing an error to a user
+
+Three types carry text written for someone to read. Everything else is machinery, and the
+message belongs to whatever your screen was trying to do.
+
+| Type | What it means | Show |
+|---|---|---|
+| `MedialaneApiError` | The API refused the request | `err.message`, which is the reason the API gave or a plain statement of the status |
+| `UserFacingError` | The SDK got partway and stopped, for example a transaction that reverted | `err.message` |
+| `PasskeyCancelledError` | The prompt was dismissed | Nothing was submitted, so avoid wording it as a failure |
+
+```typescript
+import { MedialaneApiError, PasskeyCancelledError, UserFacingError } from "@medialane/sdk";
+
+function describe(err: unknown, fallback: string): string {
+  if (err instanceof PasskeyCancelledError) return "Request not completed. Nothing was submitted.";
+  if (err instanceof UserFacingError) return err.message;
+  if (err instanceof MedialaneApiError) return err.message;
+  return fallback;
+}
+
+catch (err) {
+  console.error(err);
+  setError(describe(err, "We couldn't create that listing. Please try again."));
+}
+```
+
+The fallback matters. An error carrying none of those types says nothing a reader can act on,
+and its text is as likely to be a gateway response as a sentence. Your call site knows which
+action was attempted, so that is the message worth showing.
+
+A response body that is not ours stays in `err.details`, where it is available while debugging
+without reaching a reader.
+
 ---
 
 ## Configuration Reference

package/dist/index.cjs

@@ -1469,8 +1469,6 @@ function createRateLimiter(windowMs, max) {
 }
 var TRUSTED_APP_IP_HEADER = "x-medialane-client-ip";
 function requestIp(req) {
-  const fromApp = req.headers.get(TRUSTED_APP_IP_HEADER)?.trim();
-  if (fromApp) return fromApp;
   const fromEdge = req.headers.get("x-vercel-forwarded-for")?.split(",")[0]?.trim();
   if (fromEdge) return fromEdge;
   const forwarded = req.headers.get("x-forwarded-for");
@@ -1859,6 +1857,30 @@ async function getBackendSignedUrl(config, kind = "image") {
   if (!res.ok || !data.data) throw new Error(data.error ?? "Failed to create upload URL");
   return data.data.url;
 }
+
+// src/server/trusted-client-ip.ts
+var SPOOFABLE_FORWARDING_HEADERS = [
+  "x-forwarded-for",
+  "x-real-ip",
+  "x-client-ip",
+  "true-client-ip",
+  "cf-connecting-ip",
+  TRUSTED_APP_IP_HEADER
+];
+function isSpoofableForwardingHeader(name) {
+  return SPOOFABLE_FORWARDING_HEADERS.includes(name.toLowerCase());
+}
+function trustedClientIp(req) {
+  const vercel = req.headers.get("x-vercel-forwarded-for")?.split(",")[0]?.trim();
+  if (vercel) return vercel;
+  const forwarded = req.headers.get("x-forwarded-for");
+  if (forwarded) {
+    const hops = forwarded.split(",").map((hop) => hop.trim()).filter(Boolean);
+    const nearest = hops[hops.length - 1];
+    if (nearest) return nearest;
+  }
+  return "unknown";
+}
 var IDENTITY_PREFIX = "siws_";
 var ACCOUNT_SESSION_PREFIX = "account_session_";
 var IDENTITY_DOMAIN = "siws-identity-v1";
@@ -1874,8 +1896,7 @@ function toHex(bytes) {
   return out;
 }
 function sign(secret, domain, payload) {
-  const message = domain === null ? payload : `${domain}.${payload}`;
-  return toHex(hmac_js.hmac(sha2_js.sha256, encoder.encode(secret), encoder.encode(message)));
+  return toHex(hmac_js.hmac(sha2_js.sha256, encoder.encode(secret), encoder.encode(`${domain}.${payload}`)));
 }
 function constantTimeEquals(a, b) {
   if (a.length !== b.length) return false;
@@ -1884,7 +1905,7 @@ function constantTimeEquals(a, b) {
   return diff === 0;
 }
 function signatureMatches(secret, domain, payload, provided) {
-  return constantTimeEquals(provided, sign(secret, domain, payload)) || constantTimeEquals(provided, sign(secret, null, payload));
+  return constantTimeEquals(provided, sign(secret, domain, payload));
 }
 function encodePayload(value) {
   return base.base64urlnopad.encode(encoder.encode(JSON.stringify(value)));
@@ -2120,6 +2141,7 @@ exports.isPrivateHost = isPrivateHost;
 exports.isPrivateOrInsecureUrl = isPrivateOrInsecureUrl;
 exports.isSameOrigin = isSameOrigin;
 exports.isServiceId = isServiceId;
+exports.isSpoofableForwardingHeader = isSpoofableForwardingHeader;
 exports.isTransientRpcError = isTransientRpcError;
 exports.isValidIpfsCidPath = isValidIpfsCidPath;
 exports.issueAccountSessionToken = issueAccountSessionToken;
@@ -2137,6 +2159,7 @@ exports.resolveRemixPolicy = resolveRemixPolicy;
 exports.resolveSafeImageContentType = resolveSafeImageContentType;
 exports.shortenAddress = shortenAddress;
 exports.stringifyBigInts = stringifyBigInts;
+exports.trustedClientIp = trustedClientIp;
 exports.u256ToBigInt = u256ToBigInt;
 exports.uploadDirectoryToBackend = uploadDirectoryToBackend;
 exports.uploadFileToBackend = uploadFileToBackend;