@medialane/sdk 0.177.0 → 0.179.0

package/dist/index.d.cts

@@ -696,6 +696,7 @@ interface AppGatewayConfig {
     appId: string;
     backendUrl: string;
     apiKey: string | undefined;
+    appSecret?: string;
     allow: Record<string, RegExp[]>;
     cacheableGets?: RegExp[];
     timeoutMs?: number;
@@ -707,6 +708,7 @@ interface AppSessionConfig {
     appId: string;
     backendUrl: string;
     apiKey: string | undefined;
+    appSecret?: string;
     fetchImpl?: typeof fetch;
 }
 declare function createAppSessionHandler(config: AppSessionConfig): {

package/dist/index.d.ts

@@ -696,6 +696,7 @@ interface AppGatewayConfig {
     appId: string;
     backendUrl: string;
     apiKey: string | undefined;
+    appSecret?: string;
     allow: Record<string, RegExp[]>;
     cacheableGets?: RegExp[];
     timeoutMs?: number;
@@ -707,6 +708,7 @@ interface AppSessionConfig {
     appId: string;
     backendUrl: string;
     apiKey: string | undefined;
+    appSecret?: string;
     fetchImpl?: typeof fetch;
 }
 declare function createAppSessionHandler(config: AppSessionConfig): {

package/dist/index.js

@@ -130,6 +130,7 @@ var DROPPED_REQUEST_HEADERS = /* @__PURE__ */ new Set([
   "cookie",
   "x-api-key",
   "x-app-id",
+  "x-app-secret",
   "x-account-session",
   "authorization"
 ]);
@@ -175,6 +176,7 @@ function createAppGateway(config) {
     });
     headers2.set("x-api-key", config.apiKey);
     headers2.set("x-app-id", config.appId);
+    if (config.appSecret) headers2.set("x-app-secret", config.appSecret);
     const session = readCookie(req, ACCOUNT_SESSION_COOKIE);
     if (session) headers2.set("x-account-session", session);
     const search = new URL(req.url).search;
@@ -208,12 +210,12 @@ function createAppGateway(config) {
       } catch {
         body = null;
       }
-      if (!body) return new Response(text, { status: res.status, headers: out });
-      const token = typeof body.accountToken === "string" ? body.accountToken : null;
+      const token = typeof body?.accountToken === "string" ? body.accountToken : null;
+      if (!body || !token) return new Response(text, { status: res.status, headers: out });
       delete body.accountToken;
       delete body.token;
       out.set("content-type", "application/json");
-      if (token) out.append("set-cookie", sessionCookie(token));
+      out.append("set-cookie", sessionCookie(token));
       return new Response(JSON.stringify(body), { status: res.status, headers: out });
     }
     if (method === "GET" && res.ok && !session && (config.cacheableGets ?? []).some((re) => re.test(joined))) {
@@ -237,7 +239,12 @@ function createAppSessionHandler(config) {
       const session = readCookie(req, ACCOUNT_SESSION_COOKIE);
       if (!session) return Response.json(null);
       const res = await doFetch(`${base}/v1/users/me`, {
-        headers: { "x-api-key": config.apiKey ?? "", "x-app-id": config.appId, "x-account-session": session },
+        headers: {
+          "x-api-key": config.apiKey ?? "",
+          "x-app-id": config.appId,
+          ...config.appSecret ? { "x-app-secret": config.appSecret } : {},
+          "x-account-session": session
+        },
         cache: "no-store"
       });
       if (res.status === 401 || res.status === 403) return signedOut();