@mojaloop/central-services-shared 18.35.0-snapshot.2 → 18.35.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [18.35.0](https://github.com/mojaloop/central-services-shared/compare/v18.34.6...v18.35.0) (2026-01-22)
+
+
+### Features
+
+* **csi-2030:** added validateSourceHeader feature ([#499](https://github.com/mojaloop/central-services-shared/issues/499)) ([27ecf64](https://github.com/mojaloop/central-services-shared/commit/27ecf643136e6639320f24e0ba578e7b28f15bd0))
+
 ### [18.34.6](https://github.com/mojaloop/central-services-shared/compare/v18.34.5...v18.34.6) (2026-01-13)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/central-services-shared",
-  "version": "18.35.0-snapshot.2",
+  "version": "18.35.0",
   "description": "Shared code for mojaloop central services",
   "license": "Apache-2.0",
   "author": "ModusBox",

package/src/constants.js

@@ -5,6 +5,8 @@ const API_TYPES = Object.freeze({
 
 const ISO_HEADER_PART = 'iso20022'
 
+const CLIENT_ID_HEADER = 'x-client-id'
+
 const REDIS_SUCCESS = 'OK'
 const REDIS_IS_CONNECTED_STATUSES = ['connect', 'ready']
 
@@ -21,6 +23,7 @@ const errorMessages = {
 module.exports = {
   API_TYPES,
   ISO_HEADER_PART,
+  CLIENT_ID_HEADER,
   REDIS_SUCCESS,
   REDIS_IS_CONNECTED_STATUSES,
   errorMessages

package/src/util/hapi/plugins/headerValidation.js

@@ -9,7 +9,7 @@ const { env } = require('node:process')
 const { Factory: { createFSPIOPError }, Enums } = require('@mojaloop/central-services-error-handling')
 const RootJoi = require('joi')
 const DateExtension = require('@hapi/joi-date')
-const { API_TYPES, MAX_CONTENT_LENGTH, errorMessages } = require('../../../constants')
+const { API_TYPES, MAX_CONTENT_LENGTH, CLIENT_ID_HEADER, errorMessages } = require('../../../constants')
 const { Headers } = require('../../../enums/http')
 const { logger } = require('../../../logger')
 const {
@@ -20,7 +20,7 @@ const {
   convertSupportedVersionToExtensionList
 } = require('../../headerValidation')
 
-const NEED_SOURCE_VALIDATION = env.ENABLED_SOURCE_HEADER_VLIDATION === 'true'
+const NEED_SOURCE_VALIDATION = (env.ENABLED_SOURCE_HEADER_VALIDATION ?? 'true') === 'true'
 
 // Some defaults
 
@@ -150,11 +150,11 @@ const plugin = {
 /* istanbul ignore next */
 const validateSourceHeader = (headers = {}) => {
   const source = headers[Headers.FSPIOP.SOURCE]
-  const clientId = headers['x-client-id'] // think, if we need to have service-to-service calls, where no clientId
+  const clientId = headers[CLIENT_ID_HEADER]
   // x-client-id is added by oathkeeper during processing request from DFSP to hub extapi
 
-  if (!clientId) {
-    logger.warn('No x-client-id header found, skip source-header validation')
+  if (!clientId) { // internal service-to-service calls
+    logger.info('No x-client-id header found, skip source-header validation', { source })
     return
   }
 
@@ -167,7 +167,6 @@ const validateSourceHeader = (headers = {}) => {
 
 module.exports = {
   plugin,
-  errorMessages,
   defaultProtocolResources,
   defaultProtocolVersions
 }

package/test/unit/util/hapi/plugins/headerValidation.test.js

@@ -32,16 +32,16 @@ const Test = require('tapes')(require('tape'))
 const Sinon = require('sinon')
 const Hapi = require('@hapi/hapi')
 const ErrorHandling = require('@mojaloop/central-services-error-handling')
-const { plugin } = require('../../../../../src/util/hapi/plugins/headerValidation')
-const { protocolVersionsMap } = require('../../../../../src/util/headerValidation')
-const { errorMessages } = require('#src/constants')
+
+const { plugin } = require('#src/util/hapi/plugins/headerValidation')
+const { protocolVersionsMap } = require('#src/util/headerValidation/index')
+const { CLIENT_ID_HEADER, errorMessages } = require('#src/constants')
+const { defaultHeaders, tryCatchEndTest } = require('#test/util/helper')
 const {
   generateAcceptHeader,
   generateContentTypeHeader
 } = require('../../headerValidation/support')
 
-const { defaultHeaders, tryCatchEndTest } = require('#test/util/helper')
-
 const resource = 'participants'
 
 const init = async (needSourceValidation = false) => {
@@ -99,7 +99,7 @@ const headersDto = ({
   xClientId = source
 } = {}) => ({
   ...defaultHeaders(destination, resource, source),
-  ...(xClientId && { 'x-client-id': xClientId }),
+  ...(xClientId && { [CLIENT_ID_HEADER]: xClientId }),
   date: new Date().toUTCString()
 })
 
@@ -369,18 +369,18 @@ Test('headerValidation plugin test', async (pluginTest) => {
       const { statusCode } = await testServer.inject({
         method: 'get',
         url: `/${resource}`,
-        headers: headersDto({ xClientId: undefined, source: 'source' })
+        headers: headersDto({ xClientId: null, source: 'source' })
       })
       t.is(statusCode, 202)
     }))
 
     sourceTests.test('should pass validation if xClientId equals source-header', tryCatchEndTest(async t => {
-      const dfpId = 'dfsp1'
+      const dfspId = 'dfsp1'
 
       const { statusCode } = await testServer.inject({
         method: 'get',
         url: `/${resource}`,
-        headers: headersDto({ xClientId: dfpId, source: dfpId })
+        headers: headersDto({ xClientId: dfspId, source: dfspId })
       })
       t.is(statusCode, 202)
     }))