@mojaloop/sdk-scheme-adapter 24.9.1-snapshot.3 → 24.9.2-snapshot.2

package/.ncurc.yaml

@@ -12,7 +12,5 @@ reject: [
   ## esLint 9.15.0 caused the error: TypeError: Error while loading rule '@typescript-eslint/no-unused-expressions': Cannot read properties of undefined (reading 'allowShortCircuit')
   "eslint",
   ## express >5 introduces breaking changes that are not compatible with the current codebase.
-  "express",
-  "koa", ## update to major version 3 is better to do in a separate PR
-  "redis" ## update to major version 5 is better to do in a separate PR
+  "express"
 ]

package/CHANGELOG.md

@@ -1,4 +1,11 @@
 # Changelog: [mojaloop/sdk-scheme-adapter](https://github.com/mojaloop/sdk-scheme-adapter)
+### [24.9.1](https://github.com/mojaloop/sdk-scheme-adapter/compare/v24.9.0...v24.9.1) (2025-05-20)
+
+
+### Chore
+
+* remove gateway headers when returning ping request ([#578](https://github.com/mojaloop/sdk-scheme-adapter/issues/578)) ([a4b0aae](https://github.com/mojaloop/sdk-scheme-adapter/commit/a4b0aaeccf271d62e192275cdd44686e5faee98b))
+
 ## [24.9.0](https://github.com/mojaloop/sdk-scheme-adapter/compare/v24.8.0...v24.9.0) (2025-04-22)
 
 

package/modules/api-svc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter-api-svc",
-  "version": "21.0.0-snapshot.38",
+  "version": "21.0.0-snapshot.37",
   "description": "An adapter for connecting to Mojaloop API enabled switches.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -68,12 +68,12 @@
     "@mojaloop/central-services-error-handling": "13.1.0",
     "@mojaloop/central-services-logger": "11.9.0",
     "@mojaloop/central-services-metrics": "12.6.0",
-    "@mojaloop/central-services-shared": "18.26.0",
-    "@mojaloop/event-sdk": "14.5.0",
+    "@mojaloop/central-services-shared": "18.26.2",
+    "@mojaloop/event-sdk": "14.5.1",
     "@mojaloop/logging-bc-client-lib": "0.5.8",
     "@mojaloop/ml-schema-transformer-lib": "2.7.1",
     "@mojaloop/sdk-scheme-adapter-private-shared-lib": "workspace:^",
-    "@mojaloop/sdk-standard-components": "19.15.1-snapshot.2",
+    "@mojaloop/sdk-standard-components": "19.15.1",
     "ajv": "8.17.1",
     "axios": "1.9.0",
     "body-parser": "2.2.0",
@@ -86,7 +86,7 @@
     "javascript-state-machine": "3.1.0",
     "js-yaml": "4.1.0",
     "json-schema-ref-parser": "9.0.9",
-    "koa": "2.16.1",
+    "koa": "3.0.0",
     "koa-body": "6.0.1",
     "lodash": "4.17.21",
     "module-alias": "2.2.3",
@@ -95,7 +95,7 @@
     "prom-client": "15.1.3",
     "promise-timeout": "1.3.0",
     "random-word-slugs": "0.1.7",
-    "redis": "4.7.0",
+    "redis": "5.1.0",
     "uuidv4": "6.2.13",
     "ws": "8.18.2"
   },

package/modules/api-svc/src/ControlAgent/index.js

@@ -51,6 +51,7 @@ const FORCE_WS_CLOSE_TIMEOUT_MS = 5000;
  *************************************************************************/
 const MESSAGE = {
     CONFIGURATION: 'CONFIGURATION',
+    PEER_JWS: 'PEER_JWS',
     ERROR: 'ERROR',
 };
 
@@ -124,6 +125,7 @@ const build = {
             JSON_PARSE_ERROR: (id) => buildMsg(VERB.NOTIFY, MESSAGE.ERROR, ERROR.JSON_PARSE_ERROR, id),
         }
     },
+    PEER_JWS: {},
 };
 
 /**************************************************************************
@@ -235,6 +237,16 @@ class Client extends ws {
                         break;
                 }
                 break;
+            case MESSAGE.PEER_JWS:
+                switch (msg.verb) {
+                    case VERB.NOTIFY:
+                        // Ignore PEER_JWS NOTIFY messages
+                        break;
+                    default:
+                        this.send(build.ERROR.NOTIFY.UNSUPPORTED_VERB(msg.id));
+                        break;
+                }
+                break;
             default:
                 this.send(build.ERROR.NOTIFY.UNSUPPORTED_MESSAGE(msg.id));
                 break;

package/modules/api-svc/src/lib/model/InboundPingModel.js

@@ -27,6 +27,7 @@
 
 const { requests: { PingRequests }, Errors } = require('@mojaloop/sdk-standard-components');
 const { Headers } = require('@mojaloop/central-services-shared').Enum.Http;
+const { xHeaders, hopByHopHeaders, sensitiveHeaders } = require('./lib/shared');
 
 class InboundPingModel {
     constructor(config) {
@@ -55,9 +56,6 @@ class InboundPingModel {
         const log = this.logger.child({ requestId, sourceFspId });
         log.debug('postPing...', { jwsPingValidationResult, headers });
 
-        await this.pingRequests.putParties();
-        log.verbose('pingRequests.putParties() is done');
-
         if (jwsPingValidationResult === true) {
             log.verbose('ping JWS validation passed, sending PUT ping callback...');
             return this.pingRequests.putPing({
@@ -92,12 +90,28 @@ class InboundPingModel {
     }
 
     #createCallbackHeaders(headers) {
+        const cleanedHeaders = this.#cleanupIncomingHeaders(headers);
         return {
-            ...headers,
+            ...cleanedHeaders,
             [Headers.FSPIOP.DESTINATION]: headers[Headers.FSPIOP.SOURCE],
             [Headers.FSPIOP.SOURCE]: this.dfspId
         };
     }
+
+    #cleanupIncomingHeaders(headers) {
+        const cleanedHeaders = { ...headers };
+        // prettier-ignore
+        [
+            ...sensitiveHeaders,
+            ...hopByHopHeaders,
+            ...xHeaders,
+        ].forEach((header) => {
+            delete cleanedHeaders[header];
+        });
+
+        return cleanedHeaders;
+    }
+
 }
 
 module.exports = InboundPingModel;

package/modules/api-svc/src/lib/model/lib/shared.js

@@ -753,6 +753,44 @@ const internalFxTransferResponseToMojaloop = (beResponse, fulfilment) => {
     };
 };
 
+const sensitiveHeaders = [
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'host', // without removing host header request proxy fails with error: "Client network socket disconnected before secure TLS connection was established"
+    'content-length', // without removing content-length header request just stuck
+    'accept-encoding',
+    'user-agent',
+];
+
+const hopByHopHeaders = [
+    'connection',
+    'proxy-connection',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+    'keep-alive',
+];
+
+const xHeaders = [
+    'x-forwarded-proto',
+    'x-request-id',
+    'x-envoy-attempt-count',
+    'x-forwarded-for',
+    'x-forwarded-client-cert',
+    'x-envoy-external-address',
+    'x-envoy-decorator-operation',
+    'x-envoy-peer-metadata',
+    'x-envoy-peer-metadata-id',
+    'x-b3-traceid',
+    'x-b3-spanid',
+    'x-b3-parentspanid',
+    'x-b3-sampled',
+];
+
 module.exports = {
     internalPartyToMojaloopParty,
     internalQuoteResponseToMojaloop,
@@ -774,4 +812,7 @@ module.exports = {
     mojaloopFxTransferPrepareToInternal,
     internalFxQuoteResponseToMojaloop,
     internalFxTransferResponseToMojaloop,
+    sensitiveHeaders,
+    hopByHopHeaders,
+    xHeaders
 };

package/modules/outbound-command-event-handler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter-outbound-command-event-handler",
-  "version": "0.3.0-snapshot.35",
+  "version": "0.3.0-snapshot.34",
   "description": "Mojaloop sdk scheme adapter command event handler",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mojaloop/sdk-scheme-adapter/",
@@ -42,7 +42,7 @@
   },
   "dependencies": {
     "@mojaloop/api-snippets": "17.10.3",
-    "@mojaloop/central-services-shared": "18.26.0",
+    "@mojaloop/central-services-shared": "18.26.2",
     "@mojaloop/logging-bc-client-lib": "0.5.8",
     "@mojaloop/logging-bc-public-types-lib": "0.5.5",
     "@mojaloop/sdk-scheme-adapter-private-shared-lib": "workspace:^",
@@ -51,7 +51,7 @@
     "convict": "6.2.4",
     "express": "4.21.2",
     "openapi-backend": "5.12.0",
-    "redis": "5.0.1",
+    "redis": "5.1.0",
     "swagger-ui-express": "5.0.1",
     "yamljs": "0.3.0"
   },
@@ -60,7 +60,7 @@
     "@types/convict": "6.1.6",
     "@types/express": "5.0.2",
     "@types/jest": "29.5.14",
-    "@types/node": "22.15.19",
+    "@types/node": "22.15.21",
     "@types/node-cache": "4.2.5",
     "@types/supertest": "6.0.3",
     "@types/swagger-ui-express": "4.1.8",

package/modules/outbound-domain-event-handler/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mojaloop/sdk-scheme-adapter-outbound-domain-event-handler",
-    "version": "0.3.0-snapshot.35",
+    "version": "0.3.0-snapshot.34",
     "description": "mojaloop sdk scheme adapter outbound domain event handler",
     "license": "Apache-2.0",
     "homepage": "https://github.com/mojaloop/sdk-scheme-adapter/",
@@ -49,7 +49,7 @@
         "convict": "6.2.4",
         "express": "4.21.2",
         "openapi-backend": "5.12.0",
-        "redis": "5.0.1",
+        "redis": "5.1.0",
         "swagger-ui-express": "5.0.1",
         "yamljs": "0.3.0"
     },
@@ -57,7 +57,7 @@
         "@types/convict": "6.1.6",
         "@types/express": "5.0.2",
         "@types/jest": "29.5.14",
-        "@types/node": "22.15.19",
+        "@types/node": "22.15.21",
         "@types/node-cache": "4.2.5",
         "@types/supertest": "6.0.3",
         "@types/swagger-ui-express": "4.1.8",

package/modules/private-shared-lib/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter-private-shared-lib",
-  "version": "0.4.0-snapshot.35",
+  "version": "0.4.0-snapshot.34",
   "description": "SDK Scheme Adapter private shared library.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mojaloop/accounts-and-balances-bc/tree/main/modules/private-types",
@@ -30,17 +30,17 @@
   },
   "dependencies": {
     "@mojaloop/api-snippets": "17.10.3",
-    "@mojaloop/central-services-shared": "18.26.0",
+    "@mojaloop/central-services-shared": "18.26.2",
     "@mojaloop/logging-bc-public-types-lib": "0.5.5",
     "@mojaloop/platform-shared-lib-messaging-types-lib": "0.7.2",
     "@mojaloop/platform-shared-lib-nodejs-kafka-client-lib": "0.5.18",
     "ajv": "8.17.1",
-    "redis": "5.0.1",
+    "redis": "5.1.0",
     "uuid": "11.1.0"
   },
   "devDependencies": {
     "@eslint/compat": "1.2.9",
-    "@types/node": "22.15.19",
+    "@types/node": "22.15.21",
     "@types/uuid": "10.0.0",
     "@typescript-eslint/eslint-plugin": "8.32.1",
     "@typescript-eslint/parser": "8.32.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter",
-  "version": "24.9.1-snapshot.3",
+  "version": "24.9.2-snapshot.2",
   "description": "mojaloop sdk-scheme-adapter",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mojaloop/sdk-scheme-adapter",
@@ -82,7 +82,7 @@
   },
   "devDependencies": {
     "@types/jest": "29.5.14",
-    "@types/node": "22.15.19",
+    "@types/node": "22.15.21",
     "@types/node-cache": "4.2.5",
     "@typescript-eslint/eslint-plugin": "8.32.1",
     "@typescript-eslint/parser": "8.32.1",