@niledatabase/server 5.0.0-alpha.28 → 5.0.0-alpha.29

package/dist/index.d.mts

@@ -318,7 +318,7 @@ declare class Tenants {
     acceptInvite<T = Response>(req?: {
         identifier: string;
         token: string;
-        redirectUrl?: string;
+        callbackUrl?: string;
     }, rawResponse?: boolean): Promise<T>;
     /**
      * Delete a pending invite using `DELETE /api/tenants/{tenantId}/invite/{inviteId}`.

package/dist/index.d.ts

@@ -318,7 +318,7 @@ declare class Tenants {
     acceptInvite<T = Response>(req?: {
         identifier: string;
         token: string;
-        redirectUrl?: string;
+        callbackUrl?: string;
     }, rawResponse?: boolean): Promise<T>;
     /**
      * Delete a pending invite using `DELETE /api/tenants/{tenantId}/invite/{inviteId}`.

package/dist/index.js

@@ -131,139 +131,6 @@ function isUUID(value) {
   return regex.test(value);
 }
 
-// src/api/utils/request.ts
-async function request(url, _init, config) {
-  const { debug, info, error } = config.logger("[REQUEST]");
-  const { request: request2, ...init } = _init;
-  const requestUrl = new URL(request2.url);
-  const updatedHeaders = new Headers({});
-  if (request2.headers.get("cookie")) {
-    updatedHeaders.set("cookie", String(request2.headers.get("cookie")));
-  }
-  if (request2.headers.get(TENANT_COOKIE)) {
-    updatedHeaders.set(
-      TENANT_COOKIE,
-      String(request2.headers.get(TENANT_COOKIE))
-    );
-  }
-  if (config.secureCookies != null) {
-    updatedHeaders.set(HEADER_SECURE_COOKIES, String(config.secureCookies));
-  } else {
-    updatedHeaders.set(
-      HEADER_SECURE_COOKIES,
-      process.env.NODE_ENV === "production" ? "true" : "false"
-    );
-  }
-  updatedHeaders.set("host", requestUrl.host);
-  if (config.callbackUrl) {
-    const cbUrl = new URL(config.callbackUrl);
-    debug(`Obtained origin from config.callbackUrl ${config.callbackUrl}`);
-    updatedHeaders.set(HEADER_ORIGIN, cbUrl.origin);
-  } else if (config.origin) {
-    debug(`Obtained origin from config.origin ${config.origin}`);
-    updatedHeaders.set(HEADER_ORIGIN, config.origin);
-  } else {
-    const passedOrigin = request2.headers.get(HEADER_ORIGIN);
-    if (passedOrigin) {
-      updatedHeaders.set(HEADER_ORIGIN, passedOrigin);
-    } else {
-      const reqOrigin = config.routePrefix !== DEFAULT_PREFIX ? `${requestUrl.origin}${config.routePrefix}` : requestUrl.origin;
-      updatedHeaders.set(HEADER_ORIGIN, reqOrigin);
-      debug(`Obtained origin from request ${reqOrigin}`);
-    }
-  }
-  const params = { ...init };
-  if (params.method?.toLowerCase() === "post" || params.method?.toLowerCase() === "put") {
-    try {
-      updatedHeaders.set("content-type", "application/json");
-      const bodyStream = _init.body ?? _init.request?.body ?? request2.body;
-      const bodyText = await new Response(bodyStream).text();
-      try {
-        params.body = JSON.stringify(JSON.parse(bodyText));
-      } catch {
-        updatedHeaders.set("content-type", "application/x-www-form-urlencoded");
-        params.body = bodyText;
-      }
-    } catch (e) {
-      error("Failed to parse request body");
-    }
-  }
-  params.headers = updatedHeaders;
-  const fullUrl = `${url}${requestUrl.search}`;
-  if (config.debug) {
-    params.headers.set("request-id", crypto.randomUUID());
-    params.cache = "no-store";
-  }
-  await config.extensionCtx?.runExtensions(
-    "onRequest" /* onRequest */,
-    config,
-    params,
-    _init
-  );
-  try {
-    const res = await fetch(fullUrl, {
-      ...params
-    }).catch((e) => {
-      error("An error has occurred in the fetch", {
-        message: e.message,
-        stack: e.stack
-      });
-      return new Response(
-        "An unexpected (most likely configuration) problem has occurred",
-        { status: 500 }
-      );
-    });
-    const loggingRes = typeof res?.clone === "function" ? res?.clone() : null;
-    info(`[${params.method ?? "GET"}] ${fullUrl}`, {
-      status: res?.status,
-      statusText: res?.statusText,
-      text: await loggingRes?.text()
-    });
-    const updatedRes = await config.extensionCtx?.runExtensions(
-      "onResponse" /* onResponse */,
-      config,
-      { ...params, response: res }
-    );
-    if (updatedRes) {
-      return updatedRes;
-    }
-    return res;
-  } catch (e) {
-    if (e instanceof Error) {
-      error("An error has occurred in the fetch", {
-        message: e.message,
-        stack: e.stack
-      });
-    }
-    return new Response(
-      "An unexpected (most likely configuration) problem has occurred",
-      { status: 500 }
-    );
-  }
-}
-
-// src/api/utils/auth.ts
-async function auth(req, config) {
-  const { info, error } = config.logger("[nileauth]");
-  info("checking auth");
-  const sessionUrl = `${config.apiUrl}/auth/session`;
-  info(`using session ${sessionUrl}`);
-  req.headers.delete("content-length");
-  const res = await request(sessionUrl, { request: req }, config);
-  try {
-    const session = await new Response(res.body).json();
-    if (Object.keys(session).length === 0) {
-      info("no session found");
-      return void 0;
-    }
-    info("session active");
-    return session;
-  } catch (e) {
-    error(e);
-    return void 0;
-  }
-}
-
 // src/utils/Logger.ts
 var red = "\x1B[31m";
 var yellow = "\x1B[38;2;255;255;0m";
@@ -563,6 +430,160 @@ function serializeCookies(cookies) {
   return Object.entries(cookies).map(([k, v]) => `${k}=${v}`).join("; ");
 }
 
+// src/api/utils/request.ts
+async function request(url, _init, config) {
+  const { debug, info, error, warn: warn2 } = config.logger("[REQUEST]");
+  const { request: request2, ...init } = _init;
+  const requestUrl = new URL(request2.url);
+  const updatedHeaders = new Headers({});
+  if (request2.headers.get("cookie")) {
+    updatedHeaders.set("cookie", String(request2.headers.get("cookie")));
+  }
+  if (request2.headers.get(TENANT_COOKIE)) {
+    updatedHeaders.set(
+      TENANT_COOKIE,
+      String(request2.headers.get(TENANT_COOKIE))
+    );
+  }
+  if (config.secureCookies != null) {
+    updatedHeaders.set(HEADER_SECURE_COOKIES, String(config.secureCookies));
+  } else {
+    updatedHeaders.set(
+      HEADER_SECURE_COOKIES,
+      process.env.NODE_ENV === "production" ? "true" : "false"
+    );
+  }
+  updatedHeaders.set("host", requestUrl.host);
+  if (config.callbackUrl) {
+    const cbUrl = new URL(config.callbackUrl);
+    debug(`Obtained origin from config.callbackUrl ${config.callbackUrl}`);
+    updatedHeaders.set(HEADER_ORIGIN, cbUrl.origin);
+  } else if (config.origin) {
+    debug(`Obtained origin from config.origin ${config.origin}`);
+    updatedHeaders.set(HEADER_ORIGIN, config.origin);
+  } else {
+    const passedOrigin = request2.headers.get(HEADER_ORIGIN);
+    if (passedOrigin) {
+      updatedHeaders.set(HEADER_ORIGIN, passedOrigin);
+    } else {
+      const { headers } = ctx.get();
+      const host = headers.get("host");
+      if (host) {
+        const serverSideOrigin = `${getProtocolFromHeaders(headers)}://${host}`;
+        updatedHeaders.set(HEADER_ORIGIN, serverSideOrigin);
+        debug(`Obtained origin from server side headers ${serverSideOrigin}`);
+      } else {
+        const reqOrigin = config.routePrefix !== DEFAULT_PREFIX ? `${requestUrl.origin}${config.routePrefix}` : requestUrl.origin;
+        updatedHeaders.set(HEADER_ORIGIN, reqOrigin);
+        debug(`Obtained origin from request ${reqOrigin}`);
+      }
+    }
+  }
+  const params = { ...init };
+  if (params.method?.toLowerCase() === "post" || params.method?.toLowerCase() === "put") {
+    try {
+      updatedHeaders.set("content-type", "application/json");
+      const bodyStream = _init.body ?? _init.request?.body ?? request2.body;
+      const bodyText = await new Response(bodyStream).text();
+      try {
+        params.body = JSON.stringify(JSON.parse(bodyText));
+      } catch {
+        updatedHeaders.set("content-type", "application/x-www-form-urlencoded");
+        params.body = bodyText;
+      }
+    } catch (e) {
+      error("Failed to parse request body");
+    }
+  }
+  params.headers = updatedHeaders;
+  const fullUrl = `${url}${requestUrl.search}`;
+  if (config.debug) {
+    params.headers.set("request-id", crypto.randomUUID());
+    params.cache = "no-store";
+  }
+  await config.extensionCtx?.runExtensions(
+    "onRequest" /* onRequest */,
+    config,
+    params,
+    _init
+  );
+  try {
+    const res = await fetch(fullUrl, {
+      ...params
+    }).catch((e) => {
+      error("An error has occurred in the fetch", {
+        message: e.message,
+        stack: e.stack
+      });
+      return new Response(
+        "An unexpected (most likely configuration) problem has occurred",
+        { status: 500 }
+      );
+    });
+    const loggingRes = typeof res?.clone === "function" ? res?.clone() : null;
+    info(`[${params.method ?? "GET"}] ${fullUrl}`, {
+      status: res?.status,
+      statusText: res?.statusText,
+      text: await loggingRes?.text()
+    });
+    const updatedRes = await config.extensionCtx?.runExtensions(
+      "onResponse" /* onResponse */,
+      config,
+      { ...params, response: res }
+    );
+    if (updatedRes) {
+      return updatedRes;
+    }
+    return res;
+  } catch (e) {
+    if (e instanceof Error) {
+      error("An error has occurred in the fetch", {
+        message: e.message,
+        stack: e.stack
+      });
+    }
+    return new Response(
+      "An unexpected (most likely configuration) problem has occurred",
+      { status: 500 }
+    );
+  }
+}
+function getProtocolFromHeaders(headers) {
+  const get = (key17) => headers instanceof Headers ? headers.get(key17) : headers[key17.toLowerCase()];
+  const xfp = get("x-forwarded-proto");
+  if (xfp) return xfp.toLowerCase();
+  const forwarded = get("forwarded");
+  if (forwarded) {
+    const match = forwarded.match(/proto=(https?)/i);
+    if (match) return match[1].toLowerCase();
+  }
+  const ref = get("referer") || get("origin");
+  if (ref && ref.startsWith("https")) return "https";
+  return "http";
+}
+
+// src/api/utils/auth.ts
+async function auth(req, config) {
+  const { info, error } = config.logger("[nileauth]");
+  info("checking auth");
+  const sessionUrl = `${config.apiUrl}/auth/session`;
+  info(`using session ${sessionUrl}`);
+  req.headers.delete("content-length");
+  const res = await request(sessionUrl, { request: req }, config);
+  try {
+    const session = await new Response(res.body).json();
+    if (Object.keys(session).length === 0) {
+      info("no session found");
+      return void 0;
+    }
+    info("session active");
+    return session;
+  } catch (e) {
+    error(e);
+    return void 0;
+  }
+}
+
 // src/api/routes/me/index.ts
 var key = "ME";
 async function route(request2, config) {
@@ -3214,7 +3235,6 @@ var Tenants = class {
     return withNileContext(
       this.#config,
       async () => {
-        await runExtensionContext(this.#config);
         const { csrfToken } = await obtainCsrf(
           this.#config
         );
@@ -3264,8 +3284,8 @@ var Tenants = class {
         throw new Error("The identifier and token are required.");
       }
       const { identifier, token } = req;
-      const defaults = defaultCallbackUrl3(this.#config);
-      const callbackUrl = String(defaults.callbackUrl);
+      const { callbackUrl: cbUrl } = defaultCallbackUrl3(this.#config);
+      const callbackUrl = fQUrl2(cbUrl, req?.callbackUrl ?? "/");
       const res = await fetchInvite(
         this.#config,
         "PUT",