@patch-adams/core 1.4.16 → 1.4.18

package/dist/index.cjs

@@ -39,7 +39,11 @@ var LrsBridgeConfigSchema = zod.z.object({
   /** Course homepage IRI for xAPI context */
   courseHomepage: zod.z.string().optional(),
   /** Auto-detect Bravais LRS endpoint from parent frame URL (default: true) */
-  autoDetectLrs: zod.z.boolean().default(true)
+  autoDetectLrs: zod.z.boolean().default(true),
+  /** Basic auth credentials for LRS (Base64 encoded "username:password") - used when no cookie session exists */
+  lrsAuth: zod.z.string().optional(),
+  /** LRS proxy endpoint URL - statements are sent here instead of direct LRS, proxy handles auth server-side */
+  lrsProxyEndpoint: zod.z.string().optional()
 });
 var BlockingAssetConfigSchema = zod.z.object({
   /** Filename for the asset */
@@ -382,7 +386,9 @@ var DEFAULT_LRS_OPTIONS = {
   lrsWithCredentials: true,
   courseHomepage: "",
   autoDetectLrs: true,
-  employeeApiEndpoint: ""
+  employeeApiEndpoint: "",
+  lrsAuth: "",
+  lrsProxyEndpoint: ""
 };
 function generateLrsBridgeCode(options) {
   if (!options.enabled) {
@@ -394,6 +400,8 @@ function generateLrsBridgeCode(options) {
   const lrsEndpoint = options.lrsEndpoint || "";
   const courseHomepage = options.courseHomepage || "";
   const employeeApiEndpoint = options.employeeApiEndpoint || "";
+  const lrsAuth = options.lrsAuth || "";
+  const lrsProxyEndpoint = options.lrsProxyEndpoint || "";
   return `
   // ==========================================================================
   // PATCH-ADAMS LRS BRIDGE v2.2.0
@@ -416,6 +424,8 @@ function generateLrsBridgeCode(options) {
     var COURSE_HOMEPAGE = '${courseHomepage}';
     var AUTO_DETECT_LRS = ${options.autoDetectLrs ?? true};
     var EMPLOYEE_API_ENDPOINT = '${employeeApiEndpoint}';
+    var LRS_AUTH = '${lrsAuth}';
+    var LRS_PROXY_ENDPOINT = '${lrsProxyEndpoint}';
 
     // Bravais LRS endpoint pattern: https://lrs-{tenant}.bravais.com/XAPI/statements
     // Example: core-acme.bravais.com -> lrs-acme.bravais.com
@@ -2845,24 +2855,41 @@ function generateLrsBridgeCode(options) {
     }
 
     function sendViaDirectLRS(statement) {
+      // Use proxy endpoint if configured, otherwise direct LRS
+      var useProxy = LRS_PROXY_ENDPOINT && LRS_PROXY_ENDPOINT.length > 0;
+      var endpoint = useProxy ? LRS_PROXY_ENDPOINT : LRS_ENDPOINT;
+
+      if (!endpoint || endpoint.length === 0) {
+        warn('No LRS endpoint available');
+        LRS.stats.statementsFailed++;
+        return Promise.reject(new Error('No LRS endpoint'));
+      }
+
       return new Promise(function(resolve, reject) {
         var xhr = new XMLHttpRequest();
-        xhr.open('POST', LRS_ENDPOINT, true);
+        // POST to proxy (proxy handles PUT to LRS), POST to direct LRS
+        xhr.open('POST', endpoint, true);
 
-        // xAPI required headers (Bravais LRS requires version 1.0)
+        // xAPI required headers
         xhr.setRequestHeader('Content-Type', 'application/json');
         xhr.setRequestHeader('X-Experience-API-Version', '1.0');
 
-        if (LRS_WITH_CREDENTIALS) {
+        if (useProxy) {
+          // Proxy handles auth server-side, no auth headers needed
+          log('Sending via LRS proxy:', endpoint);
+        } else if (LRS_AUTH && LRS_AUTH.length > 0) {
+          xhr.setRequestHeader('Authorization', 'Basic ' + LRS_AUTH);
+          log('Using Basic Auth for LRS request');
+        } else if (LRS_WITH_CREDENTIALS) {
           xhr.withCredentials = true;
         }
 
         xhr.onreadystatechange = function() {
           if (xhr.readyState === 4) {
             if (xhr.status >= 200 && xhr.status < 300) {
-              log('Statement sent successfully:', statement.verb.display['en-US']);
+              log('Statement sent successfully:', statement.verb.display['en-US'], useProxy ? '(via proxy)' : '(direct)');
               LRS.stats.statementsSent++;
-              resolve({ sent: true, via: 'directLRS', status: xhr.status });
+              resolve({ sent: true, via: useProxy ? 'proxy' : 'directLRS', status: xhr.status });
             } else {
               warn('Statement send failed:', xhr.status, xhr.statusText);
               LRS.stats.statementsFailed++;
@@ -4208,7 +4235,9 @@ function buildJsBeforeOptions(config, metadata) {
     lrsEndpoint: lrsBridgeConfig.lrsEndpoint,
     lrsWithCredentials: lrsBridgeConfig.lrsWithCredentials,
     courseHomepage: lrsBridgeConfig.courseHomepage,
-    autoDetectLrs: lrsBridgeConfig.autoDetectLrs
+    autoDetectLrs: lrsBridgeConfig.autoDetectLrs,
+    lrsAuth: lrsBridgeConfig.lrsAuth,
+    lrsProxyEndpoint: lrsBridgeConfig.lrsProxyEndpoint
   };
   return {
     remoteUrl: `${config.remoteDomain}/${config.localFolders.js}/${config.jsBefore.filename}`,