@protobase/server 0.26.4 → 0.26.6

package/dist/api-cors.js

@@ -16,7 +16,10 @@ const allowHeaders = [
 	"authorization",
 	"content-type",
 	"if-match",
-	"if-none-match"
+	"if-none-match",
+	"apikey",
+	"x-client-info",
+	"x-supabase-api-version"
 ];
 const exposeHeaders = [
 	"location",

package/dist/better-auth/authenticator.js

@@ -1,7 +1,7 @@
 import { jwtAuthenticator } from "../auth/jwt.js";
 import { noGlobalRole } from "./organizations/role-definitions.js";
-import { withTrustedApps } from "./app-tokens.js";
 import { cachedKeys } from "./jwks-cache.js";
+import { withTrustedApps } from "./app-tokens.js";
 //#region src/better-auth/authenticator.ts
 /** How the tokens of this Better Auth instance verify: its key set, and its issuer as both issuer and audience. */
 const betterAuthTokens = (options) => {

package/dist/create-admin.d.ts

@@ -60,7 +60,7 @@ export type CreateAdminInput = {
   formsDifficulty?: Difficulty;
   /** @internal The users comments name, mention and mail, which tests fake; from `auth` otherwise. */
   commentUsers?: CommentUsers;
-  /** @internal Verifies a user's token on `/realtime/v1` and gives its claims, which tests fake; `auth`'s tokens otherwise. */
+  /** @internal Verifies a user's token on `/realtime/v1` and gives its claims, which tests fake; those `/auth/v1` signs otherwise. */
   verifyToken?: (token: string) => Promise<JWTPayload>;
   /**
    * The host's WebSocket upgrade, such as `@hono/node-server`'s, with which an app with keys and live resources serves

package/dist/create-admin.js

@@ -14,13 +14,13 @@ import { apiCors, readCorsOrigins } from "./api-cors.js";
 import { apiKeySettings } from "./api-keys/api-key-settings.js";
 import { apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { jwtVerifier } from "./auth/jwt.js";
+import { realtimeApp } from "./realtime/realtime-app.js";
 import { readAppName } from "./app-name.js";
 import { goTruePath } from "./gotrue/keys.js";
 import { authBasePath } from "./better-auth/auth-base-path.js";
-import { betterAuthTokens } from "./better-auth/authenticator.js";
-import { realtimeApp } from "./realtime/realtime-app.js";
 import { organizationRoutes } from "./better-auth/organizations/admin-routes.js";
 import { statusRoute } from "./better-auth/status-route.js";
+import { goTrueTokens } from "./gotrue/access-tokens.js";
 import { goTrueRoutes } from "./gotrue/routes.js";
 import { changesSchema } from "./changes/events-options.js";
 import { appOrigin } from "./comments/app-origin.js";
@@ -223,11 +223,13 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	if (corsOrigins !== void 0 || ownOrigins.length > 1) {
 		const answering = [authBasePath, ...Object.entries(apiFunctions).filter(([, fn]) => fn.options.cors).map(([name]) => `${systemPath}/functions/${name}`)];
 		const skip = (path) => answering.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
-		app.use(`${systemPath}/*`, apiCors({
+		const cors = apiCors({
 			own: ownOrigins,
 			allowed: corsOrigins ?? [],
 			skip
-		}));
+		});
+		app.use(`${systemPath}/*`, cors);
+		if (auth && !"/auth/v1".startsWith(`${systemPath}/`)) app.use(`${goTruePath}/*`, cors);
 	}
 	if (auth) {
 		app.route(authBasePath, statusRoute(auth, {
@@ -278,7 +280,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	});
 	if (appModels.some((model) => model.live)) app.route(systemPath || "/", guarded((live) => void live.route("/", liveRoutes(feed, (session) => visibleNotices(deps, session))), withAnonymous(authenticate, options.roles)));
 	if (upgradeWebSocket && (apiKeys.publishable || apiKeys.secret)) {
-		const verify = verifyToken ?? (auth ? jwtVerifier(betterAuthTokens({ auth })) : () => Promise.reject(unauthorized("This app signs no user tokens")));
+		const verify = verifyToken ?? (auth ? jwtVerifier(goTrueTokens({ auth })) : () => Promise.reject(unauthorized("This app signs no user tokens")));
 		app.route("/realtime/v1", realtimeApp({
 			deps,
 			feed,

package/dist/gotrue/user-routes.js

@@ -2,10 +2,10 @@ import { effectiveSignInPolicy } from "../better-auth/sign-in-policy.js";
 import { readSignInPolicy } from "../better-auth/policy-store.js";
 import { goTrueUser, userMetadata } from "./user-json.js";
 import { checkNewAccountPassword } from "../better-auth/new-account-password.js";
+import { goTrueTokens } from "./access-tokens.js";
 import { GoTrueError } from "./errors.js";
 import { readBody } from "./request-body.js";
 import { accessClaimsOf } from "./bearer.js";
-import { goTrueTokens } from "./access-tokens.js";
 import { Hono } from "hono";
 import * as z$1 from "zod";
 //#region src/gotrue/user-routes.ts

package/dist/index.js

@@ -26,8 +26,6 @@ import { parseRoles } from "./better-auth/parse-roles.js";
 import { readOperatorSettings } from "./better-auth/operator-provider.js";
 import { readPlatformSignIn } from "./better-auth/platform-sign-in.js";
 import { createAuth, normalizeRoles } from "./better-auth/create-auth.js";
-import { withTrustedApps } from "./better-auth/app-tokens.js";
-import { betterAuthAuthenticator, betterAuthTokens } from "./better-auth/authenticator.js";
 import { addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
 import { createUser, deleteUser, hasUsers, listUsers, roleChoices, setUserBanned, setUserRole } from "./better-auth/users.js";
 import { changesMigration, checkChanges, migrationCommand } from "./changes/capture-schema.js";
@@ -55,6 +53,8 @@ import { handleDroppedConnections } from "./dropped-connections.js";
 import { configExports } from "./resource-source.js";
 import { checkViewQueries } from "./check-view-queries.js";
 import { defineConfig, mergeConfig } from "./project-config.js";
+import { withTrustedApps } from "./better-auth/app-tokens.js";
+import { betterAuthAuthenticator, betterAuthTokens } from "./better-auth/authenticator.js";
 import { issueToken, maxTokenTtlSeconds } from "./better-auth/tokens.js";
 import { authSchemaMigration, checkAuthSchema } from "./better-auth/auth-schema.js";
 import { checkComputed, computedMigration } from "./computed/computed-schema.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.26.4",
+  "version": "0.26.6",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -32,9 +32,9 @@
   "dependencies": {
     "@better-auth/passkey": "^1.7.7",
     "@better-auth/sso": "^1.7.7",
-    "@protobase/layout": "0.26.4",
-    "@protobase/query": "0.26.4",
-    "@protobase/schema": "0.26.4",
+    "@protobase/layout": "0.26.6",
+    "@protobase/query": "0.26.6",
+    "@protobase/schema": "0.26.6",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",