@putkoff/abstract-securefiles 0.0.34 → 0.0.43

package/dist/FileHandlers/imports.d.ts

@@ -1,4 +1,4 @@
 export type { QueuedFile, FileItem, FileTableProps, UploadProps, ShareModalProps, FileRowProps } from './../imports';
-export { CloudArrowUpIcon, currentUsername, Button, Checkbox, Input, Spinner, useEffect, useRef, useState, useCallback, ClipboardIcon, createPortal, fetchSharePatch, } from './../imports';
+export { CloudArrowUpIcon, currentUsername, Button, Checkbox, Input, Spinner, useEffect, useRef, useState, useCallback, ClipboardIcon, createPortal, fetchSharePatch } from './../imports';
 export { useFiles } from './../hooks';
 export { downloadFile, uploadFiles } from './../file_utils';

package/dist/file_utils/src/cookieFetch.d.ts

@@ -2,6 +2,15 @@
  * Cookie-authenticated API helpers.
  * All requests include credentials: 'include' so the browser sends the
  * session cookie (auth_session) automatically. No JWT tokens are used.
+ *
+ * API base URL resolution order (first truthy value wins):
+ *   1. window.__SECURE_FILES_API_BASE__   – runtime override (any bundler)
+ *   2. VITE_SECURE_FILES_API_BASE         – Vite env var
+ *   3. REACT_APP_SECURE_FILES_API_BASE    – Create React App env var
+ *   4. /api/secure-files                  – same-origin default
+ *
+ * Subdomain API example (set one of the above to the full origin + path):
+ *   VITE_SECURE_FILES_API_BASE=https://api.example.com/secure-files
  */
 /**
  * Generic JSON fetch with session-cookie auth.
@@ -10,13 +19,15 @@
 export declare function cookieFetch<T = unknown>(path: string, body?: unknown, method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE"): Promise<T>;
 /**
  * Check whether the current session is valid.
- * Calls /userInfo which requires authentication; returns true if the user is
- * logged in, false otherwise (no exception thrown).
+ * Calls /userInfo which requires authentication; returns true if the user
+ * is logged in, false otherwise (no exception thrown).
  */
 export declare function checkAuth(): Promise<boolean>;
 /**
  * Upload a single file using multipart/form-data with session-cookie auth.
- * @param file  The File object to upload.
+ * @param file     The File object to upload.
  * @param relPath  Optional relative path within the user's directory.
  */
 export declare function cookieUpload(file: File, relPath?: string): Promise<unknown>;
+/** The resolved API base URL, exported for debugging / display purposes. */
+export declare const SECURE_FILES_API_BASE: string;

package/dist/index.cjs

@@ -292,8 +292,39 @@ async function patchFileSetting(fileId, field, value) {
  * Cookie-authenticated API helpers.
  * All requests include credentials: 'include' so the browser sends the
  * session cookie (auth_session) automatically. No JWT tokens are used.
+ *
+ * API base URL resolution order (first truthy value wins):
+ *   1. window.__SECURE_FILES_API_BASE__   – runtime override (any bundler)
+ *   2. VITE_SECURE_FILES_API_BASE         – Vite env var
+ *   3. REACT_APP_SECURE_FILES_API_BASE    – Create React App env var
+ *   4. /api/secure-files                  – same-origin default
+ *
+ * Subdomain API example (set one of the above to the full origin + path):
+ *   VITE_SECURE_FILES_API_BASE=https://api.example.com/secure-files
  */
-const API_BASE = "/api/secure-files";
+function resolveApiBase() {
+    // 1. Runtime window config — works regardless of bundler
+    if (typeof window !== "undefined" && window.__SECURE_FILES_API_BASE__) {
+        return String(window.__SECURE_FILES_API_BASE__).replace(/\/+$/, "");
+    }
+    // 2. Vite (import.meta.env is replaced at build time; guard with try for non-Vite builds)
+    try {
+        const v = undefined?.VITE_SECURE_FILES_API_BASE;
+        if (v)
+            return String(v).replace(/\/+$/, "");
+    }
+    catch { /* not a Vite build */ }
+    // 3. Create React App / plain Node
+    try {
+        const v = process.env?.REACT_APP_SECURE_FILES_API_BASE;
+        if (v)
+            return String(v).replace(/\/+$/, "");
+    }
+    catch { /* process not defined */ }
+    // 4. Same-origin default
+    return "/api/secure-files";
+}
+const API_BASE = resolveApiBase();
 function apiUrl(path) {
     const p = path.startsWith("/") ? path : `/${path}`;
     return `${API_BASE}${p}`;
@@ -321,8 +352,8 @@ async function cookieFetch(path, body, method) {
 }
 /**
  * Check whether the current session is valid.
- * Calls /userInfo which requires authentication; returns true if the user is
- * logged in, false otherwise (no exception thrown).
+ * Calls /userInfo which requires authentication; returns true if the user
+ * is logged in, false otherwise (no exception thrown).
  */
 async function checkAuth() {
     try {
@@ -338,7 +369,7 @@ async function checkAuth() {
 }
 /**
  * Upload a single file using multipart/form-data with session-cookie auth.
- * @param file  The File object to upload.
+ * @param file     The File object to upload.
  * @param relPath  Optional relative path within the user's directory.
  */
 async function cookieUpload(file, relPath = "") {