@putkoff/abstract-securefiles 0.0.34 → 0.0.43

package/src/file_utils/src/cookieFetch.ts

@@ -2,9 +2,37 @@
  * Cookie-authenticated API helpers.
  * All requests include credentials: 'include' so the browser sends the
  * session cookie (auth_session) automatically. No JWT tokens are used.
+ *
+ * API base URL resolution order (first truthy value wins):
+ *   1. window.__SECURE_FILES_API_BASE__   – runtime override (any bundler)
+ *   2. VITE_SECURE_FILES_API_BASE         – Vite env var
+ *   3. REACT_APP_SECURE_FILES_API_BASE    – Create React App env var
+ *   4. /api/secure-files                  – same-origin default
+ *
+ * Subdomain API example (set one of the above to the full origin + path):
+ *   VITE_SECURE_FILES_API_BASE=https://api.example.com/secure-files
  */
 
-const API_BASE = "/api/secure-files";
+function resolveApiBase(): string {
+  // 1. Runtime window config — works regardless of bundler
+  if (typeof window !== "undefined" && (window as any).__SECURE_FILES_API_BASE__) {
+    return String((window as any).__SECURE_FILES_API_BASE__).replace(/\/+$/, "");
+  }
+  // 2. Vite (import.meta.env is replaced at build time; guard with try for non-Vite builds)
+  try {
+    const v = (import.meta as any).env?.VITE_SECURE_FILES_API_BASE;
+    if (v) return String(v).replace(/\/+$/, "");
+  } catch { /* not a Vite build */ }
+  // 3. Create React App / plain Node
+  try {
+    const v = (process as any).env?.REACT_APP_SECURE_FILES_API_BASE;
+    if (v) return String(v).replace(/\/+$/, "");
+  } catch { /* process not defined */ }
+  // 4. Same-origin default
+  return "/api/secure-files";
+}
+
+const API_BASE = resolveApiBase();
 
 function apiUrl(path: string): string {
   const p = path.startsWith("/") ? path : `/${path}`;
@@ -41,8 +69,8 @@ export async function cookieFetch<T = unknown>(
 
 /**
  * Check whether the current session is valid.
- * Calls /userInfo which requires authentication; returns true if the user is
- * logged in, false otherwise (no exception thrown).
+ * Calls /userInfo which requires authentication; returns true if the user
+ * is logged in, false otherwise (no exception thrown).
  */
 export async function checkAuth(): Promise<boolean> {
   try {
@@ -58,7 +86,7 @@ export async function checkAuth(): Promise<boolean> {
 
 /**
  * Upload a single file using multipart/form-data with session-cookie auth.
- * @param file  The File object to upload.
+ * @param file     The File object to upload.
  * @param relPath  Optional relative path within the user's directory.
  */
 export async function cookieUpload(file: File, relPath = ""): Promise<unknown> {
@@ -76,3 +104,6 @@ export async function cookieUpload(file: File, relPath = ""): Promise<unknown> {
   if (!res.ok) throw new Error(`Upload failed: HTTP ${res.status}`);
   return res.json();
 }
+
+/** The resolved API base URL, exported for debugging / display purposes. */
+export const SECURE_FILES_API_BASE = API_BASE;

package/src/file_utils/src/upload_utils/src/upload_files.ts

@@ -1,4 +1,4 @@
-import { cookieUpload } from '../../../../file_utils/src/cookieFetch';
+import { cookieUpload } from './../../cookieFetch';
 
 interface UploadResponse {
   filepath: string;