@rpcbase/server 0.545.0 → 0.547.0

package/dist/index.js

@@ -5,11 +5,12 @@ import { createClient } from "redis";
 import { MongoClient } from "mongodb";
 import env from "@rpcbase/env";
 import { initApiClient, STATIC_RPCBASE_RTS_HYDRATION_DATA_KEY, RtsSsrRuntimeProvider, SsrErrorFallback, SSR_ERROR_STATE_GLOBAL_KEY, serializeSsrErrorState } from "@rpcbase/client";
+import { getMongoUrl } from "@rpcbase/db/mongo";
 import { posix, dirname, sep } from "path";
 import fs, { createReadStream, readFileSync } from "node:fs";
 import { createInterface } from "node:readline";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { g as getDerivedKey, r as resolveRtsRequestTenantId, i as isRtsRequestAuthorized, b as buildRtsAbilityFromRequest, n as normalizeRtsQueryOptions, a as runRtsQuery, c as runRtsCount } from "./queryExecutor-DTEFEB5Z.js";
+import { g as getDerivedKey, s as syncAuthenticatedSessionMiddleware, r as resolveRtsRequestTenantId, i as isRtsRequestAuthorized, b as buildRtsAbilityFromRequest, n as normalizeRtsQueryOptions, a as runRtsQuery, c as runRtsCount } from "./queryExecutor-Bzs0SJym.js";
 import httpProxy from "http-proxy-3";
 import fsPromises from "node:fs/promises";
 import inspector from "node:inspector";
@@ -3981,26 +3982,17 @@ process.env = {
 };
 const isProduction$1 = process.env.NODE_ENV === "production";
 const SESSION_MAX_AGE_S = 3600 * 24 * 60;
-const getMongoUrl = (serverEnv) => {
-  const explicitUrl = serverEnv.MONGODB_URL || serverEnv.MONGO_URL || serverEnv.MONGODB_URI || serverEnv.DB_URL;
-  if (explicitUrl) {
-    return explicitUrl;
+const getMongoSessionUrl = (serverEnv) => {
+  const appName = serverEnv.APP_NAME?.trim();
+  if (!appName) {
+    throw new Error("Missing APP_NAME (required to build MongoDB session store DB name)");
   }
-  if (serverEnv.DB_PORT) {
-    const host = serverEnv.DB_HOST ?? "localhost";
-    const appName = serverEnv.APP_NAME?.trim();
-    if (!appName) {
-      throw new Error("Missing APP_NAME (required to build MongoDB session store DB name)");
-    }
-    return `mongodb://${host}:${serverEnv.DB_PORT}/${appName}-sessions`;
-  }
-  return void 0;
+  return getMongoUrl(serverEnv, {
+    dbName: `${appName}-sessions`
+  });
 };
 const createMongoSessionStore = async (serverEnv) => {
-  const mongoUrl = getMongoUrl(serverEnv);
-  if (!mongoUrl) {
-    throw new Error("Missing REDIS_URL and Mongo connection details (MONGODB_URL/MONGO_URL/MONGODB_URI/DB_PORT)");
-  }
+  const mongoUrl = getMongoSessionUrl(serverEnv);
   console.log("Using MongoDB session store");
   const client2 = await MongoClient.connect(mongoUrl, {
     family: 4,
@@ -4074,6 +4066,9 @@ const initServer = async (app, serverEnv) => {
   if (!serverEnv.MASTER_KEY) {
     throw new Error("MASTER_KEY must be defined to derive the session secret");
   }
+  if (!serverEnv.RB_PROXY_SHARED_SECRET?.trim()) {
+    throw new Error("RB_PROXY_SHARED_SECRET must be defined");
+  }
   const sessionSecret = getDerivedKey(serverEnv.MASTER_KEY, "express_session_key");
   const redisUrl = serverEnv.REDIS_URL?.trim();
   let store;
@@ -4102,6 +4097,7 @@ const initServer = async (app, serverEnv) => {
     registerDevCoverageEndpoints(app);
   }
   app.use(sessionMiddleware);
+  app.use(syncAuthenticatedSessionMiddleware);
   return {
     sessionMiddleware
   };