@rtsdk/topia 0.19.1 → 0.19.2

package/dist/index.cjs

@@ -41517,8 +41517,16 @@ class World extends SDKController {
     fetchDroppedAssetsBySceneDropId({ sceneDropId, uniqueName, }) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                if (!sceneDropId)
-                    throw this.errorHandler({ message: "A sceneDropId is required." });
+                // Validate sceneDropId to prevent dangerous queries that could match unintended assets
+                if (!sceneDropId ||
+                    typeof sceneDropId !== "string" ||
+                    sceneDropId.trim() === "" ||
+                    sceneDropId === "undefined" ||
+                    sceneDropId === "null") {
+                    throw this.errorHandler({
+                        message: "A valid sceneDropId is required. Received an empty, undefined, or invalid sceneDropId which could match unintended assets.",
+                    });
+                }
                 const response = yield this.topiaPublicApi().get(`/world/${this.urlSlug}/assets-with-scene-drop-id/${sceneDropId}${uniqueName ? `?uniqueName=${uniqueName}` : ""}`, this.requestOptions);
                 // create temp map and then update private property only once
                 const droppedAssets = [];

package/dist/index.d.ts

@@ -74,7 +74,7 @@ type DroppedAssetLinkType = {
     linkSamlQueryParams?: string;
 };
 
-type InteractiveCredentials$1 = {
+type InteractiveCredentials = {
     apiKey?: string;
     assetId?: string;
     interactiveNonce?: string;
@@ -88,22 +88,22 @@ type InteractiveCredentials$1 = {
 
 type AssetOptions = {
     attributes?: AssetInterface | undefined;
-    credentials?: InteractiveCredentials$1 | undefined;
+    credentials?: InteractiveCredentials | undefined;
 };
 type DroppedAssetOptions = {
     attributes?: DroppedAssetInterface | undefined;
-    credentials?: InteractiveCredentials$1 | undefined;
+    credentials?: InteractiveCredentials | undefined;
 };
 type UserOptions = {
-    credentials?: InteractiveCredentials$1 | undefined;
+    credentials?: InteractiveCredentials | undefined;
 };
 type VisitorOptions = {
     attributes?: VisitorInterface | undefined;
-    credentials?: InteractiveCredentials$1 | undefined;
+    credentials?: InteractiveCredentials | undefined;
 };
 type WorldOptions = {
     attributes?: WorldDetailsInterface | undefined;
-    credentials?: InteractiveCredentials$1 | undefined;
+    credentials?: InteractiveCredentials | undefined;
 };
 
 type ResponseType$1 = {
@@ -2218,7 +2218,7 @@ declare enum WorldActivityType {
 }
 
 interface SDKInterface {
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
     jwt?: string;
     requestOptions: object;
     topia: Topia;
@@ -2255,7 +2255,7 @@ interface AssetInterface extends SDKInterface {
 }
 type AssetOptionalInterface = {
     attributes?: AssetInterface | object;
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
 };
 
 interface DroppedAssetInterface extends AssetInterface {
@@ -2377,7 +2377,7 @@ interface DroppedAssetOptionalInterface {
         text?: string;
         urlSlug?: string;
     };
-    credentials?: InteractiveCredentials$1 | object;
+    credentials?: InteractiveCredentials | object;
 }
 interface UpdateBroadcastInterface {
     assetBroadcast?: boolean;
@@ -2469,7 +2469,7 @@ interface EcosystemInterface {
     incrementDataObjectValue(path: string, amount: number, options: object): Promise<void | ResponseType$1>;
 }
 interface EcosystemOptionalInterface {
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
 }
 
 interface SceneInterface {
@@ -2497,7 +2497,7 @@ interface SceneInterface {
 }
 type SceneOptionalInterface = {
     attributes?: SceneInterface | object;
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
 };
 
 interface FireToastInterface {
@@ -2545,7 +2545,7 @@ interface UserInterface {
     dataObject?: object | null;
 }
 interface UserOptionalInterface {
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
     profileId?: string | null;
     visitorId?: number | null;
     urlSlug?: string;
@@ -2621,7 +2621,7 @@ interface VisitorInterface extends SDKInterface {
 }
 interface VisitorOptionalInterface {
     attributes?: VisitorInterface | object;
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
 }
 interface MoveVisitorInterface {
     shouldTeleportVisitor: boolean;
@@ -2654,12 +2654,12 @@ interface WebRTCConnectorInterface {
     getTwilioConfig(): Promise<void | ResponseType$1>;
 }
 interface WebRTCConnectorOptionalInterface {
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
     twilioConfig?: object;
 }
 
 interface WorldActivityOptionalInterface {
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
 }
 interface MoveAllVisitorsInterface {
     shouldFetchVisitors?: boolean;
@@ -2749,13 +2749,13 @@ interface WorldInterface extends SDKInterface, WorldDetailsInterface {
 }
 interface WorldOptionalInterface {
     attributes?: WorldDetailsInterface | object;
-    credentials?: InteractiveCredentials$1;
+    credentials?: InteractiveCredentials;
 }
 interface WorldWebhooksInterface {
     webhooks: Array<WebhookInterface>;
 }
 
-type InteractiveCredentials = {
+type InteractiveCredentials$1 = {
     apiKey?: string;
     assetId?: string;
     interactiveNonce?: string;
@@ -2784,7 +2784,7 @@ interface InventoryItemInterface extends SDKInterface {
 }
 type InventoryItemOptionalInterface = {
     attributes?: InventoryItemInterface | object;
-    credentials?: InteractiveCredentials;
+    credentials?: InteractiveCredentials$1;
 };
 
 /**
@@ -2803,7 +2803,7 @@ interface UserInventoryItemInterface extends InventoryItemInterface {
 }
 type UserInventoryItemOptionalInterface = {
     attributes?: UserInventoryItemInterface | object;
-    credentials?: InteractiveCredentials;
+    credentials?: InteractiveCredentials$1;
 };
 
 /**
@@ -2859,11 +2859,11 @@ declare class Topia implements TopiaInterface {
  * ```
  */
 declare abstract class SDKController implements SDKInterface {
-    credentials: InteractiveCredentials$1 | undefined;
+    credentials: InteractiveCredentials | undefined;
     jwt?: string;
     requestOptions: object;
     topia: Topia;
-    constructor(topia: Topia, credentials?: InteractiveCredentials$1);
+    constructor(topia: Topia, credentials?: InteractiveCredentials);
     topiaPublicApi(): axios.AxiosInstance;
     errorHandler({ error, message, params, sdkMethod, }: {
         error?: Error | AxiosError | unknown;
@@ -3443,7 +3443,7 @@ declare class DroppedAssetFactory extends SDKController {
      *
      * @returns {Promise<DroppedAsset>} Returns a new DroppedAsset object with all properties already fetched.
      */
-    getWithUniqueName(uniqueName: string, urlSlug: string, interactiveSecret: string, credentials: InteractiveCredentials$1): Promise<DroppedAsset>;
+    getWithUniqueName(uniqueName: string, urlSlug: string, interactiveSecret: string, credentials: InteractiveCredentials): Promise<DroppedAsset>;
     /**
      * Drops an asset in a world and returns a new instance of DroppedAsset class with all properties.
      *
@@ -4025,4 +4025,4 @@ declare class WorldFactory extends SDKController {
     }>;
 }
 
-export { AnalyticType, AnimationMetaType, Asset, AssetFactory, AssetInterface, AssetOptionalInterface, AssetOptions, AssetType, DroppedAsset, DroppedAssetClickType, DroppedAssetFactory, DroppedAssetInterface, DroppedAssetLinkType, DroppedAssetMediaType, DroppedAssetMediaVolumeRadius, DroppedAssetOptionalInterface, DroppedAssetOptions, Ecosystem, EcosystemFactory, EcosystemInterface, EcosystemOptionalInterface, FireToastInterface, FrameType, InteractiveCredentials$1 as InteractiveCredentials, InventoryItemInterface, InventoryItemOptionalInterface, MoveAllVisitorsInterface, MoveVisitorInterface, OpenIframeInterface, RemoveClickableLinkInterface, ResponseType$1 as ResponseType, SDKController, SDKInterface, Scene, SceneFactory, SceneInterface, SceneOptionalInterface, SetClickableLinkMultiInterface, Topia, TopiaInterface, UpdateBroadcastInterface, UpdateClickTypeInterface, UpdateClickableLinkMultiInterface, UpdateDroppedAssetInterface, UpdateMediaTypeInterface, UpdatePrivateZoneInterface, User, UserFactory, UserInterface, UserInventoryItemInterface, UserInventoryItemOptionalInterface, UserOptionalInterface, UserOptions, Visitor, VisitorFactory, VisitorInterface, VisitorOptionalInterface, VisitorOptions, VisitorType, VisitorsToMoveArrayType, VisitorsToMoveType, WebRTCConnector, WebRTCConnectorFactory, WebRTCConnectorInterface, WebRTCConnectorOptionalInterface, WebhookInterface, World, WorldActivity, WorldActivityFactory, WorldActivityOptionalInterface, WorldActivityType, WorldDetailsInterface, WorldFactory, WorldInterface, WorldOptionalInterface, WorldOptions, WorldWebhooksInterface };
+export { AnalyticType, AnimationMetaType, Asset, AssetFactory, AssetInterface, AssetOptionalInterface, AssetOptions, AssetType, DroppedAsset, DroppedAssetClickType, DroppedAssetFactory, DroppedAssetInterface, DroppedAssetLinkType, DroppedAssetMediaType, DroppedAssetMediaVolumeRadius, DroppedAssetOptionalInterface, DroppedAssetOptions, Ecosystem, EcosystemFactory, EcosystemInterface, EcosystemOptionalInterface, FireToastInterface, FrameType, InteractiveCredentials, InventoryItemInterface, InventoryItemOptionalInterface, MoveAllVisitorsInterface, MoveVisitorInterface, OpenIframeInterface, RemoveClickableLinkInterface, ResponseType$1 as ResponseType, SDKController, SDKInterface, Scene, SceneFactory, SceneInterface, SceneOptionalInterface, SetClickableLinkMultiInterface, Topia, TopiaInterface, UpdateBroadcastInterface, UpdateClickTypeInterface, UpdateClickableLinkMultiInterface, UpdateDroppedAssetInterface, UpdateMediaTypeInterface, UpdatePrivateZoneInterface, User, UserFactory, UserInterface, UserInventoryItemInterface, UserInventoryItemOptionalInterface, UserOptionalInterface, UserOptions, Visitor, VisitorFactory, VisitorInterface, VisitorOptionalInterface, VisitorOptions, VisitorType, VisitorsToMoveArrayType, VisitorsToMoveType, WebRTCConnector, WebRTCConnectorFactory, WebRTCConnectorInterface, WebRTCConnectorOptionalInterface, WebhookInterface, World, WorldActivity, WorldActivityFactory, WorldActivityOptionalInterface, WorldActivityType, WorldDetailsInterface, WorldFactory, WorldInterface, WorldOptionalInterface, WorldOptions, WorldWebhooksInterface };

package/dist/index.js

@@ -41515,8 +41515,16 @@ class World extends SDKController {
     fetchDroppedAssetsBySceneDropId({ sceneDropId, uniqueName, }) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                if (!sceneDropId)
-                    throw this.errorHandler({ message: "A sceneDropId is required." });
+                // Validate sceneDropId to prevent dangerous queries that could match unintended assets
+                if (!sceneDropId ||
+                    typeof sceneDropId !== "string" ||
+                    sceneDropId.trim() === "" ||
+                    sceneDropId === "undefined" ||
+                    sceneDropId === "null") {
+                    throw this.errorHandler({
+                        message: "A valid sceneDropId is required. Received an empty, undefined, or invalid sceneDropId which could match unintended assets.",
+                    });
+                }
                 const response = yield this.topiaPublicApi().get(`/world/${this.urlSlug}/assets-with-scene-drop-id/${sceneDropId}${uniqueName ? `?uniqueName=${uniqueName}` : ""}`, this.requestOptions);
                 // create temp map and then update private property only once
                 const droppedAssets = [];

package/package.json

@@ -61,5 +61,5 @@
     "yalc-push": "yarn build && yalc publish --push --dev --no-scripts"
   },
   "type": "module",
-  "version": "0.19.01"
+  "version": "0.19.02"
 }