@rubytech/create-maxy 1.0.678 → 1.0.680

package/payload/server/maxy-edge.js

@@ -1,9 +1,11 @@
 import {
   canAccessAdmin,
+  describeRemoteSession,
   newCorrId,
+  parseCookieValue,
   sanitizeClientCorrId,
   vncLog
-} from "./chunk-5YIXIF6C.js";
+} from "./chunk-3RBKKDHC.js";
 
 // server/maxy-edge.ts
 import { createServer, request as httpRequest } from "http";
@@ -61,15 +63,18 @@ function handleUpgrade(req, clientSocket, head, opts) {
   const originHeader = headerString(req.headers.origin);
   const remote = req.socket.remoteAddress;
   const xff = headerString(req.headers["x-forwarded-for"]);
+  const cookieHeader = headerString(req.headers.cookie);
   const decision = canAccessAdmin({
     host: hostHeader,
     remoteAddress: remote,
     xForwardedFor: xff,
-    cookieHeader: headerString(req.headers.cookie),
+    cookieHeader,
     isPublicHost: opts.isPublicHost
   });
   if (!decision.allow) {
     const status = decision.reason === "public-host" ? 404 : 401;
+    const rawToken = parseCookieValue(cookieHeader, "__remote_session");
+    const tokenInfo = describeRemoteSession(rawToken);
     vncLog("ws-upgrade", {
       corrId,
       clientCorrId: clientCorrId ?? null,
@@ -78,7 +83,10 @@ function handleUpgrade(req, clientSocket, head, opts) {
       ip: remote,
       xff: xff ?? null,
       origin: originHeader ?? null,
-      host: hostHeader
+      host: hostHeader,
+      cookieHeaderPresent: cookieHeader != null && cookieHeader.length > 0,
+      tokenPresent: tokenInfo.present,
+      tokenExpired: tokenInfo.expired
     });
     writeStatusAndDestroy(clientSocket, status, decision.reason === "public-host" ? "Not Found" : "Unauthorized");
     return;