@spinajs/rbac-http 2.0.485 → 2.0.487

package/lib/mjs/route-args.js

@@ -4,8 +4,14 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
 import { RouteArgs, ParameterType } from '@spinajs/http';
 import { Injectable } from '@spinajs/di';
+import { Config } from '@spinajs/configuration';
+import { sessionCookieName } from '@spinajs/rbac';
+import * as cs from 'cookie-signature';
 let UserArg = class UserArg extends RouteArgs {
     get SupportedType() {
         return ParameterType.Other;
@@ -30,6 +36,41 @@ SessionArg = __decorate([
     Injectable()
 ], SessionArg);
 export { SessionArg };
+/**
+ * Verified session id from the session cookie, or `null`.
+ *
+ * `@Cookie(true) ssid` hardcodes the cookie NAME to the parameter name, so a
+ * deployment that renames the cookie — or turns on the `__Host-` prefix, which
+ * changes the name by definition — silently stopped every controller that read
+ * the id that way. This resolves the configured name at request time and
+ * verifies the signature exactly as the session middleware does.
+ */
+let SessionIdArg = class SessionIdArg extends RouteArgs {
+    get SupportedType() {
+        return ParameterType.Other;
+    }
+    async extract(callData, _args, _param, req) {
+        const name = sessionCookieName(this.SessionCookieConfig);
+        const raw = req.cookies?.[name];
+        // Same two shapes the middleware accepts: signed by hand ( stays in
+        // `cookies` ) or signed by express ( moved to `signedCookies`, already
+        // unsigned by cookie-parser ).
+        const unsigned = raw ? cs.unsign(raw, this.CookieSecret) : req.signedCookies?.[name] ?? false;
+        return { CallData: callData, Args: unsigned === false ? null : unsigned };
+    }
+};
+__decorate([
+    Config('rbac.session.cookie', {}),
+    __metadata("design:type", Object)
+], SessionIdArg.prototype, "SessionCookieConfig", void 0);
+__decorate([
+    Config('http.cookie.secret'),
+    __metadata("design:type", String)
+], SessionIdArg.prototype, "CookieSecret", void 0);
+SessionIdArg = __decorate([
+    Injectable()
+], SessionIdArg);
+export { SessionIdArg };
 let CurrentSessionArg = class CurrentSessionArg extends RouteArgs {
     get SupportedType() {
         return ParameterType.Other;

package/lib/mjs/route-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-args.js","sourceRoot":"","sources":["../../src/route-args.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,SAAS,EAAmB,aAAa,EAAc,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIlC,IAAM,OAAO,GAAb,MAAM,OAAQ,SAAQ,SAAS;IACpC,IAAW,aAAa;QACtB,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAE,KAAgB,EAAE,MAAuB,EAAE,GAAY;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;CACF,CAAA;AARY,OAAO;IADnB,UAAU,EAAE;GACA,OAAO,CAQnB;;AAGM,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,SAAS;IACvC,IAAI,aAAa;QACf,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IACM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAG,KAAgB,EAAE,KAAsB,EAAE,GAAY;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAClH,CAAC;CACF,CAAA;AAPY,UAAU;IADtB,UAAU,EAAE;GACA,UAAU,CAOtB;;AAGM,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,SAAS;IAC9C,IAAI,aAAa;QACf,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IACM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAE,KAAgB,EAAE,MAAuB,EAAE,GAAY;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC;CACF,CAAA;AAPY,iBAAiB;IAD7B,UAAU,EAAE;GACA,iBAAiB,CAO7B"}
+{"version":3,"file":"route-args.js","sourceRoot":"","sources":["../../src/route-args.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAmB,aAAa,EAAc,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAwB,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAIhC,IAAM,OAAO,GAAb,MAAM,OAAQ,SAAQ,SAAS;IACpC,IAAW,aAAa;QACtB,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAE,KAAgB,EAAE,MAAuB,EAAE,GAAY;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;CACF,CAAA;AARY,OAAO;IADnB,UAAU,EAAE;GACA,OAAO,CAQnB;;AAGM,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,SAAS;IACvC,IAAI,aAAa;QACf,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IACM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAG,KAAgB,EAAE,KAAsB,EAAE,GAAY;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAClH,CAAC;CACF,CAAA;AAPY,UAAU;IADtB,UAAU,EAAE;GACA,UAAU,CAOtB;;AAED;;;;;;;;GAQG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,SAAS;IAOzC,IAAI,aAAa;QACf,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAE,KAAgB,EAAE,MAAuB,EAAE,GAAY;QAChG,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAuB,CAAC;QAEtD,oEAAoE;QACpE,uEAAuE;QACvE,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAG,GAAW,CAAC,aAAa,EAAE,CAAC,IAAI,CAAgC,IAAI,KAAK,CAAC;QAEvI,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC;CACF,CAAA;AApBW;IADT,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC;;yDACkB;AAG1C;IADT,MAAM,CAAC,oBAAoB,CAAC;;kDACE;AALpB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAsBxB;;AAGM,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,SAAS;IAC9C,IAAI,aAAa;QACf,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IACM,KAAK,CAAC,OAAO,CAAC,QAAoB,EAAE,KAAgB,EAAE,MAAuB,EAAE,GAAY;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC;CACF,CAAA;AAPY,iBAAiB;IAD7B,UAAU,EAAE;GACA,iBAAiB,CAO7B"}