@stackframe/stack-shared 2.6.33 → 2.6.34

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @stackframe/stack-shared
 
+## 2.6.34
+
+### Patch Changes
+
+- Bugfixes
+  - @stackframe/stack-sc@2.6.34
+
 ## 2.6.33
 
 ### Patch Changes

package/dist/interface/clientInterface.d.ts

@@ -37,7 +37,7 @@ export declare class StackClientInterface {
     protected _networkRetry<T>(cb: () => Promise<Result<T, any>>, session?: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<T>;
     protected _networkRetryException<T>(cb: () => Promise<T>, session?: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<T>;
     fetchNewAccessToken(refreshToken: RefreshToken): Promise<AccessToken | null>;
-    protected sendClientRequest(path: string, requestOptions: RequestInit, session: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<Response & {
+    sendClientRequest(path: string, requestOptions: RequestInit, session: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<Response & {
         usedTokens: {
             accessToken: AccessToken;
             refreshToken: RefreshToken | null;

package/dist/interface/clientInterface.js

@@ -88,7 +88,7 @@ export class StackClientInterface {
             if (globalVar.navigator && !globalVar.navigator.onLine) {
                 throw new Error("Failed to send Stack network request. It seems like you are offline. (window.navigator.onLine is falsy)", { cause: retriedResult.error });
             }
-            throw this._createNetworkError(retriedResult.error, session, requestType);
+            throw await this._createNetworkError(retriedResult.error, session, requestType);
         }
         return retriedResult.data;
     }

package/dist/schema-fields.d.ts

@@ -146,5 +146,7 @@ export declare const contactChannelValueSchema: yup.StringSchema<string | undefi
 export declare const contactChannelUsedForAuthSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const contactChannelIsVerifiedSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const contactChannelIsPrimarySchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
+export declare const basicAuthorizationHeaderSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
+export declare const neonAuthorizationHeaderSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare function yupDefinedWhen<S extends yup.AnyObject>(schema: S, triggerName: string, isValue: any): S;
 export {};

package/dist/schema-fields.js

@@ -1,9 +1,11 @@
 import * as yup from "yup";
 import { KnownErrors } from ".";
 import { isBase64 } from "./utils/bytes";
-import { StackAssertionError } from "./utils/errors";
+import { StackAssertionError, throwErr } from "./utils/errors";
+import { decodeBasicAuthorizationHeader } from "./utils/http";
 import { allProviders } from "./utils/oauth";
 import { deepPlainClone, omit } from "./utils/objects";
+import { isValidUrl } from "./utils/urls";
 import { isUuid } from "./utils/uuids";
 // eslint-disable-next-line no-restricted-syntax
 yup.addMethod(yup.string, "nonEmpty", function (message) {
@@ -160,18 +162,8 @@ export const adaptSchema = yupMixed();
  */
 export const urlSchema = yupString().test({
     name: 'url',
-    message: 'Invalid URL',
-    test: (value) => {
-        if (!value)
-            return true;
-        try {
-            new URL(value);
-            return true;
-        }
-        catch {
-            return false;
-        }
-    },
+    message: (params) => `${params.path} is not a valid URL`,
+    test: (value) => value == null || isValidUrl(value)
 });
 export const jsonSchema = yupMixed().nullable().defined().transform((value) => JSON.parse(JSON.stringify(value)));
 export const jsonStringSchema = yupString().test("json", (params) => `${params.path} is not valid JSON`, (value) => {
@@ -360,6 +352,23 @@ export const contactChannelValueSchema = yupString().when('type', {
 export const contactChannelUsedForAuthSchema = yupBoolean().meta({ openapiField: { description: 'Whether the contact channel is used for authentication. If this is set to `true`, the user will be able to sign in with the contact channel with password or OTP.', exampleValue: true } });
 export const contactChannelIsVerifiedSchema = yupBoolean().meta({ openapiField: { description: 'Whether the contact channel has been verified. If this is set to `true`, the contact channel has been verified to belong to the user.', exampleValue: true } });
 export const contactChannelIsPrimarySchema = yupBoolean().meta({ openapiField: { description: 'Whether the contact channel is the primary contact channel. If this is set to `true`, it will be used for authentication and notifications by default.', exampleValue: true } });
+// Headers
+export const basicAuthorizationHeaderSchema = yupString().test('is-basic-authorization-header', 'Authorization header must be in the format "Basic <base64>"', (value) => {
+    if (!value)
+        return true;
+    return decodeBasicAuthorizationHeader(value) !== null;
+});
+// Neon integration
+export const neonAuthorizationHeaderSchema = basicAuthorizationHeaderSchema.test('is-neon-authorization-header', 'Invalid client_id:client_secret values; did you use the correct values for the Neon integration?', (value) => {
+    if (!value)
+        return true;
+    const [clientId, clientSecret] = decodeBasicAuthorizationHeader(value) ?? throwErr(`Neon authz header invalid? This should've been validated by basicAuthorizationHeaderSchema: ${value}`);
+    for (const neonClientConfig of JSON.parse(process.env.STACK_NEON_INTEGRATION_CLIENTS_CONFIG || '[]')) {
+        if (clientId === neonClientConfig.client_id && clientSecret === neonClientConfig.client_secret)
+            return true;
+    }
+    return false;
+});
 // Utils
 export function yupDefinedWhen(schema, triggerName, isValue) {
     return schema.when(triggerName, {

package/dist/utils/http.d.ts

@@ -37,3 +37,5 @@ export declare const HTTP_METHODS: {
     };
 };
 export type HttpMethod = keyof typeof HTTP_METHODS;
+export declare function decodeBasicAuthorizationHeader(value: string): [string, string] | null;
+export declare function encodeBasicAuthorizationHeader(id: string, password: string): string;

package/dist/utils/http.js

@@ -1,3 +1,4 @@
+import { decodeBase64, encodeBase64, isBase64 } from "./bytes";
 export const HTTP_METHODS = {
     "GET": {
         safe: true,
@@ -36,3 +37,22 @@ export const HTTP_METHODS = {
         idempotent: false,
     },
 };
+export function decodeBasicAuthorizationHeader(value) {
+    const [type, encoded, ...rest] = value.split(' ');
+    if (rest.length > 0)
+        return null;
+    if (!encoded)
+        return null;
+    if (type !== 'Basic')
+        return null;
+    if (!isBase64(encoded))
+        return null;
+    const decoded = new TextDecoder().decode(decodeBase64(encoded));
+    const split = decoded.split(':');
+    return [split[0], split.slice(1).join(':')];
+}
+export function encodeBasicAuthorizationHeader(id, password) {
+    if (id.includes(':'))
+        throw new Error("Basic authorization header id cannot contain ':'");
+    return `Basic ${encodeBase64(new TextEncoder().encode(`${id}:${password}`))}`;
+}

package/dist/utils/urls.d.ts

@@ -1,4 +1,5 @@
 export declare function createUrlIfValid(...args: ConstructorParameters<typeof URL>): URL | null;
+export declare function isValidUrl(url: string): boolean;
 export declare function isLocalhost(urlOrString: string | URL): boolean;
 export declare function isRelative(url: string): boolean;
 export declare function getRelativePart(url: URL): string;

package/dist/utils/urls.js

@@ -7,6 +7,9 @@ export function createUrlIfValid(...args) {
         return null;
     }
 }
+export function isValidUrl(url) {
+    return !!createUrlIfValid(url);
+}
 export function isLocalhost(urlOrString) {
     const url = createUrlIfValid(urlOrString);
     if (!url)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackframe/stack-shared",
-  "version": "2.6.33",
+  "version": "2.6.34",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -50,7 +50,7 @@
     "oauth4webapi": "^2.10.3",
     "semver": "^7.6.3",
     "uuid": "^9.0.1",
-    "@stackframe/stack-sc": "2.6.33"
+    "@stackframe/stack-sc": "2.6.34"
   },
   "devDependencies": {
     "@simplewebauthn/types": "^11.0.0",