@stacksjs/defaults 0.75.66 → 0.75.67

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2,7 +2,7 @@
2
2
  "publisher": "Stacks",
3
3
  "name": "vscode-stacks",
4
4
  "displayName": "Stacks",
5
- "version": "0.75.66",
5
+ "version": "0.75.67",
6
6
  "description": "Stacks, built into VS Code: stx templates, pickier linting and formatting, encrypted env files, the dev server preview and every buddy command. No other extensions required.",
7
7
  "license": "MIT",
8
8
  "funding": "https://github.com/sponsors/chrisbbreuer",
package/package.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "name": "@stacksjs/defaults",
3
3
  "type": "module",
4
4
  "sideEffects": false,
5
- "version": "0.75.66",
5
+ "version": "0.75.67",
6
6
  "repository": {
7
7
  "type": "git",
8
8
  "url": "git+https://github.com/stacksjs/stacks.git",
@@ -55,7 +55,7 @@
55
55
  "dependencies": {
56
56
  "@iconify-json/f7": "^1.2.2",
57
57
  "@iconify-json/hugeicons": "^1.2.35",
58
- "@stacksjs/mobile": "^0.75.66",
58
+ "@stacksjs/mobile": "^0.75.67",
59
59
  "@stacksjs/sanitizer": "^0.2.348",
60
60
  "ts-qr-codes": "^0.1.8"
61
61
  }
package/routes/email.ts CHANGED
@@ -18,7 +18,7 @@
18
18
  * than processing unauthenticated requests.
19
19
  */
20
20
 
21
- import { route } from '@stacksjs/router'
21
+ import { clientAddress, route } from '@stacksjs/router'
22
22
  import {
23
23
  buildUnsubscribeUrl as _ignored, // import-side dep to ensure tree-shake doesn't drop the module
24
24
  handleMailgunWebhook,
@@ -104,10 +104,9 @@ route.post('/webhooks/email/postmark', async (req) => {
104
104
  }
105
105
  const rawBody = await req.text()
106
106
  const auth = req.headers.get('authorization')
107
- // Bun's Request exposes the client IP via the server's `requestIP` API,
108
- // not directly on the request. The framework's enhanced-request layer
109
- // surfaces it via _clientIp when available; fall back gracefully.
110
- const sourceIp = (req as unknown as { _clientIp?: string })._clientIp
107
+ // Postmark's address as trusted proxies report it. This read `_clientIp`,
108
+ // which nothing sets, so a configured `ipAllowlist` refused every delivery.
109
+ const sourceIp = clientAddress(req) ?? undefined
111
110
  const result = await handlePostmarkWebhook(rawBody, auth, sourceIp, {
112
111
  username,
113
112
  password,