@tangle-network/agent-interface 5.3.0 → 5.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/proxy-secrets.js
CHANGED
|
@@ -24,7 +24,7 @@ const pathSchema = z.string().max(2048).refine((path) => {
|
|
|
24
24
|
}, "path must be canonical ASCII, exact or a terminal /* subtree");
|
|
25
25
|
const list = (schema) => z.array(schema).min(1).max(CONTRACT_MAX_ARRAY_LENGTH).refine(unique, "selectors must be unique");
|
|
26
26
|
const envNameSchema = z.string().max(256).regex(/^[A-Za-z_][A-Za-z0-9_]*$/);
|
|
27
|
-
const headerSchema = z.string().max(256).regex(/^[!#$%&'*+.^_\x60|~0-9A-Za-z-]+$/).refine((name) => !["authorization", "proxy-authorization", "host", "connection", "content-length", "transfer-encoding", "trailer", "upgrade", "te"].includes(name.toLowerCase()), "use bearer/basic for Authorization; routing and framing headers cannot carry secrets");
|
|
27
|
+
const headerSchema = z.string().max(256).regex(/^[!#$%&'*+.^_\x60|~0-9A-Za-z-]+$/).refine((name) => !["authorization", "proxy-authorization", "proxy-authenticate", "host", "connection", "keep-alive", "proxy-connection", "content-length", "transfer-encoding", "trailer", "upgrade", "te"].includes(name.toLowerCase()), "use bearer/basic for Authorization; routing and framing headers cannot carry secrets");
|
|
28
28
|
/** Match complete components only. Selected header names are case-insensitive; duplicate fields
|
|
29
29
|
* are refused before coalescing. Query names are case-sensitive after one strict UTF-8 percent
|
|
30
30
|
* decode (+ means space); malformed encoding and duplicate decoded selector names are refused.
|
|
@@ -255,6 +255,60 @@
|
|
|
255
255
|
}
|
|
256
256
|
},
|
|
257
257
|
"valid": true
|
|
258
|
+
},
|
|
259
|
+
{
|
|
260
|
+
"name": "keep-alive-header",
|
|
261
|
+
"value": {
|
|
262
|
+
"envName": "REPORTS_TOKEN",
|
|
263
|
+
"secretRef": {
|
|
264
|
+
"kind": "secret-ref",
|
|
265
|
+
"key": "reporting-api"
|
|
266
|
+
},
|
|
267
|
+
"hosts": [
|
|
268
|
+
"reports.example.com"
|
|
269
|
+
],
|
|
270
|
+
"presentation": {
|
|
271
|
+
"type": "header",
|
|
272
|
+
"name": "Keep-Alive"
|
|
273
|
+
}
|
|
274
|
+
},
|
|
275
|
+
"valid": false
|
|
276
|
+
},
|
|
277
|
+
{
|
|
278
|
+
"name": "proxy-connection-header",
|
|
279
|
+
"value": {
|
|
280
|
+
"envName": "REPORTS_TOKEN",
|
|
281
|
+
"secretRef": {
|
|
282
|
+
"kind": "secret-ref",
|
|
283
|
+
"key": "reporting-api"
|
|
284
|
+
},
|
|
285
|
+
"hosts": [
|
|
286
|
+
"reports.example.com"
|
|
287
|
+
],
|
|
288
|
+
"presentation": {
|
|
289
|
+
"type": "header",
|
|
290
|
+
"name": "pRoXy-CoNnEcTiOn"
|
|
291
|
+
}
|
|
292
|
+
},
|
|
293
|
+
"valid": false
|
|
294
|
+
},
|
|
295
|
+
{
|
|
296
|
+
"name": "proxy-authenticate-header",
|
|
297
|
+
"value": {
|
|
298
|
+
"envName": "REPORTS_TOKEN",
|
|
299
|
+
"secretRef": {
|
|
300
|
+
"kind": "secret-ref",
|
|
301
|
+
"key": "reporting-api"
|
|
302
|
+
},
|
|
303
|
+
"hosts": [
|
|
304
|
+
"reports.example.com"
|
|
305
|
+
],
|
|
306
|
+
"presentation": {
|
|
307
|
+
"type": "header",
|
|
308
|
+
"name": "Proxy-Authenticate"
|
|
309
|
+
}
|
|
310
|
+
},
|
|
311
|
+
"valid": false
|
|
258
312
|
}
|
|
259
313
|
],
|
|
260
314
|
"wireCases": [
|