@truvity/sdk 0.37.7 → 0.38.2

package/middlewares/csrf/csrf.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.spec.js","sourceRoot":"","sources":["../../../src/middlewares/csrf/csrf.spec.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,iCAA0D;AAC1D,8CAA6D;AAC7D,wDAA+F;AAE/F,MAAM,wBAAwB,GAAG,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC;AAElE,MAAM,0BAA0B,GAAG,CAAC,YAA2B,EAAE,EAAE,CAC/D,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CACvB,wBAAwB,CAAC;IACrB,EAAE,EAAE,YAAY,IAAI,IAAI;IACxB,IAAI,EAAE,GAAS,EAAE;QACb,IAAI,YAAY,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,YAAY,CAAC;IACxB,CAAC,CAAA;CACJ,CAAC,CACL,CAAC;AAEN,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAChD,uDAAuD,EACvD,CAAO,MAAM,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE,CAAC,IAAI,qBAAc,EAAE,CAAC,CAAC,CAAC;QAE5F,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACpC,IAAA,mCAAiB,EAAC;YACd,GAAG,EAAE,WAAW;YAChB,MAAM;YACN,OAAO,EAAE,EAAE;SACd,CAAC,CACL,CAAC;IACN,CAAC,CAAA,CACJ,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAC5D,qDAAqD,EACrD,CAAO,MAAM,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACpC,IAAA,mCAAiB,EAAC;YACd,GAAG,EAAE,WAAW;YAChB,MAAM;YACN,OAAO,EAAE;gBACL,cAAc,EAAE,KAAK;aACxB;SACJ,CAAC,CACL,CAAC;QAEF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC,CAAA,CACJ,CAAC;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAS,EAAE;QAC5C,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEpD,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAS,EAAE;QACvD,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;gBACd,YAAY,EAAE,uBAAuB;aACxC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAS,EAAE;QAC3D,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,8BAA8B,EAAE,IAAI;aACvC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACpC,IAAA,mCAAiB,EAAC;YACd,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACL,YAAY,EAAE,MAAM;aACvB;SACJ,CAAC,CACL,CAAC;IACN,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAS,EAAE;QACrE,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,MAAM,CACR,qBAAqB,CAAC;YAClB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,MAAM;SACjB,CAAC,CACL,CAAC,QAAQ,CAAC,aAAa,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACH,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,wBAAwB;aACzC;SACJ,CAAC,CAAC;IACP,CAAC,CAAA,CAAC,CAAC;AACP,CAAC,CAAC,CAAC","sourcesContent":["import { CsrfMiddleware, HttpTextResponse } from './csrf';\nimport { createFetcherWithMiddlewares } from '../middleware';\nimport { createFetcherArgs, createFetcherResp, createMockedFetcher } from '../middleware.spec';\n\nconst createCsrfHttpClientResp = (resp: HttpTextResponse) => resp;\n\nconst createMockedCsrfHttpClient = (responseText: string | null) =>\n    jest.fn().mockResolvedValue(\n        createCsrfHttpClientResp({\n            ok: responseText != null,\n            text: async () => {\n                if (responseText == null) throw new Error('Should fail');\n                return responseText;\n            },\n        }),\n    );\n\ndescribe('CSRF Token Middleware', () => {\n    it.each([['GET'], ['HEAD'], ['OPTIONS'], ['TRACE']])(\n        'should NOT attach CSRF token to safe HTTP method \"%s\"',\n        async (method) => {\n            const fetcher = createMockedFetcher();\n            const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [new CsrfMiddleware()]);\n\n            await fetcherWithMiddleware({\n                url: '/some/url',\n                method,\n            });\n\n            expect(fetcher.mock.calls.length).toEqual(1);\n            expect(fetcher.mock.lastCall[0]).toEqual(\n                createFetcherArgs({\n                    url: '/some/url',\n                    method,\n                    headers: {},\n                }),\n            );\n        },\n    );\n\n    it.each([['POST'], ['PUT'], ['DELETE'], ['PATCH'], ['CONNECT']])(\n        'should attach CSRF token to unsafe HTTP method \"%s\"',\n        async (method) => {\n            const fetcher = createMockedFetcher();\n            const csrfHttpClient = createMockedCsrfHttpClient('123');\n\n            const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n                new CsrfMiddleware({\n                    csrfHttpClient,\n                }),\n            ]);\n\n            await fetcherWithMiddleware({\n                url: '/some/url',\n                method,\n            });\n\n            expect(fetcher.mock.calls.length).toEqual(1);\n            expect(fetcher.mock.lastCall[0]).toEqual(\n                createFetcherArgs({\n                    url: '/some/url',\n                    method,\n                    headers: {\n                        'X-CSRF-Token': '123',\n                    },\n                }),\n            );\n\n            expect(csrfHttpClient.mock.calls.length).toEqual(1);\n            expect(csrfHttpClient.mock.lastCall[0]).toEqual('/auth/csrf');\n        },\n    );\n\n    it('should request token only once', async () => {\n        const fetcher = createMockedFetcher();\n        const csrfHttpClient = createMockedCsrfHttpClient('123');\n\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                csrfHttpClient,\n            }),\n        ]);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'POST',\n        });\n\n        expect(csrfHttpClient.mock.calls.length).toEqual(1);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'DELETE',\n        });\n\n        expect(csrfHttpClient.mock.calls.length).toEqual(1);\n    });\n\n    it('should use custom URL to issue CSRF token', async () => {\n        const fetcher = createMockedFetcher();\n        const csrfHttpClient = createMockedCsrfHttpClient('123');\n\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                csrfHttpClient,\n                csrfEndpoint: '/custom/csrf/endpoint',\n            }),\n        ]);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'POST',\n        });\n\n        expect(csrfHttpClient.mock.lastCall[0]).toEqual('/custom/csrf/endpoint');\n    });\n\n    it('should attach X-External header if configured', async () => {\n        const fetcher = createMockedFetcher();\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                attachExternalHeaderToRequests: true,\n            }),\n        ]);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'GET',\n        });\n\n        expect(fetcher.mock.calls.length).toEqual(1);\n        expect(fetcher.mock.lastCall[0]).toEqual(\n            createFetcherArgs({\n                url: '/some/url',\n                method: 'GET',\n                headers: {\n                    'X-External': 'true',\n                },\n            }),\n        );\n    });\n\n    it('should throw an error on invalid csrf API call response', async () => {\n        const fetcher = createMockedFetcher();\n        const csrfHttpClient = createMockedCsrfHttpClient(null);\n\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                csrfHttpClient,\n            }),\n        ]);\n\n        await expect(\n            fetcherWithMiddleware({\n                url: '/some/url',\n                method: 'POST',\n            }),\n        ).resolves.toMatchObject({\n            ok: false,\n            error: {\n                reason: 'unknown',\n                errorMessage: \"Can't issue CSRF token\",\n            },\n        });\n    });\n});\n"]}
+{"version":3,"file":"csrf.spec.js","sourceRoot":"","sources":["../../../src/middlewares/csrf/csrf.spec.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,8CAA6D;AAC7D,wDAA+F;AAC/F,iCAA0D;AAE1D,MAAM,wBAAwB,GAAG,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC;AAElE,MAAM,0BAA0B,GAAG,CAAC,YAA2B,EAAE,EAAE,CAC/D,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CACvB,wBAAwB,CAAC;IACrB,EAAE,EAAE,YAAY,IAAI,IAAI;IACxB,IAAI,EAAE,GAAS,EAAE;QACb,IAAI,YAAY,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,YAAY,CAAC;IACxB,CAAC,CAAA;CACJ,CAAC,CACL,CAAC;AAEN,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAChD,uDAAuD,EACvD,CAAO,MAAM,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE,CAAC,IAAI,qBAAc,EAAE,CAAC,CAAC,CAAC;QAE5F,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACpC,IAAA,mCAAiB,EAAC;YACd,GAAG,EAAE,WAAW;YAChB,MAAM;YACN,OAAO,EAAE,EAAE;SACd,CAAC,CACL,CAAC;IACN,CAAC,CAAA,CACJ,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAC5D,qDAAqD,EACrD,CAAO,MAAM,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACpC,IAAA,mCAAiB,EAAC;YACd,GAAG,EAAE,WAAW;YAChB,MAAM;YACN,OAAO,EAAE;gBACL,cAAc,EAAE,KAAK;aACxB;SACJ,CAAC,CACL,CAAC;QAEF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC,CAAA,CACJ,CAAC;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAS,EAAE;QAC5C,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEpD,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAS,EAAE;QACvD,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;gBACd,YAAY,EAAE,uBAAuB;aACxC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAS,EAAE;QAC3D,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,8BAA8B,EAAE,IAAI;aACvC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC;YACxB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACpC,IAAA,mCAAiB,EAAC;YACd,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACL,YAAY,EAAE,MAAM;aACvB;SACJ,CAAC,CACL,CAAC;IACN,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAS,EAAE;QACrE,MAAM,OAAO,GAAG,IAAA,qCAAmB,GAAE,CAAC;QACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,qBAAqB,GAAG,IAAA,yCAA4B,EAAC,OAAO,EAAE;YAChE,IAAI,qBAAc,CAAC;gBACf,cAAc;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,MAAM,CACR,qBAAqB,CAAC;YAClB,GAAG,EAAE,WAAW;YAChB,MAAM,EAAE,MAAM;SACjB,CAAC,CACL,CAAC,QAAQ,CAAC,aAAa,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACH,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,wBAAwB;aACzC;SACJ,CAAC,CAAC;IACP,CAAC,CAAA,CAAC,CAAC;AACP,CAAC,CAAC,CAAC","sourcesContent":["import { createFetcherWithMiddlewares } from '../middleware';\nimport { createFetcherArgs, createFetcherResp, createMockedFetcher } from '../middleware.spec';\nimport { CsrfMiddleware, HttpTextResponse } from './csrf';\n\nconst createCsrfHttpClientResp = (resp: HttpTextResponse) => resp;\n\nconst createMockedCsrfHttpClient = (responseText: string | null) =>\n    jest.fn().mockResolvedValue(\n        createCsrfHttpClientResp({\n            ok: responseText != null,\n            text: async () => {\n                if (responseText == null) throw new Error('Should fail');\n                return responseText;\n            },\n        }),\n    );\n\ndescribe('CSRF Token Middleware', () => {\n    it.each([['GET'], ['HEAD'], ['OPTIONS'], ['TRACE']])(\n        'should NOT attach CSRF token to safe HTTP method \"%s\"',\n        async (method) => {\n            const fetcher = createMockedFetcher();\n            const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [new CsrfMiddleware()]);\n\n            await fetcherWithMiddleware({\n                url: '/some/url',\n                method,\n            });\n\n            expect(fetcher.mock.calls.length).toEqual(1);\n            expect(fetcher.mock.lastCall[0]).toEqual(\n                createFetcherArgs({\n                    url: '/some/url',\n                    method,\n                    headers: {},\n                }),\n            );\n        },\n    );\n\n    it.each([['POST'], ['PUT'], ['DELETE'], ['PATCH'], ['CONNECT']])(\n        'should attach CSRF token to unsafe HTTP method \"%s\"',\n        async (method) => {\n            const fetcher = createMockedFetcher();\n            const csrfHttpClient = createMockedCsrfHttpClient('123');\n\n            const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n                new CsrfMiddleware({\n                    csrfHttpClient,\n                }),\n            ]);\n\n            await fetcherWithMiddleware({\n                url: '/some/url',\n                method,\n            });\n\n            expect(fetcher.mock.calls.length).toEqual(1);\n            expect(fetcher.mock.lastCall[0]).toEqual(\n                createFetcherArgs({\n                    url: '/some/url',\n                    method,\n                    headers: {\n                        'X-CSRF-Token': '123',\n                    },\n                }),\n            );\n\n            expect(csrfHttpClient.mock.calls.length).toEqual(1);\n            expect(csrfHttpClient.mock.lastCall[0]).toEqual('/auth/csrf');\n        },\n    );\n\n    it('should request token only once', async () => {\n        const fetcher = createMockedFetcher();\n        const csrfHttpClient = createMockedCsrfHttpClient('123');\n\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                csrfHttpClient,\n            }),\n        ]);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'POST',\n        });\n\n        expect(csrfHttpClient.mock.calls.length).toEqual(1);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'DELETE',\n        });\n\n        expect(csrfHttpClient.mock.calls.length).toEqual(1);\n    });\n\n    it('should use custom URL to issue CSRF token', async () => {\n        const fetcher = createMockedFetcher();\n        const csrfHttpClient = createMockedCsrfHttpClient('123');\n\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                csrfHttpClient,\n                csrfEndpoint: '/custom/csrf/endpoint',\n            }),\n        ]);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'POST',\n        });\n\n        expect(csrfHttpClient.mock.lastCall[0]).toEqual('/custom/csrf/endpoint');\n    });\n\n    it('should attach X-External header if configured', async () => {\n        const fetcher = createMockedFetcher();\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                attachExternalHeaderToRequests: true,\n            }),\n        ]);\n\n        await fetcherWithMiddleware({\n            url: '/some/url',\n            method: 'GET',\n        });\n\n        expect(fetcher.mock.calls.length).toEqual(1);\n        expect(fetcher.mock.lastCall[0]).toEqual(\n            createFetcherArgs({\n                url: '/some/url',\n                method: 'GET',\n                headers: {\n                    'X-External': 'true',\n                },\n            }),\n        );\n    });\n\n    it('should throw an error on invalid csrf API call response', async () => {\n        const fetcher = createMockedFetcher();\n        const csrfHttpClient = createMockedCsrfHttpClient(null);\n\n        const fetcherWithMiddleware = createFetcherWithMiddlewares(fetcher, [\n            new CsrfMiddleware({\n                csrfHttpClient,\n            }),\n        ]);\n\n        await expect(\n            fetcherWithMiddleware({\n                url: '/some/url',\n                method: 'POST',\n            }),\n        ).resolves.toMatchObject({\n            ok: false,\n            error: {\n                reason: 'unknown',\n                errorMessage: \"Can't issue CSRF token\",\n            },\n        });\n    });\n});\n"]}

package/middlewares/index.d.ts

@@ -1,3 +1,3 @@
-export * from './middleware';
 export * from './csrf';
+export * from './middleware';
 //# sourceMappingURL=index.d.ts.map

package/middlewares/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC"}

package/middlewares/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./middleware"), exports);
 __exportStar(require("./csrf"), exports);
+__exportStar(require("./middleware"), exports);
 //# sourceMappingURL=index.js.map

package/middlewares/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,yCAAuB","sourcesContent":["export * from './middleware';\nexport * from './csrf';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AACvB,+CAA6B","sourcesContent":["export * from './csrf';\nexport * from './middleware';\n"]}

package/package.json

@@ -1,27 +1,31 @@
 {
   "name": "@truvity/sdk",
-  "version": "0.37.7",
+  "version": "0.38.2",
   "repository": "https://github.com/truvity/sdk-typescript",
   "main": "./index.js",
   "types": "./index.d.ts",
   "scripts": {
-    "format": "prettier . --cache --write --log-level warn --ignore-path .gitignore --ignore-path .prettierignore",
+    "format": "run auto",
     "build": "tsc",
     "prepack": "tsc --project tsconfig.sdk.json && cp -rv dist/. .",
-    "test": "jest --config jest.config.ts"
+    "test": "jest --config jest.config.ts",
+    "lint": "biome check --fix",
+    "lint:ci": "biome ci --reporter=github",
+    "auto": "biome format --fix"
   },
   "dependencies": {
     "reflect-metadata": "^0.2.2",
     "uuid": "^10.0.0"
   },
   "devDependencies": {
+    "@biomejs/biome": "^2.0.6",
     "@jest/globals": "^29.7.0",
     "@types/jest": "^29.5.14",
     "@types/node": "^18.19.70",
     "@types/uuid": "^9.0.8",
     "jest": "^29.7.0",
     "jest-environment-jsdom": "^29.7.0",
-    "prettier": "^3.1.0",
+    "prettier": "^3.4.2",
     "ts-jest": "^29.3.4",
     "ts-loader": "^9.5.1",
     "typescript": "~5.7.2",