@tstdl/base 0.93.112 → 0.93.113

package/api/server/api-request-token.provider.js

@@ -4,13 +4,14 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+import { InvalidTokenError } from '../../errors/invalid-token.error.js';
 import { Singleton } from '../../injector/decorators.js';
 import { isNull } from '../../utils/type-guards.js';
 export class ApiRequestTokenProvider {
     async getToken(data) {
         const token = await this.tryGetToken(data);
         if (isNull(token)) {
-            throw new Error('No token available for request');
+            throw new InvalidTokenError('No token available for request');
         }
         return token;
     }

package/authentication/server/authentication.api-controller.d.ts

@@ -44,7 +44,7 @@ export declare class AuthenticationApiController<AdditionalTokenPayload extends
     /**
      * End a session.
      * @param request The request context.
-     * @returns 'ok' if the session was ended.
+     * @returns 'ok'
      */
     endSession({ request, getAuditor }: ApiRequestContext<AuthenticationApiDefinition<AdditionalTokenPayload, AuthenticationData, AdditionalInitSecretResetData>, 'endSession'>): Promise<ApiServerResult<AuthenticationApiDefinition<AdditionalTokenPayload, AuthenticationData, AdditionalInitSecretResetData>, 'endSession'>>;
     changeSecret({ parameters, getAuditor }: ApiRequestContext<AuthenticationApiDefinition<AdditionalTokenPayload, AuthenticationData, AdditionalInitSecretResetData>, 'changeSecret'>): Promise<ApiServerResult<AuthenticationApiDefinition<AdditionalTokenPayload, AuthenticationData, AdditionalInitSecretResetData>, 'changeSecret'>>;

package/authentication/server/authentication.api-controller.js

@@ -69,7 +69,7 @@ let AuthenticationApiController = class AuthenticationApiController {
     /**
      * End a session.
      * @param request The request context.
-     * @returns 'ok' if the session was ended.
+     * @returns 'ok'
      */
     async endSession({ request, getAuditor }) {
         let sessionId;
@@ -85,10 +85,12 @@ let AuthenticationApiController = class AuthenticationApiController {
                 sessionId = refreshToken.payload.session;
             }
             catch {
-                throw error;
+                // ignore
             }
         }
-        await this.authenticationService.endSession(sessionId, await getAuditor());
+        if (isDefined(sessionId)) {
+            await this.authenticationService.endSession(sessionId, await getAuditor());
+        }
         const result = 'ok';
         return new HttpServerResponse({
             cookies: {

package/authentication/server/helper.js

@@ -22,12 +22,15 @@ export function tryGetAuthorizationTokenStringFromRequest(request, cookieName =
     const authorizationString = (isArray(headerValue) ? headerValue[0] : headerValue)
         ?? request.cookies.tryGet(cookieName);
     if (isDefined(authorizationString)) {
-        const authorizationSchemeEnd = authorizationString.indexOf(' ');
-        const authorizationScheme = authorizationString.slice(0, authorizationSchemeEnd).trim().toLowerCase();
+        const spaceIndex = authorizationString.indexOf(' ');
+        if (spaceIndex == -1) {
+            return authorizationString;
+        }
+        const authorizationScheme = authorizationString.slice(0, spaceIndex).trim().toLowerCase();
         if (authorizationScheme != 'bearer') {
             throw new BadRequestError(`Unsupported authorization scheme "${authorizationScheme}".`);
         }
-        const authorization = authorizationString.slice(authorizationSchemeEnd).trim();
+        const authorization = authorizationString.slice(spaceIndex).trim();
         return authorization;
     }
     return undefined;

package/authentication/tests/helper.test.js

@@ -17,6 +17,17 @@ describe('authentication helper', () => {
         };
         expect(tryGetAuthorizationTokenStringFromRequest(request)).toBe('my-token');
     });
+    test('tryGetAuthorizationTokenStringFromRequest should extract token without scheme from header', () => {
+        const request = {
+            headers: {
+                tryGet: (name) => name == 'Authorization' ? 'my-token' : undefined,
+            },
+            cookies: {
+                tryGet: () => undefined,
+            },
+        };
+        expect(tryGetAuthorizationTokenStringFromRequest(request)).toBe('my-token');
+    });
     test('tryGetAuthorizationTokenStringFromRequest should extract bearer token from cookie', () => {
         const request = {
             headers: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tstdl/base",
-  "version": "0.93.112",
+  "version": "0.93.113",
   "author": "Patrick Hein",
   "publishConfig": {
     "access": "public"
@@ -152,7 +152,7 @@
   },
   "peerDependencies": {
     "@genkit-ai/google-genai": "^1.28",
-    "@google-cloud/storage": "^7.18",
+    "@google-cloud/storage": "^7.19",
     "@google/genai": "^1.40",
     "@toon-format/toon": "^2.1.0",
     "@tstdl/angular": "^0.93",