@tutti-os/auth-bridge 0.0.189 → 0.0.191

package/README.md

@@ -21,12 +21,17 @@ import { createTuttiNodeAuthClient } from "@tutti-os/auth-bridge/node";
 
 const auth = createTuttiNodeAuthClient({
   authJsonPath,
-  appCallbackUrl
+  appCallbackUrl,
+  accountHeaders: { "x-environment-lane": "example" }
 });
 
 const { session, user } = await auth.login();
 ```
 
+`accountHeaders` adds host-owned headers to Account API requests. The bridge
+always owns and overwrites its JSON content negotiation and Desktop session
+cookie headers.
+
 ## Local Desktop Callback
 
 The Node bridge starts a loopback HTTP server for desktop sign-in. New desktop OAuth completions use:

package/dist/node.d.ts

@@ -13,6 +13,7 @@ interface TuttiNodeAuthClientOptions {
     hostname?: string;
     loginIdleTimeoutMs?: number;
     loginMaxTimeoutMs?: number;
+    accountHeaders?: Readonly<Record<string, string>>;
 }
 interface TuttiNodeAuthClient {
     login: () => Promise<{

package/dist/node.js

@@ -46,6 +46,7 @@ function createTuttiNodeAuthClient(options) {
     idleTimeoutMs,
     positiveMs(options.loginMaxTimeoutMs, DEFAULT_LOGIN_MAX_TIMEOUT_MS)
   );
+  const accountHeaders = { ...options.accountHeaders };
   async function readSession() {
     return await readAuthJson(authJsonPath);
   }
@@ -57,7 +58,11 @@ function createTuttiNodeAuthClient(options) {
     if (!session) {
       return null;
     }
-    const user = await fetchUserInfo(accountBaseUrl, session.cookie);
+    const user = await fetchUserInfo(
+      accountBaseUrl,
+      session.cookie,
+      accountHeaders
+    );
     if (!user) {
       return null;
     }
@@ -86,6 +91,7 @@ function createTuttiNodeAuthClient(options) {
         hostname: options.hostname?.trim() || hostname()
       });
       const pending = {
+        accountHeaders,
         accountBaseUrl,
         appId,
         appCallbackUrl,
@@ -120,7 +126,12 @@ function createTuttiNodeAuthClient(options) {
     logout: async () => {
       const session = await readSession();
       if (session) {
-        await logoutSession(accountBaseUrl, appId, session.cookie);
+        await logoutSession(
+          accountBaseUrl,
+          appId,
+          session.cookie,
+          accountHeaders
+        );
       }
       await clearSession();
     },
@@ -357,7 +368,8 @@ async function completePendingLogin(input, transferCode) {
   const sessionId = await redeemDesktopTransferCode(input, transferCode);
   const user = await fetchUserInfo(
     input.accountBaseUrl,
-    buildSessionCookie(sessionId)
+    buildSessionCookie(sessionId),
+    input.accountHeaders
   );
   if (!user) {
     throw new Error("Failed to load user info after login");
@@ -381,16 +393,12 @@ async function waitForCompletion(input, completion) {
     }
   }
 }
-async function fetchUserInfo(accountBaseUrl, cookie) {
+async function fetchUserInfo(accountBaseUrl, cookie, accountHeaders) {
   const response = await fetch(
     buildAccountUrl(accountBaseUrl, "/user/v1/user_info"),
     {
       method: "POST",
-      headers: {
-        Accept: "application/json",
-        "Content-Type": "application/json",
-        Cookie: cookie
-      },
+      headers: buildAccountHeaders(accountHeaders, cookie),
       body: JSON.stringify({})
     }
   );
@@ -411,10 +419,7 @@ async function redeemDesktopTransferCode(input, transferCode) {
     ),
     {
       method: "POST",
-      headers: {
-        Accept: "application/json",
-        "Content-Type": "application/json"
-      },
+      headers: buildAccountHeaders(input.accountHeaders),
       body: JSON.stringify({
         transfer_code: transferCode,
         attempt_id: input.attemptId,
@@ -431,17 +436,13 @@ async function redeemDesktopTransferCode(input, transferCode) {
   }
   return sessionId;
 }
-async function logoutSession(accountBaseUrl, appId, cookie) {
+async function logoutSession(accountBaseUrl, appId, cookie, accountHeaders) {
   const response = await fetch(
     buildAccountUrl(accountBaseUrl, "/auth/v1/logout-web-session"),
     {
       method: "POST",
-      headers: {
-        Accept: "application/json",
-        "Content-Type": "application/json",
-        Cookie: cookie
-      },
-      body: JSON.stringify({ appId })
+      headers: buildAccountHeaders(accountHeaders, cookie),
+      body: JSON.stringify({ app_id: appId })
     }
   );
   const payload = await response.json().catch(() => null);
@@ -449,6 +450,17 @@ async function logoutSession(accountBaseUrl, appId, cookie) {
     throw readEnvelopeError(response, payload);
   }
 }
+function buildAccountHeaders(accountHeaders, cookie) {
+  const headers = new Headers(accountHeaders);
+  headers.set("Accept", "application/json");
+  headers.set("Content-Type", "application/json");
+  if (cookie) {
+    headers.set("Cookie", cookie);
+  } else {
+    headers.delete("Cookie");
+  }
+  return headers;
+}
 async function findAvailablePort() {
   for (let port = AUTH_SERVER_BASE_PORT; port <= AUTH_SERVER_MAX_PORT; port += 1) {
     const available = await new Promise((resolve) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tutti-os/auth-bridge",
-  "version": "0.0.189",
+  "version": "0.0.191",
   "private": false,
   "repository": {
     "type": "git",