@vfarcic/dot-ai 1.10.1 → 1.10.2

package/dist/interfaces/mcp.js

@@ -403,7 +403,7 @@ class MCPServer {
                     // Handle CORS for browser-based clients
                     res.setHeader('Access-Control-Allow-Origin', '*');
                     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS');
-                    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Session-Id, Authorization');
+                    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Session-Id, Authorization, X-Dot-AI-Authorization');
                     if (req.method === 'OPTIONS') {
                         res.writeHead(204);
                         res.end();

package/dist/interfaces/oauth/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/interfaces/oauth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,UAAU,CAyFhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/interfaces/oauth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,UAAU,CA4FhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/interfaces/oauth/middleware.js

@@ -32,8 +32,10 @@ function checkBearerAuth(req) {
             message: 'Authentication is not configured. Set DOT_AI_AUTH_TOKEN in your deployment.',
         };
     }
-    // Extract Authorization header
-    const rawAuthHeader = req.headers['authorization'];
+    // Extract Authorization header, with X-Dot-AI-Authorization as fallback.
+    // The fallback supports Kubernetes API server proxy scenarios where the
+    // standard Authorization header is overwritten with a K8s bearer token.
+    const rawAuthHeader = req.headers['x-dot-ai-authorization'] || req.headers['authorization'];
     if (!rawAuthHeader) {
         return {
             authorized: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vfarcic/dot-ai",
-  "version": "1.10.1",
+  "version": "1.10.2",
   "description": "AI-powered development productivity platform that enhances software development workflows through intelligent automation and AI-driven assistance",
   "mcpName": "io.github.vfarcic/dot-ai",
   "main": "dist/index.js",