@wbce-d9/api 11.0.8 → 11.1.0

package/dist/constants.js

@@ -56,8 +56,12 @@ export const REFRESH_COOKIE_OPTIONS = {
     sameSite: env['REFRESH_TOKEN_COOKIE_SAME_SITE'] || 'strict',
     path: '/auth',
 };
-const { maxAge: refreshCookieMaxAge, expires: refreshCookieExpires, ...refresh_cookie_clear_options } = REFRESH_COOKIE_OPTIONS;
-export const REFRESH_COOKIE_CLEAR_OPTIONS = refresh_cookie_clear_options;
+export const REFRESH_COOKIE_CLEAR_OPTIONS = (() => {
+    const { ...rest } = REFRESH_COOKIE_OPTIONS;
+    delete rest.maxAge;
+    delete rest.expires;
+    return rest;
+})();
 export const GET_SET_HEADER = (cookieValue) => {
     const domainHeader = env['REFRESH_TOKEN_COOKIE_DOMAIN'] ? ` Domain=${env['REFRESH_TOKEN_COOKIE_DOMAIN']};` : '';
     const partitionedHeader = env['REFRESH_TOKEN_COOKIE_PARTITIONED'] == true ? ' Partitioned;' : '';
@@ -70,10 +74,14 @@ export const ACCESS_COOKIE_OPTIONS = {
     maxAge: getMilliseconds(env['ACCESS_TOKEN_TTL']),
     secure: env['ACCESS_TOKEN_COOKIE_SECURE'] ?? false,
     sameSite: env['ACCESS_TOKEN_COOKIE_SAME_SITE'] || 'strict',
-    path: '/',
+    path: '/assets',
 };
-const { maxAge: accessCookieMaxAge, expires: accessCookieExpires, ...access_cookie_clear_options } = ACCESS_COOKIE_OPTIONS;
-export const ACCESS_COOKIE_CLEAR_OPTIONS = access_cookie_clear_options;
+export const ACCESS_COOKIE_CLEAR_OPTIONS = (() => {
+    const { ...rest } = ACCESS_COOKIE_OPTIONS;
+    delete rest.maxAge;
+    delete rest.expires;
+    return rest;
+})();
 export const OAS_REQUIRED_SCHEMAS = ['Diff', 'Schema', 'Query', 'x-metadata'];
 /** Formats from which transformation is supported */
 export const SUPPORTED_IMAGE_TRANSFORM_FORMATS = ['image/jpeg', 'image/png', 'image/webp', 'image/tiff', 'image/avif'];

package/dist/middleware/extract-token.js

@@ -22,7 +22,9 @@ const extractToken = (req, _res, next) => {
     /**
      * Check if there is an access token stored in the cookies
      */
-    if (req?.cookies?.[env['ACCESS_TOKEN_COOKIE_NAME']]) {
+    if (req?.cookies?.[env['ACCESS_TOKEN_COOKIE_NAME']] &&
+        req.path.startsWith('/assets/') &&
+        req.method === 'GET') {
         token = req.cookies[env['ACCESS_TOKEN_COOKIE_NAME']];
     }
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wbce-d9/api",
-  "version": "11.0.8",
+  "version": "11.1.0",
   "description": "Directus is a real-time API and App dashboard for managing SQL database content",
   "type": "module",
   "keywords": [
@@ -145,18 +145,18 @@
     "wellknown": "0.5.0",
     "@wbce-d9/app": "9.33.2",
     "@wbce-d9/constants": "9.28.0",
-    "@wbce-d9/extensions-sdk": "9.27.2",
-    "@wbce-d9/exceptions": "9.26.4",
     "@wbce-d9/schema": "9.26.4",
     "@wbce-d9/specs": "9.26.5",
+    "@wbce-d9/exceptions": "9.26.4",
     "@wbce-d9/storage": "9.26.4",
-    "@wbce-d9/storage-driver-cloudinary": "9.27.2",
-    "@wbce-d9/storage-driver-gcs": "9.26.9",
     "@wbce-d9/storage-driver-azure": "9.26.9",
+    "@wbce-d9/extensions-sdk": "9.27.2",
+    "@wbce-d9/storage-driver-gcs": "9.26.9",
+    "@wbce-d9/storage-driver-s3": "9.26.11",
     "@wbce-d9/storage-driver-local": "9.26.9",
-    "@wbce-d9/utils": "9.29.2",
     "@wbce-d9/update-check": "9.28.0",
-    "@wbce-d9/storage-driver-s3": "9.26.11"
+    "@wbce-d9/storage-driver-cloudinary": "9.27.2",
+    "@wbce-d9/utils": "9.29.2"
   },
   "devDependencies": {
     "@ngneat/falso": "6.4.0",