aip-master-node-sumit 1.0.2 → 1.0.3

package/index.js

@@ -1,24 +1,31 @@
 const axios = require('axios');
-const AIP_MASTER_API = process.env.AIP_MASTER_URL || 'http://localhost:8080/api/v1'; 
+
+// 🛡️ THE FIX: Smart URL Cleaner ensures the base API URL is exactly right
+const getSafeMasterUrl = (url) => {
+    if (!url) return 'http://localhost:8080/api/v1';
+    let clean = url.replace(/\/+$/, '');
+    if (clean.endsWith('/iam')) {
+        clean = clean.substring(0, clean.length - 4);
+    }
+    return clean;
+};
+
+const AIP_MASTER_API = getSafeMasterUrl(process.env.AIP_MASTER_URL); 
 const API_KEY = process.env.AIP_MASTER_API_KEY; 
 
-// 🛡️ The Heartbeat System.
-// This continuously pings the Go Server every 5 minutes 
-// to keep the dashboard "Live" without needing to restart the Express server!
 if (API_KEY) {
     const sendHeartbeat = async () => {
         try {
             await axios.post(`${AIP_MASTER_API}/iam/ping`, { module: 'middleware' }, {
                 headers: { 'Authorization': `Bearer ${API_KEY}` },
-                timeout: 5000 // Prevent hanging if master is slow
+                timeout: 5000 
             });
         } catch (err) {
             // Silently fail so the client's app doesn't crash if Master API is updating
         }
     };
-
-    sendHeartbeat(); // Fire immediately on server startup
-    setInterval(sendHeartbeat, 5 * 60 * 1000); // Fire every 5 minutes forever
+    sendHeartbeat(); 
+    setInterval(sendHeartbeat, 5 * 60 * 1000);
 }
 
 const aipGuard = (options = { requireLogin: true }) => {
@@ -26,6 +33,7 @@ const aipGuard = (options = { requireLogin: true }) => {
         
         // LAYER 1: INFRASTRUCTURE SHIELD 
         const MAX_PAYLOAD_BYTES = 2 * 1024 * 1024;
+
         if (req.headers['transfer-encoding'] && req.headers['transfer-encoding'].includes('chunked')) {
             return res.status(411).send("AIP Infrastructure Shield: Chunked encoding rejected.");
         }
@@ -39,7 +47,6 @@ const aipGuard = (options = { requireLogin: true }) => {
         res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
         res.setHeader('Access-Control-Allow-Origin', process.env.AIP_ALLOWED_ORIGIN || '*');
 
-        // Robust Token Extraction (Checks query, cookies, and Authorization headers)
         let token = req.query.token || (req.cookies && req.cookies.aip_session);
         if (!token && req.headers.authorization && req.headers.authorization.startsWith('Bearer ')) {
             token = req.headers.authorization.split(' ')[1];
@@ -50,22 +57,23 @@ const aipGuard = (options = { requireLogin: true }) => {
         // LAYER 2: IDENTITY CHECK & RBAC
         if (options.requireLogin) {
             if (!token) return res.status(401).send("Unauthorized: Missing AIP Session Token");
+
             try {
                 const currentAction = req.method + " " + (req.baseUrl + req.path);
                 const authRes = await axios.post(`${AIP_MASTER_API}/iam/verify-session`, 
                     { session_token: token, action: currentAction }, 
                     { headers: { 'Authorization': `Bearer ${API_KEY}` } }
                 );
+                
                 req.user = authRes.data.user; 
 
                 const isProd = process.env.NODE_ENV === 'production';
                 res.cookie('aip_session', token, { httpOnly: true, secure: isProd });
+
             } catch (error) {
                 const status = error.response?.status || 500;
                 const errMsg = error.response?.data?.error || "AIP Identity Blocked: Invalid Token.";
                 
-                // 🛡️ CRITICAL FIX: Only clear the session cookie if the token is actually dead (401).
-                // If it is an RBAC block (403), we just deny the action but keep them logged in!
                 if (status === 401 && res.clearCookie) {
                     res.clearCookie('aip_session');
                 }
@@ -82,6 +90,7 @@ const aipGuard = (options = { requireLogin: true }) => {
             });
             const forwardedFor = req.headers['x-forwarded-for'];
             let clientIp = req.ip || (req.connection && req.connection.remoteAddress) || "0.0.0.0";
+            
             if (forwardedFor) {
                 clientIp = Array.isArray(forwardedFor) 
                     ? forwardedFor[0].trim() 
@@ -96,9 +105,9 @@ const aipGuard = (options = { requireLogin: true }) => {
                 payload: payloadData,
                 origin: req.headers.origin || "",
                 user_agent: req.headers['user-agent'] || "",
-                session_token: token || "" // Explicitly forwarding the token to the Master WAF
+                session_token: token || "" 
             });
-            
+
             if (wafRes.data.action === "block") {
                 return res.status(403).send(`AIP Firewall Blocked Request: ${wafRes.data.reason}`);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aip-master-node-sumit",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Enterprise-grade WAF and IAM security middleware for Node.js.",
   "main": "index.js",
   "scripts": {