aip-master-node-sumit 1.0.6 → 1.0.7

package/index.js

@@ -32,21 +32,43 @@ if (API_KEY) {
 const aipGuard = (options = { requireLogin: true }) => {
     return async (req, res, next) => {
         
-        // LAYER 1: INFRASTRUCTURE SHIELD 
+        // ==========================================
+        // 🛡️ LAYER 0: DYNAMIC CORS & SECURITY HEADERS
+        // ==========================================
+        const origin = req.headers.origin || req.headers.Origin;
+        
+        if (origin) {
+            // If origin is present, dynamically echo it to satisfy strict browser credential policies
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Access-Control-Allow-Credentials', 'true');
+        } else {
+            // Fallback for non-browser clients (like Postman or cURL)
+            res.setHeader('Access-Control-Allow-Origin', process.env.AIP_ALLOWED_ORIGIN || '*');
+        }
+        
+        res.setHeader('X-Frame-Options', 'DENY');
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
+
+        // Handle preflight requests gracefully
+        if (req.method === 'OPTIONS') {
+            res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, PATCH, OPTIONS');
+            res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-AIP-Token, X-Requested-With, Accept');
+            return res.status(200).end();
+        }
+
+        // ==========================================
+        // 🛡️ LAYER 1: INFRASTRUCTURE SHIELD 
+        // ==========================================
         const MAX_PAYLOAD_BYTES = 2 * 1024 * 1024;
 
         if (req.headers['transfer-encoding'] && req.headers['transfer-encoding'].includes('chunked')) {
-            return res.status(411).send("AIP Infrastructure Shield: Chunked encoding rejected.");
+            return res.status(411).json({ error: "AIP Infrastructure Shield: Chunked encoding rejected." });
         }
 
         if (req.headers['content-length'] && parseInt(req.headers['content-length']) > MAX_PAYLOAD_BYTES) {
-            return res.status(413).send("AIP Infrastructure Shield: Payload Too Large.");
+            return res.status(413).json({ error: "AIP Infrastructure Shield: Payload Too Large." });
         }
-        
-        res.setHeader('X-Frame-Options', 'DENY');
-        res.setHeader('X-Content-Type-Options', 'nosniff');
-        res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
-        res.setHeader('Access-Control-Allow-Origin', process.env.AIP_ALLOWED_ORIGIN || '*');
 
         let token = req.query.token || (req.cookies && req.cookies.aip_session);
 
@@ -56,9 +78,11 @@ const aipGuard = (options = { requireLogin: true }) => {
             token = req.headers['x-aip-token'];
         }
 
-        // LAYER 2: IDENTITY CHECK & RBAC
+        // ==========================================
+        // 🛡️ LAYER 2: IDENTITY CHECK & RBAC
+        // ==========================================
         if (options.requireLogin) {
-            if (!token) return res.status(401).send("Unauthorized: Missing AIP Session Token");
+            if (!token) return res.status(401).json({ error: "Unauthorized: Missing AIP Session Token" });
 
             try {
                 const currentAction = req.method + " " + (req.baseUrl + req.path);
@@ -81,11 +105,13 @@ const aipGuard = (options = { requireLogin: true }) => {
                     res.clearCookie('aip_session');
                 }
                 
-                return res.status(status === 401 ? 401 : 403).send(errMsg);
+                return res.status(status === 401 ? 401 : 403).json({ error: errMsg });
             }
         }
 
-        // LAYER 3: WAF THREAT SCAN
+        // ==========================================
+        // 🛡️ LAYER 3: WAF THREAT SCAN
+        // ==========================================
         try {
             const payloadData = JSON.stringify({ 
                 body: req.body || {}, 
@@ -113,12 +139,12 @@ const aipGuard = (options = { requireLogin: true }) => {
             });
 
             if (wafRes.data.action === "block") {
-                return res.status(403).send(`AIP Firewall Blocked Request: ${wafRes.data.reason}`);
+                return res.status(403).json({ error: `AIP Firewall Blocked Request: ${wafRes.data.reason}` });
             }
 
         } catch (error) {
             console.error("WAF Engine Unreachable");
-            return res.status(500).send("Security verification failed.");
+            return res.status(500).json({ error: "Security verification failed." });
         }
 
         next(); 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aip-master-node-sumit",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "Enterprise-grade WAF and IAM security middleware for Node.js.",
   "main": "index.js",
   "scripts": {
@@ -17,4 +17,4 @@
   "dependencies": {
     "axios": "^1.13.6"
   }
-}
+}