autumn-js 1.2.26 → 1.2.28

package/dist/backend/core/utils/sanitizeBody.d.ts

@@ -1,4 +1,8 @@
+/** Fields that must come from identity, not frontend */
+declare const DEFAULT_PROTECTED_BODY_FIELDS: readonly ["customerId", "customerData", "name", "email", "stripeId"];
+declare const CUSTOMER_PROTECTED_BODY_FIELDS: readonly ["customerId", "customerData", "name", "email", "stripeId", "metadata"];
+type ProtectedBodyField = (typeof DEFAULT_PROTECTED_BODY_FIELDS)[number] | (typeof CUSTOMER_PROTECTED_BODY_FIELDS)[number];
 /** Strip protected fields from body to prevent spoofing */
-declare const sanitizeBody: (body: unknown) => Record<string, unknown>;
+declare const sanitizeBody: (body: unknown, protectedFields?: readonly ProtectedBodyField[]) => Record<string, unknown>;
 
-export { sanitizeBody };
+export { CUSTOMER_PROTECTED_BODY_FIELDS, DEFAULT_PROTECTED_BODY_FIELDS, type ProtectedBodyField, sanitizeBody };

package/dist/backend/core/utils/sanitizeBody.js

@@ -20,21 +20,27 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/backend/core/utils/sanitizeBody.ts
 var sanitizeBody_exports = {};
 __export(sanitizeBody_exports, {
+  CUSTOMER_PROTECTED_BODY_FIELDS: () => CUSTOMER_PROTECTED_BODY_FIELDS,
+  DEFAULT_PROTECTED_BODY_FIELDS: () => DEFAULT_PROTECTED_BODY_FIELDS,
   sanitizeBody: () => sanitizeBody
 });
 module.exports = __toCommonJS(sanitizeBody_exports);
-var PROTECTED_FIELDS = [
+var DEFAULT_PROTECTED_BODY_FIELDS = [
   "customerId",
+  "customerData",
   "name",
   "email",
-  "metadata",
   "stripeId"
 ];
-var sanitizeBody = (body) => {
+var CUSTOMER_PROTECTED_BODY_FIELDS = [
+  ...DEFAULT_PROTECTED_BODY_FIELDS,
+  "metadata"
+];
+var sanitizeBody = (body, protectedFields = DEFAULT_PROTECTED_BODY_FIELDS) => {
   const rawBody = body || {};
   const sanitized = {};
   for (const [key, value] of Object.entries(rawBody)) {
-    if (!PROTECTED_FIELDS.includes(key)) {
+    if (!protectedFields.includes(key)) {
       sanitized[key] = value;
     }
   }
@@ -42,5 +48,7 @@ var sanitizeBody = (body) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  CUSTOMER_PROTECTED_BODY_FIELDS,
+  DEFAULT_PROTECTED_BODY_FIELDS,
   sanitizeBody
 });

package/dist/backend/core/utils/sanitizeBody.mjs

@@ -1,6 +1,10 @@
 import {
+  CUSTOMER_PROTECTED_BODY_FIELDS,
+  DEFAULT_PROTECTED_BODY_FIELDS,
   sanitizeBody
-} from "../../chunk-Z6QP3YEA.mjs";
+} from "../../chunk-I7CD6EB6.mjs";
 export {
+  CUSTOMER_PROTECTED_BODY_FIELDS,
+  DEFAULT_PROTECTED_BODY_FIELDS,
   sanitizeBody
 };

package/dist/backend/index.d.mts

@@ -1,10 +1,10 @@
 export { createCoreHandler } from './core/handlers/coreHandler.mjs';
-import { C as CustomerData } from './authTypes-B7b2mex1.mjs';
-export { A as AuthResult, a as CustomerId, R as ResolvedIdentity } from './authTypes-B7b2mex1.mjs';
+import { a as CustomerData } from './authTypes-CxFcWXh3.mjs';
+export { A as AuthResult, c as CustomerId, R as ResolvedIdentity } from './authTypes-CxFcWXh3.mjs';
 export { CoreHandlerOptions, UnifiedRequest, UnifiedResponse } from './core/types/handlerTypes.mjs';
 export { BackendErrorBody, BackendResult } from './core/types/responseTypes.mjs';
-import { R as RouteDefinition } from './routeTypes-BcR8yEXe.mjs';
-export { C as CustomHandlerArgs, a as CustomHandlerFn } from './routeTypes-BcR8yEXe.mjs';
+import { b as RouteDefinition } from './routeTypes-924R85Bn.mjs';
+export { C as CustomHandlerArgs, a as CustomHandlerFn } from './routeTypes-924R85Bn.mjs';
 export { buildRouter } from './core/routes/routeBuilder.mjs';
 export { routeConfigs } from './core/routes/routeConfigs.mjs';
 export { secretKeyCheck } from './core/utils/secretKeyCheck.mjs';

package/dist/backend/index.d.ts

@@ -1,10 +1,10 @@
 export { createCoreHandler } from './core/handlers/coreHandler.js';
-import { C as CustomerData } from './authTypes-B7b2mex1.js';
-export { A as AuthResult, a as CustomerId, R as ResolvedIdentity } from './authTypes-B7b2mex1.js';
+import { a as CustomerData } from './authTypes-CxFcWXh3.js';
+export { A as AuthResult, c as CustomerId, R as ResolvedIdentity } from './authTypes-CxFcWXh3.js';
 export { CoreHandlerOptions, UnifiedRequest, UnifiedResponse } from './core/types/handlerTypes.js';
 export { BackendErrorBody, BackendResult } from './core/types/responseTypes.js';
-import { R as RouteDefinition } from './routeTypes-CXj2d3BE.js';
-export { C as CustomHandlerArgs, a as CustomHandlerFn } from './routeTypes-CXj2d3BE.js';
+import { b as RouteDefinition } from './routeTypes-Db2ZFQC4.js';
+export { C as CustomHandlerArgs, a as CustomHandlerFn } from './routeTypes-Db2ZFQC4.js';
 export { buildRouter } from './core/routes/routeBuilder.js';
 export { routeConfigs } from './core/routes/routeConfigs.js';
 export { secretKeyCheck } from './core/utils/secretKeyCheck.js';