camstack 1.2.113 → 1.2.115

package/dist/cli.js

@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-64OXE64I.js");
+  await import("./launcher-4PKTFAZK.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-64OXE64I.js");
+  await import("./launcher-4PKTFAZK.js");
 }
 
 // src/commands/setup.ts

package/dist/{launcher-64OXE64I.js → launcher-4PKTFAZK.js}

@@ -414073,6 +414073,7 @@ var require_session_cookie = __commonJS({
     exports.loginRedirectUrl = loginRedirectUrl;
     exports.isEmbedRedirectTarget = isEmbedRedirectTarget;
     exports.isSessionGradeJwtPayload = isSessionGradeJwtPayload;
+    exports.sessionCookieIsSecure = sessionCookieIsSecure;
     exports.SESSION_COOKIE = "camstack_session";
     function buildSessionCookie(token2, ttlSec, opts = {}) {
       return {
@@ -414136,6 +414137,19 @@ var require_session_cookie = __commonJS({
       const p = payload;
       return p.kind === void 0 && typeof p.userId === "string" && typeof p.isAdmin === "boolean";
     }
+    function sessionCookieIsSecure(requestProtocol, headers, forwardedPrefixHeader) {
+      const secureLeg = requestProtocol === "https";
+      if (!secureLeg)
+        return false;
+      if (headers[forwardedPrefixHeader] === void 0)
+        return true;
+      const raw = headers["x-forwarded-proto"];
+      const proto = Array.isArray(raw) ? raw[0] : raw;
+      if (proto === void 0)
+        return true;
+      const browserScheme = proto.split(",")[0]?.trim().toLowerCase();
+      return browserScheme !== "http";
+    }
   }
 });
 
@@ -431529,12 +431543,16 @@ var require_main4 = __commonJS({
           } catch {
             return reply.status(401).send({ error: "invalid token" });
           }
-          const c = (0, session_cookie_js_1.buildSessionCookie)(token2, ttlSec, { secure: request.protocol === "https" });
+          const c = (0, session_cookie_js_1.buildSessionCookie)(token2, ttlSec, {
+            secure: (0, session_cookie_js_1.sessionCookieIsSecure)(request.protocol, request.headers, spa_mount_1.FORWARDED_PREFIX_HEADER)
+          });
           reply.setCookie(c.name, c.value, c.options);
           return reply.send({ ok: true });
         });
         fastify.delete("/api/auth/session", async (request, reply) => {
-          const c = (0, session_cookie_js_1.clearSessionCookie)({ secure: request.protocol === "https" });
+          const c = (0, session_cookie_js_1.clearSessionCookie)({
+            secure: (0, session_cookie_js_1.sessionCookieIsSecure)(request.protocol, request.headers, spa_mount_1.FORWARDED_PREFIX_HEADER)
+          });
           reply.setCookie(c.name, c.value, c.options);
           return reply.send({ ok: true });
         });
@@ -431554,7 +431572,9 @@ var require_main4 = __commonJS({
           } catch {
             return reply.status(401).send({ error: "invalid token" });
           }
-          const c = (0, session_cookie_js_1.buildSessionCookie)(token2, ttlSec, { secure: request.protocol === "https" });
+          const c = (0, session_cookie_js_1.buildSessionCookie)(token2, ttlSec, {
+            secure: (0, session_cookie_js_1.sessionCookieIsSecure)(request.protocol, request.headers, spa_mount_1.FORWARDED_PREFIX_HEADER)
+          });
           reply.setCookie(c.name, c.value, c.options);
           return reply.redirect(next);
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.113",
+  "version": "1.2.115",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",