client-certificate-auth 1.3.4 → 1.3.5

package/lib/clientCertificateAuth.cjs

@@ -85,8 +85,7 @@ function clientCertificateAuth(callback, options = {}) {
         // Ensure that the certificate was validated at the protocol level
         if (!req.socket?.authorized) {
             safeCallHook(onRejected, null, req, 'socket_not_authorized');
-            const authError = req.socket?.authorizationError || 'unknown';
-            const e = new Error(`Unauthorized: Client certificate required (${authError})`);
+            const e = new Error('Unauthorized: Client certificate required');
             e.status = 401;
             return next(e);
         }

package/lib/clientCertificateAuth.js

@@ -136,19 +136,15 @@ export default function clientCertificateAuth(callback, options = {}) {
       let statusCode = 401;
 
       switch (result.reason) {
-        case 'verification_header_mismatch': {
-          const verifyStatus = req.headers[verifyHeader.toLowerCase()];
-          errorMessage = `Unauthorized: Certificate verification failed (${verifyStatus || 'header missing'})`;
+        case 'verification_header_mismatch':
+          errorMessage = 'Unauthorized: Certificate verification failed';
           break;
-        }
         case 'header_missing_or_malformed':
           errorMessage = 'Unauthorized: Client certificate header missing or malformed';
           break;
-        case 'socket_not_authorized': {
-          const authError = req.socket?.authorizationError || 'unknown';
-          errorMessage = `Unauthorized: Client certificate required (${authError})`;
+        case 'socket_not_authorized':
+          errorMessage = 'Unauthorized: Client certificate required';
           break;
-        }
         case 'certificate_not_retrievable':
           errorMessage = 'Client certificate was authenticated but certificate information could not be retrieved.';
           statusCode = 500;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "client-certificate-auth",
-  "version": "1.3.4",
+  "version": "1.3.5",
   "description": "Express/Connect middleware for mTLS client certificate authentication with reverse proxy support (AWS ALB, Envoy, Cloudflare, Traefik)",
   "homepage": "https://github.com/tgies/client-certificate-auth",
   "bugs": {
@@ -72,6 +72,7 @@
     "node": ">= 20"
   },
   "devDependencies": {
+    "@arethetypeswrong/cli": "^0.18.2",
     "@commitlint/cli": "^20.4.3",
     "@commitlint/config-conventional": "^20.5.0",
     "@stryker-mutator/core": "^9.6.0",
@@ -142,5 +143,8 @@
     "lib/**/*.cjs",
     "lib/**/*.d.ts",
     "lib/**/*.d.cts"
-  ]
+  ],
+  "overrides": {
+    "fflate": "0.8.2"
+  }
 }