nexabase-console 1.1.2 → 1.1.4

package/README.md

@@ -42,6 +42,13 @@ const app = initializeApp({
 const db = getFirestore(app);
 ```
 
+#### 🛡️ Keamanan & Autentikasi Ganda (API Key & Sesi)
+Untuk mendukung arsitektur server-side proxy atau direct API key yang sangat fleksibel, SDK secara otomatis mengirimkan token Anda dalam dua format header sekaligus:
+- **`Authorization: Bearer <token>`**: Digunakan untuk validasi token JWT sesi user.
+- **`x-api-key: <api_key>`**: Digunakan untuk otentikasi aman tanpa sesi menggunakan API Key proyek.
+
+Hal ini mencegah kegagalan otentikasi (Error `403 Forbidden: Please login`) saat memanggil metode di server menggunakan API Key proyek.
+
 ---
 
 ### 2. Firestore-like Modular API (NoSQL)
@@ -242,6 +249,11 @@ const uploadImage = async (fileBlob) => {
 };
 ```
 
+#### 📂 Penanganan Tipe Konten Dinamis (Form Data Boundary)
+Unggahan file menggunakan format multipart standard yang dibungkus dalam objek `FormData`. SDK ini secara otomatis mendeteksi payload `FormData` dan membebaskan header `Content-Type` bawaan agar browser dapat secara dinamis menetapkan tipe konten yang menyertakan kode batas unik (*multipart boundary*). 
+
+Ini menghilangkan bug berkas kosong (`{}`) yang disebabkan oleh tumpang tindihnya header `application/json` di Axios.
+
 ---
 
 ### 5. Keamanan Tipe TypeScript (Generics) & Kueri Lanjutan

package/dist/index.js

@@ -51,19 +51,29 @@ class NexaApp {
             defaultEndpoint = window.location.origin;
         }
         this.endpoint = config.endpoint || defaultEndpoint;
+        // Do not set default Content-Type globally to let Axios auto-detect FormData
         this.client = axios_1.default.create({
-            baseURL: this.endpoint,
-            headers: {
-                'Content-Type': 'application/json'
-            }
+            baseURL: this.endpoint
         });
-        // Request interceptor to attach bearer token and boundary fix
+        // Request interceptor to attach bearer/x-api-key token and boundary fix
         this.client.interceptors.request.use((req) => {
             if (this.token) {
+                // Send both Authorization Bearer and x-api-key for full server compatibility
                 req.headers.Authorization = `Bearer ${this.token}`;
+                req.headers['x-api-key'] = this.token;
+            }
+            // If data is FormData, remove Content-Type so Axios/Browser can format multipart boundary dynamically
+            if (typeof FormData !== 'undefined' && req.data instanceof FormData) {
+                if (req.headers) {
+                    delete req.headers['Content-Type'];
+                    delete req.headers['content-type'];
+                }
             }
-            if (req.headers && req.headers['Content-Type'] === 'multipart/form-data') {
-                delete req.headers['Content-Type'];
+            else {
+                // Otherwise default to application/json for non-FormData payload requests
+                if (req.data && req.headers && !req.headers['Content-Type'] && !req.headers['content-type']) {
+                    req.headers['Content-Type'] = 'application/json';
+                }
             }
             return req;
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexabase-console",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "SDK Client resmi untuk NexaBase: Platform Sinkronisasi NoSQL, Realtime, File Storage, & Autentikasi Offline-First.",
   "main": "dist/index.cjs",
   "module": "dist/index.js",