powr-sdk-api 3.1.3 → 3.1.4

package/dist/middleware/projectId.js

@@ -3,22 +3,31 @@
 const config = require('../config');
 
 /**
- * Middleware to inject projectId into requests
+ * Middleware to inject and validate projectId into requests
  * @param {Object} options - Configuration options
  * @param {boolean} options.isCentralService - Whether this is a central service (like powr-base-cloud)
+ * @param {boolean} options.requireProjectId - Whether to require projectId validation (default: true)
+ * @param {Array} options.excludePaths - Array of paths to exclude from projectId validation
  * @returns {Function} Express middleware function
  */
 const injectProjectId = (options = {}) => {
   const isCentralService = options.isCentralService || false;
+  const requireProjectId = options.requireProjectId !== false; // Default to true
+  const excludePaths = options.excludePaths || ['/auth/login', '/auth/register', '/health'];
   return (req, res, next) => {
     try {
+      // Skip validation for excluded paths
+      if (excludePaths.some(path => req.path.startsWith(path))) {
+        req.projectId = null;
+        return next();
+      }
       if (isCentralService) {
         // For central services, get projectId from request
         const projectId = req.query.projectId || req.body.projectId;
-        if (!projectId) {
+        if (requireProjectId && !projectId) {
           return res.status(400).json({
             success: false,
-            message: 'projectId is required for central services'
+            message: 'projectId is required'
           });
         }
         req.projectId = projectId;
@@ -26,6 +35,14 @@ const injectProjectId = (options = {}) => {
         // For individual APIs, use config.projectId
         req.projectId = config.projectId;
       }
+
+      // Validate projectId if required
+      if (requireProjectId && !req.projectId) {
+        return res.status(400).json({
+          success: false,
+          message: 'projectId is required'
+        });
+      }
       next();
     } catch (error) {
       console.error('❌ ProjectId injection error:', error.message);

package/dist/routes/functions.js

@@ -90,12 +90,6 @@ router.get('/', async (req, res) => {
     const query = {
       projectId
     };
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const db = await getDb();
     const functionsData = await db.collection("functions").find(query).toArray();
     return res.status(200).json({
@@ -115,12 +109,6 @@ router.get('/', async (req, res) => {
 router.post('/', async (req, res) => {
   try {
     const projectId = req.projectId;
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const newFunction = req.body;
     newFunction.projectId = projectId;
     if (!newFunction || Object.keys(newFunction).length === 0) {
@@ -159,12 +147,6 @@ router.put('/:function', async (req, res) => {
       code
     } = req.body;
     const projectId = req.projectId;
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     if (!code) {
       return res.status(400).json({
         success: false,
@@ -222,12 +204,6 @@ router.post("/:function", async (req, res) => {
     function: functionName
   } = req.params;
   const projectId = req.projectId;
-  if (!projectId) {
-    return res.status(400).json({
-      success: false,
-      message: 'projectId is required.'
-    });
-  }
   try {
     // Use pre-compiled function (NO COMPILATION HERE)
     const params = {

package/dist/routes/invoices.js

@@ -14,12 +14,6 @@ router.get('/', async (req, res) => {
     const query = {
       projectId
     };
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const db = await getDb();
     const invoiceData = await db.collection("invoices").find(query).toArray();
     return res.status(200).json({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "powr-sdk-api",
-  "version": "3.1.3",
+  "version": "3.1.4",
   "description": "Shared API core library for PowrStack projects",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",