querysub 0.517.0 → 0.518.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "querysub",
-  "version": "0.517.0",
+  "version": "0.518.0",
   "main": "index.js",
   "license": "MIT",
   "note1": "note on node-forge fork, see https://github.com/digitalbazaar/forge/issues/744 for details",

package/src/4-querysub/Querysub.ts

@@ -1083,6 +1083,7 @@ export class Querysub {
         let mountPromise = SocketFunction.mount({
             public: isPublic(),
             port,
+            autoForwardPort: true,
             ...await getThreadKeyCert(getDomain()),
         });
 

package/src/4-querysub/QuerysubController.ts

@@ -556,7 +556,8 @@ export class QuerysubControllerBase {
             throw new Error(`Call has no network, so it would never run (no FunctionRunner would pick it up). Call ${debugCallSpec(call)}`);
         }
         // Networks where every function runner is non-public are only usable by super users (they were never meant to receive public traffic, ex, a dev network).
-        if (!isNetworkPublic(call.network) && !await isManagementUser()) {
+        // ALSO, We have to allow calls on the same machine as us, otherwise developers can't log in!
+        if (!isNetworkPublic(call.network) && !(await isManagementUser() || call.callerIP === "127.0.0.1")) {
             throw new Error(`Caller is not a super user, and so cannot add calls on the non-public network "${call.network}". Call ${debugCallSpec(call)}`);
         }
 

package/src/library-components/EdgeNodeSelector.tsx

@@ -11,7 +11,7 @@ const EDGE_NODE_URL_PARAM = "edgenode";
 /** A dropdown showing all the edge nodes the bootstrapper had to pick from (with their probed latencies), which one we booted from, and allowing forcing a specific edge node. Forcing sets a url parameter and refreshes the page, as the edge node is used by the bootstrapper, so it can only apply on a fresh page load. Super users only. */
 export class EdgeNodeSelector extends qreact.Component<{}> {
     render() {
-        if (!isCurrentUserSuperUser()) return undefined;
+        if (!(isCurrentUserSuperUser() || location.hostname.startsWith("127-0-0-1"))) return undefined;
         // The stats are a plain global the bootstrapper updates as its probes finish, so we re-read them every second
         Querysub.nowDelayed(timeInSecond);
         let stats = globalThis.EDGE_NODE_STATS;

package/src/library-components/NetworkSelector.tsx

@@ -7,7 +7,7 @@ import { forcedNetworkURL, getAutoSelectedNetwork, getNetworkSelectionInfos, get
 /** A dropdown showing all the function runner networks, which one our function calls are being put on, and allowing forcing a specific network (and unforcing it, going back to the automatic selection). Super users only. */
 export class NetworkSelector extends qreact.Component<{}> {
     render() {
-        if (!isCurrentUserSuperUser()) return undefined;
+        if (!(isCurrentUserSuperUser() || location.hostname.startsWith("127-0-0-1"))) return undefined;
         let infos = getNetworkSelectionInfos();
         let forced = forcedNetworkURL.value;
         let selected = getSelectedNetwork({ noThrow: true });