qumra-engine 2.0.85 → 2.0.87

package/dist/middleware.d.ts

@@ -10,5 +10,5 @@ interface IStartEngine {
     currentApp?: App;
     market?: string;
 }
-declare const startEngine: ({ renderApi, mode, getRender, setRender, port, themesRepo, themeId, currentApp, market }: IStartEngine) => Promise<void>;
+declare const startEngine: ({ renderApi, mode, getRender, setRender, port, themesRepo, themeId, currentApp, market, }: IStartEngine) => Promise<void>;
 export default startEngine;

package/dist/middleware.js

@@ -21,7 +21,7 @@ const express_session_1 = __importDefault(require("express-session"));
 const printServerLog_1 = require("./utils/printServerLog");
 const cookie_parser_1 = __importDefault(require("cookie-parser"));
 const routers_1 = __importDefault(require("./routers"));
-const startEngine = async ({ renderApi, mode, getRender, setRender, port = 3000, themesRepo, themeId = null, currentApp, market }) => {
+const startEngine = async ({ renderApi, mode, getRender, setRender, port = 3000, themesRepo, themeId = null, currentApp, market, }) => {
     try {
         const app = (0, express_1.default)();
         app.use((0, cookie_parser_1.default)());
@@ -41,16 +41,17 @@ const startEngine = async ({ renderApi, mode, getRender, setRender, port = 3000,
             next();
         });
         app.set("trust proxy", 1); // لو ورا Nginx/Proxy/Cloud
+        const isProduction = process.env.NODE_ENV === "production";
         app.use((0, express_session_1.default)({
-            secret: "your-secret-key",
+            secret: process.env.SESSION_SECRET || "your-secret-key",
             resave: false,
             saveUninitialized: false,
             cookie: {
-                sameSite: "none", // مطلوب للـ cross-site
-                secure: true, // لازم مع 'none'
+                sameSite: "none", // يدعم داخل وخارج iframe
+                secure: isProduction, // لازم يكون true في production مع HTTPS
                 httpOnly: true,
-                partitioned: true, // علشان تشتغل داخل iframe بعد حجب 3rd-party cookies
-                maxAge: 1000 * 60 * 5,
+                partitioned: true, // يخليها شغالة في iframe (Chrome 115+)
+                maxAge: 1000 * 60 * 5, // 5 دقائق
             },
         }));
         app.use((req, res, next) => {
@@ -59,7 +60,9 @@ const startEngine = async ({ renderApi, mode, getRender, setRender, port = 3000,
             }
             if (req.query.theme) {
                 req.session.theme = req.query.theme;
-                return res.redirect("/");
+                // إعادة توجيه لنفس المسار بدون الـ query string
+                const redirectUrl = req.path || "/";
+                return res.redirect(redirectUrl);
             }
             else {
                 if (themeId) {
@@ -68,7 +71,14 @@ const startEngine = async ({ renderApi, mode, getRender, setRender, port = 3000,
             }
             next();
         });
-        app.use((0, init_middleware_1.initMiddleware)({ mode, getRender, setRender, app: currentApp, renderApi, market }));
+        app.use((0, init_middleware_1.initMiddleware)({
+            mode,
+            getRender,
+            setRender,
+            app: currentApp,
+            renderApi,
+            market,
+        }));
         const avilablePort = await (0, findAvailablePort_1.findAvailablePort)(port);
         if (mode === "devlopment") {
             const staticPath = path_1.default.join(process.cwd(), "assets");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qumra-engine",
-  "version": "2.0.85",
+  "version": "2.0.87",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {