rtc.io-server 1.2.0 → 1.2.1

package/dist/lib/defaulthandlers.js

@@ -4,8 +4,15 @@ exports.addDefaultListeners = addDefaultListeners;
 const events_1 = require("./events");
 // The rtc.io client multiplexes all signaling (offer/answer/candidate/stream-meta)
 // over a single MESSAGE channel — these are the only events the server needs to relay.
+//
+// `source` is stamped server-side from the authenticated socket id, never trusted
+// from the client: otherwise a room member could spoof another peer's id and inject
+// offers/answers/candidates that appear to come from someone else. `target` stays
+// client-controlled (it's the routing key) but must be a string.
 function rtcMessageHandler(socket, data) {
-    socket.to(data.target).emit(events_1.RtcioEvents.MESSAGE, data);
+    if (!data || typeof data.target !== "string")
+        return;
+    socket.to(data.target).emit(events_1.RtcioEvents.MESSAGE, Object.assign(Object.assign({}, data), { source: socket.id }));
 }
 // Fast-path "this socket is leaving" notification. Without it, peers have to
 // wait on ICE consent freshness (~30 s, RFC 7675) to declare a vanished peer

package/dist/lib/events.d.ts

@@ -1,9 +1,5 @@
 export declare const RtcioEvents: {
-    readonly OFFER: "#rtcio:offer";
-    readonly ANSWER: "#rtcio:answer";
-    readonly CANDIDATE: "#rtcio:candidate";
     readonly MESSAGE: "#rtcio:message";
-    readonly STREAM_META: "#rtcio:stream-meta";
     readonly INIT_OFFER: "#rtcio:init-offer";
     readonly PEER_LEFT: "#rtcio:peer-left";
 };

package/dist/lib/events.js

@@ -2,11 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RtcioEvents = void 0;
 exports.RtcioEvents = {
-    OFFER: "#rtcio:offer",
-    ANSWER: "#rtcio:answer",
-    CANDIDATE: "#rtcio:candidate",
     MESSAGE: "#rtcio:message",
-    STREAM_META: "#rtcio:stream-meta",
     INIT_OFFER: "#rtcio:init-offer",
     // Server → client. Fan out to a leaving socket's rooms so existing peers
     // can tear down their RTCPeerConnection immediately instead of waiting

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rtc.io-server",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Signaling server for the rtc.io WebRTC client. Built on socket.io.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,22 +17,23 @@
     "server"
   ],
   "license": "MIT",
-  "author": "",
+  "author": "solidet-com",
   "repository": {
     "type": "git",
-    "url": "https://github.com/<your-org>/rtc.io.git",
+    "url": "git+https://github.com/solidet-com/rtc.io.git",
     "directory": "rtc.io-server"
   },
   "bugs": {
-    "url": "https://github.com/<your-org>/rtc.io/issues"
+    "url": "https://github.com/solidet-com/rtc.io/issues"
   },
-  "homepage": "https://github.com/<your-org>/rtc.io#readme",
+  "homepage": "https://docs.rtcio.dev",
   "engines": {
     "node": ">=18"
   },
   "scripts": {
     "clean": "rm -rf dist",
     "build": "npm run clean && tsc",
+    "typecheck": "tsc --noEmit",
     "dev": "nodemon --watch '**/*.ts' --exec 'ts-node' ./index.ts",
     "prepack": "npm run build"
   },