streamby-core 0.28.0 → 0.28.3

package/dist/middleware/routes/export.js

@@ -298,12 +298,11 @@ function exportRouter(config) {
             const origin = req.headers.origin;
             let effectiveAllowedOrigins = exportMetadata.allowedOrigin;
             const projectOrigins = project.allowedOrigin;
-            // If export's allowedOrigin is ['*'] or it's not set, it inherits from the project.
-            if (!effectiveAllowedOrigins || (effectiveAllowedOrigins.length === 1 && effectiveAllowedOrigins[0] === '*')) {
+            // If export's allowedOrigin is empty, ['*'], or not set, it inherits from the project.
+            if (!effectiveAllowedOrigins || effectiveAllowedOrigins.length === 0 || (effectiveAllowedOrigins.length === 1 && effectiveAllowedOrigins[0] === '*')) {
                 effectiveAllowedOrigins = projectOrigins;
             }
             else {
-                // If the export has its own list, ensure it's a subset of the project's list (if project is not public).
                 if (projectOrigins && !projectOrigins.includes('*')) {
                     const isSubset = effectiveAllowedOrigins.every((o) => projectOrigins.includes(o));
                     if (!isSubset) {
@@ -329,11 +328,9 @@ function exportRouter(config) {
                 }
             }
             if (!devModeAllowed) {
-                // If there's no origin header, deny access unless the effective scope is public.
                 if (!origin && !(effectiveAllowedOrigins && effectiveAllowedOrigins.includes('*'))) {
                     return res.status(403).json({ message: 'Origin header required' });
                 }
-                // Check for public access ('*') or if the request's origin is in the effective list.
                 const isAllowed = effectiveAllowedOrigins && (effectiveAllowedOrigins.includes('*') || (origin && effectiveAllowedOrigins.includes(origin)));
                 if (!isAllowed) {
                     return res.status(403).json({ message: 'Unauthorized' });

package/dist/middleware/routes/subscription.js

@@ -16,6 +16,8 @@ const resolveSubscription = async (auth) => {
 const ensureSubscription = async (req, res, next) => {
     try {
         const auth = req.auth;
+        if (!auth)
+            return next();
         const plan = await resolveSubscription(auth);
         req.subscription = plan;
         next();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "streamby-core",
-  "version": "0.28.0",
+  "version": "0.28.3",
   "description": "StreamBy middleware framework for media storage management",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",