Unified · Split
| @@ -5,7 +5,6 @@ import { · 4 unmodified lines | ||
| 5 | 5 | ClerkPublishableKeyFrontendApiError, |
| 6 | 6 | clerkFrontendApiHostnameFromPublishableKey, |
| 7 | 7 | clerkFrontendApiUrlFromPublishableKey, |
| 8 | − isAllowedClerkFrontendApiHostname, | |
| 9 | 8 | } from "./relayAuth.ts"; |
| 10 | 9 | |
| 11 | 10 | const clerkPublishableKey = (hostname: string): string => `pk_test_${btoa(`${hostname}$`)}`; |
| @@ -75,14 +74,4 @@ describe("Clerk relay auth", () => { · 63 unmodified lines | ||
| 75 | 74 | }); |
| 76 | 75 | expect((error as ClerkPublishableKeyFrontendApiError).cause).toBeInstanceOf(Error); |
| 77 | 76 | }); |
| 78 | − | |
| 79 | − it("allows standard Clerk hosts and an exact configured custom hostname", () => { | |
| 80 | − expect(isAllowedClerkFrontendApiHostname("example.clerk.accounts.dev", null)).toBe(true); | |
| 81 | − expect(isAllowedClerkFrontendApiHostname("example.clerk.accounts.com", null)).toBe(true); | |
| 82 | − expect(isAllowedClerkFrontendApiHostname("clerk.t3.codes", "clerk.t3.codes")).toBe(true); | |
| 83 | − expect(isAllowedClerkFrontendApiHostname("attacker.example", "clerk.t3.codes")).toBe(false); | |
| 84 | − expect(isAllowedClerkFrontendApiHostname("nested.clerk.t3.codes", "clerk.t3.codes")).toBe( | |
| 85 | − false, | |
| 86 | − ); | |
| 87 | − }); | |
| 88 | 77 | }); |
| @@ -81,17 +81,6 @@ export function clerkFrontendApiHostnameFromPublishableKey(publishableKey: strin · 80 unmodified lines | ||
| 81 | 81 | return parseClerkFrontendApi(publishableKey).hostname; |
| 82 | 82 | } |
| 83 | 83 | |
| 84 | −export function isAllowedClerkFrontendApiHostname( | |
| 85 | − hostname: string, | |
| 86 | − configuredHostname: string | null, | |
| 87 | −): boolean { | |
| 88 | − return ( | |
| 89 | − hostname.endsWith(".clerk.accounts.dev") || | |
| 90 | − hostname.endsWith(".clerk.accounts.com") || | |
| 91 | − hostname === configuredHostname | |
| 92 | − ); | |
| 93 | −} | |
| 94 | − | |
| 95 | 84 | export function relayClerkTokenOptions(template: string) { |
| 96 | 85 | return { |
| 97 | 86 | template, |