CDS 9.3 & IAS auth

Author: oklemenz2

CHANGELOG.md

@@ -5,11 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
-## Version 1.7.3 - 2025-09-xx
+## Version 1.7.3 - 2025-09-08
 
 ### Fixed
 
-- tbd
+- Fix `ias` auth strategy, set `req.hostname`
 
 ## Version 1.7.2 - 2025-08-04
 

package-lock.json

@@ -51,18 +51,18 @@
   "devDependencies": {
     "@cap-js-community/websocket": "./",
     "@cap-js/cds-test": "^0.4.0",
-    "@eslint/js": "^9.32.0",
-    "@sap/cds": "^9.2.0",
-    "@sap/cds-dk": "^9.2.0",
+    "@eslint/js": "^9.35.0",
+    "@sap/cds": "^9.3.1",
+    "@sap/cds-dk": "^9.3.0",
     "@socket.io/redis-adapter": "^8.3.0",
     "@socket.io/redis-streams-adapter": "^0.2.2",
-    "eslint": "^9.32.0",
+    "eslint": "^9.35.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-jest": "^29.0.1",
     "eslint-plugin-n": "^17.21.3",
     "express": "^4.21.2",
     "globals": "^16.3.0",
-    "jest": "^30.0.5",
+    "jest": "^30.1.3",
     "prettier": "^3.6.2"
   },
   "license": "Apache-2.0",

package.json

@@ -246,7 +246,7 @@ class SocketServer {
    * @returns {[function]} Returns a list of middleware functions
    */
   beforeMiddlewares() {
-    return [this.mockResponse.bind(this), this.applyAuthCookie.bind(this)];
+    return [this.enhanceRequest.bind(this), this.applyAuthCookie.bind(this)];
   }
 
   /**
@@ -310,14 +310,16 @@ class SocketServer {
   }
 
   /**
-   * Mock the HTTP response object and make available at req.res
+   * Enhance the request object. Mock the HTTP response object and make available at req.res
    * @param {Object} socket Server socket
    * @param {Function} next Call next
    */
-  mockResponse(socket, next) {
+  enhanceRequest(socket, next) {
     const req = socket.request;
     req.baseUrl ??= req.url;
     req.originalUrl ??= req.url;
+    req.hostname ??= req.headers?.["x-forwarded-host"] ?? req.headers?.host ?? "";
+    req.host = req.hostname;
     let error;
     try {
       // Mock response (not available in websocket, CDS middlewares need it)

src/socket/base.js

@@ -1,6 +1,8 @@
 "use strict";
 
 module.exports = (srv) => {
+  srv.on("wsContext", async () => {});
+
   srv.on(["sendCloudEventModel", "sendCloudEventMap"], async (req) => {
     const appinfoA = (req.data.appinfoA ?? req.data.data?.appinfoA ?? "abc") + "d";
     const appinfoB = (req.data.appinfoB ?? req.data.data?.appinfoB ?? 123) + 1111;

test/_env/srv/handlers/cloudevent.js

@@ -3,6 +3,8 @@
 module.exports = (srv) => {
   const { Header } = srv.entities();
 
+  srv.on("wsContext", async () => {});
+
   srv.before("CREATE", Header, async (req) => {
     req.data.description += `- ${req.headers.test}`;
   });

test/_env/srv/handlers/main.js

@@ -70,11 +70,29 @@ describe("Base", () => {
     expect(baseFormat.compose("test", {})).toBeUndefined();
   });
 
-  test("Mock Response", async () => {
+  test("Enhance Request - Host", async () => {
+    const next = jest.fn();
+    const socketServer = new SocketServer();
+    let req = { headers: { host: "localhost:4711" } };
+    socketServer.enhanceRequest({ request: req }, next);
+    expect(req.baseUrl).toBe(req.url);
+    expect(req.originalUrl).toBe(req.url);
+    expect(req.hostname).toBe("localhost:4711");
+    expect(req.host).toBe("localhost:4711");
+
+    req = { headers: { host: "localhost:4711", "x-forwarded-host": "localhost:4712" } };
+    socketServer.enhanceRequest({ request: req }, next);
+    expect(req.baseUrl).toBe(req.url);
+    expect(req.originalUrl).toBe(req.url);
+    expect(req.hostname).toBe("localhost:4712");
+    expect(req.host).toBe("localhost:4712");
+  });
+
+  test("Enhance Request - Mock Response", async () => {
     const socketServer = new SocketServer();
     const req = {};
     const next = jest.fn();
-    socketServer.mockResponse({ request: req }, next);
+    socketServer.enhanceRequest({ request: req }, next);
     expect(req.res).toBeDefined();
     expect(req.res.headers).toEqual({});
     expect(req.res.set("A", "B")).toBe(req.res);

test/base/base.test.js

@@ -1,4 +1,4 @@
-// Jest Snapshot v1, https://goo.gl/fbAQLP
+// Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
 
 exports[`Main CRUD entity 1`] = `
 {