Added auth and request storage

test/services/transports/http-transport.test.ts

@@ -70,6 +70,23 @@ describe('HttpTransportRouter', (): void => {
         expect(await response.text()).toBe('');
     });
 
+    it('passes normalized HTTP request headers to the route stream', async (): Promise<void> => {
+        const app = await createApp([
+            {
+                url: '/headers',
+                handler: async (stream): Promise<void> => stream.send({ path: stream.path, token: stream.headers['x-request-token'] }),
+            },
+        ]);
+
+        const response = await app.request('/headers', {
+            method: 'POST',
+            headers: { 'X-Request-Token': 'http-token' },
+        });
+
+        expect(response.status).toBe(200);
+        expect(await response.json()).toEqual({ path: '/headers', token: 'http-token' });
+    });
+
     it('returns normalized errors for non-streaming requests', async (): Promise<void> => {
         const app = await createApp([]);
 
@@ -149,6 +166,27 @@ describe('HttpTransportRouter', (): void => {
         expect(events).toContain('data: {"ok":true}');
     });
 
+    it('passes normalized HTTP request headers to an SSE route stream', async (): Promise<void> => {
+        const app = await createApp([
+            {
+                url: '/headers',
+                handler: (stream): Promise<void> => stream.send({ token: stream.headers['x-request-token'] }),
+            },
+        ]);
+
+        const response = await app.request('/headers', {
+            method: 'POST',
+            headers: {
+                accept: 'text/event-stream',
+                'X-Request-Token': 'sse-token',
+            },
+        });
+        const events = await response.text();
+
+        expect(response.status).toBe(200);
+        expect(events).toContain('data: {"token":"sse-token"}');
+    });
+
     it("keeps SSE open until the route's subscription promise resolves", async (): Promise<void> => {
         let removeSubscription: () => Promise<void> = async () => undefined;
         let markSubscribed: () => void = () => undefined;

test/services/transports/ws-transport.test.ts

@@ -13,19 +13,36 @@ describe('WebSocket request decoding', (): void => {
                     id: 'request-1',
                     path: '/data/write',
                     body: { value: new Uint8Array([ 1, 2, 3 ]) },
+                    headers: { 'X-Request-Token': 'ws-token' },
                 }))).resolves.toEqual({
             requestId: 'request-1',
             path: '/data/write',
             body: { value: new Uint8Array([ 1, 2, 3 ]) },
+            headers: { 'x-request-token': 'ws-token' },
         });
     });
 
-    it.each([ '{}', '{"path":42}', '{"path":"/data/get","id":1}', '{"path":"/data/get","method":"POST"}' ])(
-        'rejects an invalid envelope: %s',
-        async (payload) => {
-            await expect(WsTransportRouter.decodeWebSocketRequest(payload)).rejects.toBeInstanceOf(z.ZodError);
-        },
-    );
+    it('allows the optional headers object to be omitted', async (): Promise<void> => {
+        await expect(WsTransportRouter.decodeWebSocketRequest('{"path":"/data/get"}')).resolves.toEqual({ path: '/data/get' });
+    });
+
+    it.each([
+        '{}',
+        '{"path":42}',
+        '{"path":"/data/get","id":1}',
+        '{"path":"/data/get","method":"POST"}',
+        '{"path":"/data/get","headers":{"x-request-token":1}}',
+    ])('rejects an invalid envelope: %s', async (payload) => {
+        await expect(WsTransportRouter.decodeWebSocketRequest(payload)).rejects.toBeInstanceOf(z.ZodError);
+    });
+
+    it.each([
+        '{"path":"/data/get","headers":{"bad header":"value"}}',
+        '{"path":"/data/get","headers":{"x-request-token":"first","X-Request-Token":"second"}}',
+        '{"path":"/data/get","headers":{"x-request-token":"first\\r\\nsecond"}}',
+    ])('rejects malformed request headers: %s', async (payload): Promise<void> => {
+        await expect(WsTransportRouter.decodeWebSocketRequest(payload)).rejects.toMatchObject({ statusCode: 400 });
+    });
 
     it('rejects malformed JSON', async (): Promise<void> => {
         await expect(WsTransportRouter.decodeWebSocketRequest('{')).rejects.toMatchObject({