[Bot] NPM Packages Release UE5.8

[mcottontensor]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to UE5.8, this PR will be updated.

Releases

@epicgames-ps/lib-pixelstreamingsignalling-ue5.8@0.2.0

Minor Changes

• c8cd21a: Allow TURN credentials to be issued per connection rather than shared by every session. peerOptions is static, so a credential written there is sent to every peer that ever connects and cannot be changed without a redeploy — the weakness noted in tip 3 of the security guidelines. IServerConfig.peerOptionsProvider is consulted once per connecting peer and returns the peer options for that peer, falling back to peerOptions if it throws. On top of it the signalling server adds --turn_secret (or --turn_secret_file) and --turn_ttl, which give every turn:/turns: entry a time limited username and credential in the form coturn's use-auth-secret mode expects. Default behaviour is unchanged when no secret is supplied. See Docs/Security-Guidelines.md.

Patch Changes

• e9cd872: Stop an unsubscribed player from crashing the signalling server. When a player sends a message without being subscribed, sendToStreamer force-subscribes it to the first available streamer and then forwards through this.subscribedStreamer!. subscribe() can decline — most commonly because maxSubscribers is already reached — and reports that only by leaving subscribedStreamer unset, so the non-null assertions throw a TypeError out of a websocket message handler and take the process down, disconnecting every other player. It now checks the subscription took, and disconnects just that player if it did not.

@epicgames-ps/wilbur@3.1.0

Minor Changes

• c8cd21a: Allow TURN credentials to be issued per connection rather than shared by every session. peerOptions is static, so a credential written there is sent to every peer that ever connects and cannot be changed without a redeploy — the weakness noted in tip 3 of the security guidelines. IServerConfig.peerOptionsProvider is consulted once per connecting peer and returns the peer options for that peer, falling back to peerOptions if it throws. On top of it the signalling server adds --turn_secret (or --turn_secret_file) and --turn_ttl, which give every turn:/turns: entry a time limited username and credential in the form coturn's use-auth-secret mode expects. Default behaviour is unchanged when no secret is supplied. See Docs/Security-Guidelines.md.

Patch Changes

• e9cd872: Stop an unsubscribed player from crashing the signalling server. When a player sends a message without being subscribed, sendToStreamer force-subscribes it to the first available streamer and then forwards through this.subscribedStreamer!. subscribe() can decline — most commonly because maxSubscribers is already reached — and reports that only by leaving subscribedStreamer unset, so the non-null assertions throw a TypeError out of a websocket message handler and take the process down, disconnecting every other player. It now checks the subscription took, and disconnects just that player if it did not.
• Updated dependencies [e9cd872]
• Updated dependencies [c8cd21a]
  • @epicgames-ps/lib-pixelstreamingsignalling-ue5.8@0.2.0