Merge pull request #3042 from murgatroid99/rbac_types_change_fix

grpc-js-xds: Update RBAC code to handle Node type change, pin @types/node

Author: murgatroid99

packages/grpc-js-xds/package.json

@@ -38,7 +38,7 @@
     "@types/gulp": "^4.0.6",
     "@types/gulp-mocha": "0.0.32",
     "@types/mocha": "^5.2.6",
-    "@types/node": ">=20.11.20",
+    "@types/node": "25.5.0",
     "@types/yargs": "^15.0.5",
     "grpc-health-check": "file:../grpc-health-check",
     "gts": "^5.0.1",

packages/grpc-js-xds/src/rbac.ts

@@ -225,7 +225,14 @@ export class AuthenticatedPrincipal implements PrincipalRule {
         }
       }
     }
-    return this.nameMatcher.apply(info.peerCertificate.subject.CN);
+    if (info.peerCertificate.subject.CN) {
+      if (Array.isArray(info.peerCertificate.subject.CN)) {
+        return info.peerCertificate.subject.CN.some(entry => this.nameMatcher!.apply(entry));
+      } else {
+        return this.nameMatcher.apply(info.peerCertificate.subject.CN);
+      }
+    }
+    return false;
   }
   toString(): string {
     return `Authenticated(principal=${this.nameMatcher?.toString() ?? null})`;