@aep-foundation/express 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# @aep-foundation/express
+
+## 0.1.0
+
+### Minor Changes
+
+- [#1](https://github.com/aep-foundation/aep-node/pull/1) [`3d4713e`](https://github.com/aep-foundation/aep-node/commit/3d4713e2a9cf85478a415192c7c0abc90c374073) Thanks [@nkavian](https://github.com/nkavian)! - Add the initial AEP Node SDK packages, framework adapters, and conformance helpers.
+
+### Patch Changes
+
+- Updated dependencies [[`3d4713e`](https://github.com/aep-foundation/aep-node/commit/3d4713e2a9cf85478a415192c7c0abc90c374073)]:
+  - @aep-foundation/core@0.1.0
+  - @aep-foundation/service@0.1.0
+
+## 0.0.0
+
+Initial development version.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AEP Foundation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @aep-foundation/express
+
+Thin Express adapter for `@aep-foundation/service`.
+
+`registerExpressAepRoute()` registers only the Inspect route. Use
+`registerExpressAepRoutes()` to register Inspect plus Enroll, Status, Grant,
+and Revoke command routes from the Service Inspect metadata.

package/dist/index.cjs

@@ -0,0 +1,124 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AEP_EXPRESS_MEDIA_TYPE: () => AEP_EXPRESS_MEDIA_TYPE,
+  AEP_EXPRESS_WELL_KNOWN_PATH: () => AEP_EXPRESS_WELL_KNOWN_PATH,
+  createExpressAepHandler: () => createExpressAepHandler,
+  createExpressAepHandlers: () => createExpressAepHandlers,
+  packageName: () => packageName,
+  registerExpressAepRoute: () => registerExpressAepRoute,
+  registerExpressAepRoutes: () => registerExpressAepRoutes
+});
+module.exports = __toCommonJS(index_exports);
+var import_core = require("@aep-foundation/core");
+var import_service = require("@aep-foundation/service");
+var packageName = "@aep-foundation/express";
+var AEP_EXPRESS_WELL_KNOWN_PATH = "/.well-known/aep";
+var AEP_EXPRESS_MEDIA_TYPE = "application/aep+json";
+function createExpressAepHandler(input) {
+  const service = resolveService(input);
+  return (request, response) => {
+    if (request.method !== void 0 && request.method !== "GET") {
+      response.set?.("Allow", "GET");
+      return response.status(405).json({
+        detail: "AEP Inspect only supports GET requests.",
+        status: 405,
+        title: "Method Not Allowed"
+      });
+    }
+    response.type?.(AEP_EXPRESS_MEDIA_TYPE);
+    return response.status(200).json(service.inspectDocument());
+  };
+}
+function createExpressAepHandlers(input) {
+  const service = resolveService(input);
+  return {
+    enroll: createExpressCommandHandler(service, "enroll"),
+    grant: createExpressCommandHandler(service, "grant"),
+    inspect: createExpressAepHandler(service),
+    revoke: createExpressCommandHandler(service, "revoke"),
+    status: createExpressCommandHandler(service, "status")
+  };
+}
+function registerExpressAepRoute(router, input, path = AEP_EXPRESS_WELL_KNOWN_PATH) {
+  router.get(path, createExpressAepHandler(input));
+  return router;
+}
+function registerExpressAepRoutes(router, input, inspectPath = AEP_EXPRESS_WELL_KNOWN_PATH) {
+  const service = resolveService(input);
+  const handlers = createExpressAepHandlers(service);
+  const inspect = service.inspectDocument();
+  router.get(inspectPath, handlers.inspect);
+  router.post((0, import_core.commandPathFromInspect)(inspect, "enroll"), handlers.enroll);
+  router.get((0, import_core.commandPathFromInspect)(inspect, "status"), handlers.status);
+  router.post((0, import_core.commandPathFromInspect)(inspect, "grant"), handlers.grant);
+  router.post((0, import_core.commandPathFromInspect)(inspect, "revoke"), handlers.revoke);
+  return router;
+}
+function createExpressCommandHandler(service, command) {
+  return async (request, response) => {
+    const clientAssertion = authorizationAssertion(request);
+    const idempotencyKey = idempotencyKeyHeader(request);
+    const commandOptions = authenticatedOptions(clientAssertion, idempotencyKey);
+    const result = command === "enroll" ? await service.enroll(request.body, commandOptions) : command === "status" ? await service.status({ clientAssertion }) : command === "grant" ? await service.grant(request.body, commandOptions) : await service.revoke(request.body, commandOptions);
+    response.type?.(result.contentType);
+    return response.status(result.status).json(result.body);
+  };
+}
+function authenticatedOptions(clientAssertion, idempotencyKey) {
+  return {
+    clientAssertion,
+    ...idempotencyKey === void 0 ? {} : { idempotencyKey }
+  };
+}
+function authorizationAssertion(request) {
+  const authorization = request.get?.("Authorization") ?? request.header?.("Authorization") ?? headerValue(request.headers, "authorization");
+  return parseAepAuthorization(authorization);
+}
+function idempotencyKeyHeader(request) {
+  return request.get?.("Idempotency-Key") ?? request.header?.("Idempotency-Key") ?? headerValue(request.headers, "idempotency-key");
+}
+function headerValue(headers, name) {
+  const value = headers?.[name] ?? headers?.[name.toLowerCase()];
+  return Array.isArray(value) ? value[0] : value;
+}
+function parseAepAuthorization(authorization) {
+  const prefix = "AEP ";
+  if (authorization?.startsWith(prefix)) {
+    return authorization.slice(prefix.length);
+  }
+  return "";
+}
+function resolveService(input) {
+  return "inspectDocument" in input ? input : (0, import_service.createAepService)(input);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AEP_EXPRESS_MEDIA_TYPE,
+  AEP_EXPRESS_WELL_KNOWN_PATH,
+  createExpressAepHandler,
+  createExpressAepHandlers,
+  packageName,
+  registerExpressAepRoute,
+  registerExpressAepRoutes
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { commandPathFromInspect } from \"@aep-foundation/core\";\nimport { createAepService } from \"@aep-foundation/service\";\nimport type {\n  AepAuthenticatedServiceOptions,\n  AepService,\n  AepServiceOptions\n} from \"@aep-foundation/service\";\n\nexport const packageName = \"@aep-foundation/express\";\nexport const AEP_EXPRESS_WELL_KNOWN_PATH = \"/.well-known/aep\";\nexport const AEP_EXPRESS_MEDIA_TYPE = \"application/aep+json\";\n\nexport interface ExpressAepRequest {\n  body?: unknown;\n  get?(field: string): string | undefined;\n  header?(field: string): string | undefined;\n  headers?: Record<string, string | string[] | undefined>;\n  method?: string;\n}\n\nexport interface ExpressAepResponse {\n  json(body: unknown): unknown;\n  set?(field: string, value: string): unknown;\n  status(code: number): ExpressAepResponse;\n  type?(contentType: string): ExpressAepResponse;\n}\n\nexport type ExpressAepNext = () => void;\nexport type ExpressAepHandler = (\n  request: ExpressAepRequest,\n  response: ExpressAepResponse,\n  next?: ExpressAepNext\n) => unknown;\n\nexport type ExpressAepServiceInput = AepService | AepServiceOptions;\n\nexport interface ExpressAepInspectRouterLike {\n  get(path: string, handler: ExpressAepHandler): unknown;\n}\n\nexport interface ExpressAepRouterLike extends ExpressAepInspectRouterLike {\n  post(path: string, handler: ExpressAepHandler): unknown;\n}\n\nexport interface ExpressAepRouteHandlers {\n  enroll: ExpressAepHandler;\n  grant: ExpressAepHandler;\n  inspect: ExpressAepHandler;\n  revoke: ExpressAepHandler;\n  status: ExpressAepHandler;\n}\n\nexport function createExpressAepHandler(input: ExpressAepServiceInput): ExpressAepHandler {\n  const service = resolveService(input);\n\n  return (request, response) => {\n    if (request.method !== undefined && request.method !== \"GET\") {\n      response.set?.(\"Allow\", \"GET\");\n      return response.status(405).json({\n        detail: \"AEP Inspect only supports GET requests.\",\n        status: 405,\n        title: \"Method Not Allowed\"\n      });\n    }\n\n    response.type?.(AEP_EXPRESS_MEDIA_TYPE);\n    return response.status(200).json(service.inspectDocument());\n  };\n}\n\nexport function createExpressAepHandlers(input: ExpressAepServiceInput): ExpressAepRouteHandlers {\n  const service = resolveService(input);\n\n  return {\n    enroll: createExpressCommandHandler(service, \"enroll\"),\n    grant: createExpressCommandHandler(service, \"grant\"),\n    inspect: createExpressAepHandler(service),\n    revoke: createExpressCommandHandler(service, \"revoke\"),\n    status: createExpressCommandHandler(service, \"status\")\n  };\n}\n\nexport function registerExpressAepRoute(\n  router: ExpressAepInspectRouterLike,\n  input: ExpressAepServiceInput,\n  path = AEP_EXPRESS_WELL_KNOWN_PATH\n): ExpressAepInspectRouterLike {\n  router.get(path, createExpressAepHandler(input));\n  return router;\n}\n\nexport function registerExpressAepRoutes(\n  router: ExpressAepRouterLike,\n  input: ExpressAepServiceInput,\n  inspectPath = AEP_EXPRESS_WELL_KNOWN_PATH\n): ExpressAepRouterLike {\n  const service = resolveService(input);\n  const handlers = createExpressAepHandlers(service);\n  const inspect = service.inspectDocument();\n\n  router.get(inspectPath, handlers.inspect);\n  router.post(commandPathFromInspect(inspect, \"enroll\"), handlers.enroll);\n  router.get(commandPathFromInspect(inspect, \"status\"), handlers.status);\n  router.post(commandPathFromInspect(inspect, \"grant\"), handlers.grant);\n  router.post(commandPathFromInspect(inspect, \"revoke\"), handlers.revoke);\n  return router;\n}\n\nfunction createExpressCommandHandler(\n  service: AepService,\n  command: \"enroll\" | \"grant\" | \"revoke\" | \"status\"\n): ExpressAepHandler {\n  return async (request, response) => {\n    const clientAssertion = authorizationAssertion(request);\n    const idempotencyKey = idempotencyKeyHeader(request);\n    const commandOptions = authenticatedOptions(clientAssertion, idempotencyKey);\n    const result =\n      command === \"enroll\"\n        ? await service.enroll(request.body, commandOptions)\n        : command === \"status\"\n          ? await service.status({ clientAssertion })\n          : command === \"grant\"\n            ? await service.grant(request.body, commandOptions)\n            : await service.revoke(request.body, commandOptions);\n\n    response.type?.(result.contentType);\n    return response.status(result.status).json(result.body);\n  };\n}\n\nfunction authenticatedOptions(\n  clientAssertion: string,\n  idempotencyKey: string | undefined\n): AepAuthenticatedServiceOptions {\n  return {\n    clientAssertion,\n    ...(idempotencyKey === undefined ? {} : { idempotencyKey })\n  };\n}\n\nfunction authorizationAssertion(request: ExpressAepRequest): string {\n  const authorization =\n    request.get?.(\"Authorization\") ??\n    request.header?.(\"Authorization\") ??\n    headerValue(request.headers, \"authorization\");\n\n  return parseAepAuthorization(authorization);\n}\n\nfunction idempotencyKeyHeader(request: ExpressAepRequest): string | undefined {\n  return (\n    request.get?.(\"Idempotency-Key\") ??\n    request.header?.(\"Idempotency-Key\") ??\n    headerValue(request.headers, \"idempotency-key\")\n  );\n}\n\nfunction headerValue(\n  headers: Record<string, string | string[] | undefined> | undefined,\n  name: string\n): string | undefined {\n  const value = headers?.[name] ?? headers?.[name.toLowerCase()];\n\n  return Array.isArray(value) ? value[0] : value;\n}\n\nfunction parseAepAuthorization(authorization: string | undefined): string {\n  const prefix = \"AEP \";\n\n  if (authorization?.startsWith(prefix)) {\n    return authorization.slice(prefix.length);\n  }\n\n  return \"\";\n}\n\nfunction resolveService(input: ExpressAepServiceInput): AepService {\n  return \"inspectDocument\" in input ? input : createAepService(input);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAuC;AACvC,qBAAiC;AAO1B,IAAM,cAAc;AACpB,IAAM,8BAA8B;AACpC,IAAM,yBAAyB;AA0C/B,SAAS,wBAAwB,OAAkD;AACxF,QAAM,UAAU,eAAe,KAAK;AAEpC,SAAO,CAAC,SAAS,aAAa;AAC5B,QAAI,QAAQ,WAAW,UAAa,QAAQ,WAAW,OAAO;AAC5D,eAAS,MAAM,SAAS,KAAK;AAC7B,aAAO,SAAS,OAAO,GAAG,EAAE,KAAK;AAAA,QAC/B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,aAAS,OAAO,sBAAsB;AACtC,WAAO,SAAS,OAAO,GAAG,EAAE,KAAK,QAAQ,gBAAgB,CAAC;AAAA,EAC5D;AACF;AAEO,SAAS,yBAAyB,OAAwD;AAC/F,QAAM,UAAU,eAAe,KAAK;AAEpC,SAAO;AAAA,IACL,QAAQ,4BAA4B,SAAS,QAAQ;AAAA,IACrD,OAAO,4BAA4B,SAAS,OAAO;AAAA,IACnD,SAAS,wBAAwB,OAAO;AAAA,IACxC,QAAQ,4BAA4B,SAAS,QAAQ;AAAA,IACrD,QAAQ,4BAA4B,SAAS,QAAQ;AAAA,EACvD;AACF;AAEO,SAAS,wBACd,QACA,OACA,OAAO,6BACsB;AAC7B,SAAO,IAAI,MAAM,wBAAwB,KAAK,CAAC;AAC/C,SAAO;AACT;AAEO,SAAS,yBACd,QACA,OACA,cAAc,6BACQ;AACtB,QAAM,UAAU,eAAe,KAAK;AACpC,QAAM,WAAW,yBAAyB,OAAO;AACjD,QAAM,UAAU,QAAQ,gBAAgB;AAExC,SAAO,IAAI,aAAa,SAAS,OAAO;AACxC,SAAO,SAAK,oCAAuB,SAAS,QAAQ,GAAG,SAAS,MAAM;AACtE,SAAO,QAAI,oCAAuB,SAAS,QAAQ,GAAG,SAAS,MAAM;AACrE,SAAO,SAAK,oCAAuB,SAAS,OAAO,GAAG,SAAS,KAAK;AACpE,SAAO,SAAK,oCAAuB,SAAS,QAAQ,GAAG,SAAS,MAAM;AACtE,SAAO;AACT;AAEA,SAAS,4BACP,SACA,SACmB;AACnB,SAAO,OAAO,SAAS,aAAa;AAClC,UAAM,kBAAkB,uBAAuB,OAAO;AACtD,UAAM,iBAAiB,qBAAqB,OAAO;AACnD,UAAM,iBAAiB,qBAAqB,iBAAiB,cAAc;AAC3E,UAAM,SACJ,YAAY,WACR,MAAM,QAAQ,OAAO,QAAQ,MAAM,cAAc,IACjD,YAAY,WACV,MAAM,QAAQ,OAAO,EAAE,gBAAgB,CAAC,IACxC,YAAY,UACV,MAAM,QAAQ,MAAM,QAAQ,MAAM,cAAc,IAChD,MAAM,QAAQ,OAAO,QAAQ,MAAM,cAAc;AAE3D,aAAS,OAAO,OAAO,WAAW;AAClC,WAAO,SAAS,OAAO,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI;AAAA,EACxD;AACF;AAEA,SAAS,qBACP,iBACA,gBACgC;AAChC,SAAO;AAAA,IACL;AAAA,IACA,GAAI,mBAAmB,SAAY,CAAC,IAAI,EAAE,eAAe;AAAA,EAC3D;AACF;AAEA,SAAS,uBAAuB,SAAoC;AAClE,QAAM,gBACJ,QAAQ,MAAM,eAAe,KAC7B,QAAQ,SAAS,eAAe,KAChC,YAAY,QAAQ,SAAS,eAAe;AAE9C,SAAO,sBAAsB,aAAa;AAC5C;AAEA,SAAS,qBAAqB,SAAgD;AAC5E,SACE,QAAQ,MAAM,iBAAiB,KAC/B,QAAQ,SAAS,iBAAiB,KAClC,YAAY,QAAQ,SAAS,iBAAiB;AAElD;AAEA,SAAS,YACP,SACA,MACoB;AACpB,QAAM,QAAQ,UAAU,IAAI,KAAK,UAAU,KAAK,YAAY,CAAC;AAE7D,SAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC3C;AAEA,SAAS,sBAAsB,eAA2C;AACxE,QAAM,SAAS;AAEf,MAAI,eAAe,WAAW,MAAM,GAAG;AACrC,WAAO,cAAc,MAAM,OAAO,MAAM;AAAA,EAC1C;AAEA,SAAO;AACT;AAEA,SAAS,eAAe,OAA2C;AACjE,SAAO,qBAAqB,QAAQ,YAAQ,iCAAiB,KAAK;AACpE;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,40 @@
+import { AepService, AepServiceOptions } from '@aep-foundation/service';
+
+declare const packageName = "@aep-foundation/express";
+declare const AEP_EXPRESS_WELL_KNOWN_PATH = "/.well-known/aep";
+declare const AEP_EXPRESS_MEDIA_TYPE = "application/aep+json";
+interface ExpressAepRequest {
+    body?: unknown;
+    get?(field: string): string | undefined;
+    header?(field: string): string | undefined;
+    headers?: Record<string, string | string[] | undefined>;
+    method?: string;
+}
+interface ExpressAepResponse {
+    json(body: unknown): unknown;
+    set?(field: string, value: string): unknown;
+    status(code: number): ExpressAepResponse;
+    type?(contentType: string): ExpressAepResponse;
+}
+type ExpressAepNext = () => void;
+type ExpressAepHandler = (request: ExpressAepRequest, response: ExpressAepResponse, next?: ExpressAepNext) => unknown;
+type ExpressAepServiceInput = AepService | AepServiceOptions;
+interface ExpressAepInspectRouterLike {
+    get(path: string, handler: ExpressAepHandler): unknown;
+}
+interface ExpressAepRouterLike extends ExpressAepInspectRouterLike {
+    post(path: string, handler: ExpressAepHandler): unknown;
+}
+interface ExpressAepRouteHandlers {
+    enroll: ExpressAepHandler;
+    grant: ExpressAepHandler;
+    inspect: ExpressAepHandler;
+    revoke: ExpressAepHandler;
+    status: ExpressAepHandler;
+}
+declare function createExpressAepHandler(input: ExpressAepServiceInput): ExpressAepHandler;
+declare function createExpressAepHandlers(input: ExpressAepServiceInput): ExpressAepRouteHandlers;
+declare function registerExpressAepRoute(router: ExpressAepInspectRouterLike, input: ExpressAepServiceInput, path?: string): ExpressAepInspectRouterLike;
+declare function registerExpressAepRoutes(router: ExpressAepRouterLike, input: ExpressAepServiceInput, inspectPath?: string): ExpressAepRouterLike;
+
+export { AEP_EXPRESS_MEDIA_TYPE, AEP_EXPRESS_WELL_KNOWN_PATH, type ExpressAepHandler, type ExpressAepInspectRouterLike, type ExpressAepNext, type ExpressAepRequest, type ExpressAepResponse, type ExpressAepRouteHandlers, type ExpressAepRouterLike, type ExpressAepServiceInput, createExpressAepHandler, createExpressAepHandlers, packageName, registerExpressAepRoute, registerExpressAepRoutes };

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+import { AepService, AepServiceOptions } from '@aep-foundation/service';
+
+declare const packageName = "@aep-foundation/express";
+declare const AEP_EXPRESS_WELL_KNOWN_PATH = "/.well-known/aep";
+declare const AEP_EXPRESS_MEDIA_TYPE = "application/aep+json";
+interface ExpressAepRequest {
+    body?: unknown;
+    get?(field: string): string | undefined;
+    header?(field: string): string | undefined;
+    headers?: Record<string, string | string[] | undefined>;
+    method?: string;
+}
+interface ExpressAepResponse {
+    json(body: unknown): unknown;
+    set?(field: string, value: string): unknown;
+    status(code: number): ExpressAepResponse;
+    type?(contentType: string): ExpressAepResponse;
+}
+type ExpressAepNext = () => void;
+type ExpressAepHandler = (request: ExpressAepRequest, response: ExpressAepResponse, next?: ExpressAepNext) => unknown;
+type ExpressAepServiceInput = AepService | AepServiceOptions;
+interface ExpressAepInspectRouterLike {
+    get(path: string, handler: ExpressAepHandler): unknown;
+}
+interface ExpressAepRouterLike extends ExpressAepInspectRouterLike {
+    post(path: string, handler: ExpressAepHandler): unknown;
+}
+interface ExpressAepRouteHandlers {
+    enroll: ExpressAepHandler;
+    grant: ExpressAepHandler;
+    inspect: ExpressAepHandler;
+    revoke: ExpressAepHandler;
+    status: ExpressAepHandler;
+}
+declare function createExpressAepHandler(input: ExpressAepServiceInput): ExpressAepHandler;
+declare function createExpressAepHandlers(input: ExpressAepServiceInput): ExpressAepRouteHandlers;
+declare function registerExpressAepRoute(router: ExpressAepInspectRouterLike, input: ExpressAepServiceInput, path?: string): ExpressAepInspectRouterLike;
+declare function registerExpressAepRoutes(router: ExpressAepRouterLike, input: ExpressAepServiceInput, inspectPath?: string): ExpressAepRouterLike;
+
+export { AEP_EXPRESS_MEDIA_TYPE, AEP_EXPRESS_WELL_KNOWN_PATH, type ExpressAepHandler, type ExpressAepInspectRouterLike, type ExpressAepNext, type ExpressAepRequest, type ExpressAepResponse, type ExpressAepRouteHandlers, type ExpressAepRouterLike, type ExpressAepServiceInput, createExpressAepHandler, createExpressAepHandlers, packageName, registerExpressAepRoute, registerExpressAepRoutes };

package/dist/index.js

@@ -0,0 +1,93 @@
+// src/index.ts
+import { commandPathFromInspect } from "@aep-foundation/core";
+import { createAepService } from "@aep-foundation/service";
+var packageName = "@aep-foundation/express";
+var AEP_EXPRESS_WELL_KNOWN_PATH = "/.well-known/aep";
+var AEP_EXPRESS_MEDIA_TYPE = "application/aep+json";
+function createExpressAepHandler(input) {
+  const service = resolveService(input);
+  return (request, response) => {
+    if (request.method !== void 0 && request.method !== "GET") {
+      response.set?.("Allow", "GET");
+      return response.status(405).json({
+        detail: "AEP Inspect only supports GET requests.",
+        status: 405,
+        title: "Method Not Allowed"
+      });
+    }
+    response.type?.(AEP_EXPRESS_MEDIA_TYPE);
+    return response.status(200).json(service.inspectDocument());
+  };
+}
+function createExpressAepHandlers(input) {
+  const service = resolveService(input);
+  return {
+    enroll: createExpressCommandHandler(service, "enroll"),
+    grant: createExpressCommandHandler(service, "grant"),
+    inspect: createExpressAepHandler(service),
+    revoke: createExpressCommandHandler(service, "revoke"),
+    status: createExpressCommandHandler(service, "status")
+  };
+}
+function registerExpressAepRoute(router, input, path = AEP_EXPRESS_WELL_KNOWN_PATH) {
+  router.get(path, createExpressAepHandler(input));
+  return router;
+}
+function registerExpressAepRoutes(router, input, inspectPath = AEP_EXPRESS_WELL_KNOWN_PATH) {
+  const service = resolveService(input);
+  const handlers = createExpressAepHandlers(service);
+  const inspect = service.inspectDocument();
+  router.get(inspectPath, handlers.inspect);
+  router.post(commandPathFromInspect(inspect, "enroll"), handlers.enroll);
+  router.get(commandPathFromInspect(inspect, "status"), handlers.status);
+  router.post(commandPathFromInspect(inspect, "grant"), handlers.grant);
+  router.post(commandPathFromInspect(inspect, "revoke"), handlers.revoke);
+  return router;
+}
+function createExpressCommandHandler(service, command) {
+  return async (request, response) => {
+    const clientAssertion = authorizationAssertion(request);
+    const idempotencyKey = idempotencyKeyHeader(request);
+    const commandOptions = authenticatedOptions(clientAssertion, idempotencyKey);
+    const result = command === "enroll" ? await service.enroll(request.body, commandOptions) : command === "status" ? await service.status({ clientAssertion }) : command === "grant" ? await service.grant(request.body, commandOptions) : await service.revoke(request.body, commandOptions);
+    response.type?.(result.contentType);
+    return response.status(result.status).json(result.body);
+  };
+}
+function authenticatedOptions(clientAssertion, idempotencyKey) {
+  return {
+    clientAssertion,
+    ...idempotencyKey === void 0 ? {} : { idempotencyKey }
+  };
+}
+function authorizationAssertion(request) {
+  const authorization = request.get?.("Authorization") ?? request.header?.("Authorization") ?? headerValue(request.headers, "authorization");
+  return parseAepAuthorization(authorization);
+}
+function idempotencyKeyHeader(request) {
+  return request.get?.("Idempotency-Key") ?? request.header?.("Idempotency-Key") ?? headerValue(request.headers, "idempotency-key");
+}
+function headerValue(headers, name) {
+  const value = headers?.[name] ?? headers?.[name.toLowerCase()];
+  return Array.isArray(value) ? value[0] : value;
+}
+function parseAepAuthorization(authorization) {
+  const prefix = "AEP ";
+  if (authorization?.startsWith(prefix)) {
+    return authorization.slice(prefix.length);
+  }
+  return "";
+}
+function resolveService(input) {
+  return "inspectDocument" in input ? input : createAepService(input);
+}
+export {
+  AEP_EXPRESS_MEDIA_TYPE,
+  AEP_EXPRESS_WELL_KNOWN_PATH,
+  createExpressAepHandler,
+  createExpressAepHandlers,
+  packageName,
+  registerExpressAepRoute,
+  registerExpressAepRoutes
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { commandPathFromInspect } from \"@aep-foundation/core\";\nimport { createAepService } from \"@aep-foundation/service\";\nimport type {\n  AepAuthenticatedServiceOptions,\n  AepService,\n  AepServiceOptions\n} from \"@aep-foundation/service\";\n\nexport const packageName = \"@aep-foundation/express\";\nexport const AEP_EXPRESS_WELL_KNOWN_PATH = \"/.well-known/aep\";\nexport const AEP_EXPRESS_MEDIA_TYPE = \"application/aep+json\";\n\nexport interface ExpressAepRequest {\n  body?: unknown;\n  get?(field: string): string | undefined;\n  header?(field: string): string | undefined;\n  headers?: Record<string, string | string[] | undefined>;\n  method?: string;\n}\n\nexport interface ExpressAepResponse {\n  json(body: unknown): unknown;\n  set?(field: string, value: string): unknown;\n  status(code: number): ExpressAepResponse;\n  type?(contentType: string): ExpressAepResponse;\n}\n\nexport type ExpressAepNext = () => void;\nexport type ExpressAepHandler = (\n  request: ExpressAepRequest,\n  response: ExpressAepResponse,\n  next?: ExpressAepNext\n) => unknown;\n\nexport type ExpressAepServiceInput = AepService | AepServiceOptions;\n\nexport interface ExpressAepInspectRouterLike {\n  get(path: string, handler: ExpressAepHandler): unknown;\n}\n\nexport interface ExpressAepRouterLike extends ExpressAepInspectRouterLike {\n  post(path: string, handler: ExpressAepHandler): unknown;\n}\n\nexport interface ExpressAepRouteHandlers {\n  enroll: ExpressAepHandler;\n  grant: ExpressAepHandler;\n  inspect: ExpressAepHandler;\n  revoke: ExpressAepHandler;\n  status: ExpressAepHandler;\n}\n\nexport function createExpressAepHandler(input: ExpressAepServiceInput): ExpressAepHandler {\n  const service = resolveService(input);\n\n  return (request, response) => {\n    if (request.method !== undefined && request.method !== \"GET\") {\n      response.set?.(\"Allow\", \"GET\");\n      return response.status(405).json({\n        detail: \"AEP Inspect only supports GET requests.\",\n        status: 405,\n        title: \"Method Not Allowed\"\n      });\n    }\n\n    response.type?.(AEP_EXPRESS_MEDIA_TYPE);\n    return response.status(200).json(service.inspectDocument());\n  };\n}\n\nexport function createExpressAepHandlers(input: ExpressAepServiceInput): ExpressAepRouteHandlers {\n  const service = resolveService(input);\n\n  return {\n    enroll: createExpressCommandHandler(service, \"enroll\"),\n    grant: createExpressCommandHandler(service, \"grant\"),\n    inspect: createExpressAepHandler(service),\n    revoke: createExpressCommandHandler(service, \"revoke\"),\n    status: createExpressCommandHandler(service, \"status\")\n  };\n}\n\nexport function registerExpressAepRoute(\n  router: ExpressAepInspectRouterLike,\n  input: ExpressAepServiceInput,\n  path = AEP_EXPRESS_WELL_KNOWN_PATH\n): ExpressAepInspectRouterLike {\n  router.get(path, createExpressAepHandler(input));\n  return router;\n}\n\nexport function registerExpressAepRoutes(\n  router: ExpressAepRouterLike,\n  input: ExpressAepServiceInput,\n  inspectPath = AEP_EXPRESS_WELL_KNOWN_PATH\n): ExpressAepRouterLike {\n  const service = resolveService(input);\n  const handlers = createExpressAepHandlers(service);\n  const inspect = service.inspectDocument();\n\n  router.get(inspectPath, handlers.inspect);\n  router.post(commandPathFromInspect(inspect, \"enroll\"), handlers.enroll);\n  router.get(commandPathFromInspect(inspect, \"status\"), handlers.status);\n  router.post(commandPathFromInspect(inspect, \"grant\"), handlers.grant);\n  router.post(commandPathFromInspect(inspect, \"revoke\"), handlers.revoke);\n  return router;\n}\n\nfunction createExpressCommandHandler(\n  service: AepService,\n  command: \"enroll\" | \"grant\" | \"revoke\" | \"status\"\n): ExpressAepHandler {\n  return async (request, response) => {\n    const clientAssertion = authorizationAssertion(request);\n    const idempotencyKey = idempotencyKeyHeader(request);\n    const commandOptions = authenticatedOptions(clientAssertion, idempotencyKey);\n    const result =\n      command === \"enroll\"\n        ? await service.enroll(request.body, commandOptions)\n        : command === \"status\"\n          ? await service.status({ clientAssertion })\n          : command === \"grant\"\n            ? await service.grant(request.body, commandOptions)\n            : await service.revoke(request.body, commandOptions);\n\n    response.type?.(result.contentType);\n    return response.status(result.status).json(result.body);\n  };\n}\n\nfunction authenticatedOptions(\n  clientAssertion: string,\n  idempotencyKey: string | undefined\n): AepAuthenticatedServiceOptions {\n  return {\n    clientAssertion,\n    ...(idempotencyKey === undefined ? {} : { idempotencyKey })\n  };\n}\n\nfunction authorizationAssertion(request: ExpressAepRequest): string {\n  const authorization =\n    request.get?.(\"Authorization\") ??\n    request.header?.(\"Authorization\") ??\n    headerValue(request.headers, \"authorization\");\n\n  return parseAepAuthorization(authorization);\n}\n\nfunction idempotencyKeyHeader(request: ExpressAepRequest): string | undefined {\n  return (\n    request.get?.(\"Idempotency-Key\") ??\n    request.header?.(\"Idempotency-Key\") ??\n    headerValue(request.headers, \"idempotency-key\")\n  );\n}\n\nfunction headerValue(\n  headers: Record<string, string | string[] | undefined> | undefined,\n  name: string\n): string | undefined {\n  const value = headers?.[name] ?? headers?.[name.toLowerCase()];\n\n  return Array.isArray(value) ? value[0] : value;\n}\n\nfunction parseAepAuthorization(authorization: string | undefined): string {\n  const prefix = \"AEP \";\n\n  if (authorization?.startsWith(prefix)) {\n    return authorization.slice(prefix.length);\n  }\n\n  return \"\";\n}\n\nfunction resolveService(input: ExpressAepServiceInput): AepService {\n  return \"inspectDocument\" in input ? input : createAepService(input);\n}\n"],"mappings":";AAAA,SAAS,8BAA8B;AACvC,SAAS,wBAAwB;AAO1B,IAAM,cAAc;AACpB,IAAM,8BAA8B;AACpC,IAAM,yBAAyB;AA0C/B,SAAS,wBAAwB,OAAkD;AACxF,QAAM,UAAU,eAAe,KAAK;AAEpC,SAAO,CAAC,SAAS,aAAa;AAC5B,QAAI,QAAQ,WAAW,UAAa,QAAQ,WAAW,OAAO;AAC5D,eAAS,MAAM,SAAS,KAAK;AAC7B,aAAO,SAAS,OAAO,GAAG,EAAE,KAAK;AAAA,QAC/B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,aAAS,OAAO,sBAAsB;AACtC,WAAO,SAAS,OAAO,GAAG,EAAE,KAAK,QAAQ,gBAAgB,CAAC;AAAA,EAC5D;AACF;AAEO,SAAS,yBAAyB,OAAwD;AAC/F,QAAM,UAAU,eAAe,KAAK;AAEpC,SAAO;AAAA,IACL,QAAQ,4BAA4B,SAAS,QAAQ;AAAA,IACrD,OAAO,4BAA4B,SAAS,OAAO;AAAA,IACnD,SAAS,wBAAwB,OAAO;AAAA,IACxC,QAAQ,4BAA4B,SAAS,QAAQ;AAAA,IACrD,QAAQ,4BAA4B,SAAS,QAAQ;AAAA,EACvD;AACF;AAEO,SAAS,wBACd,QACA,OACA,OAAO,6BACsB;AAC7B,SAAO,IAAI,MAAM,wBAAwB,KAAK,CAAC;AAC/C,SAAO;AACT;AAEO,SAAS,yBACd,QACA,OACA,cAAc,6BACQ;AACtB,QAAM,UAAU,eAAe,KAAK;AACpC,QAAM,WAAW,yBAAyB,OAAO;AACjD,QAAM,UAAU,QAAQ,gBAAgB;AAExC,SAAO,IAAI,aAAa,SAAS,OAAO;AACxC,SAAO,KAAK,uBAAuB,SAAS,QAAQ,GAAG,SAAS,MAAM;AACtE,SAAO,IAAI,uBAAuB,SAAS,QAAQ,GAAG,SAAS,MAAM;AACrE,SAAO,KAAK,uBAAuB,SAAS,OAAO,GAAG,SAAS,KAAK;AACpE,SAAO,KAAK,uBAAuB,SAAS,QAAQ,GAAG,SAAS,MAAM;AACtE,SAAO;AACT;AAEA,SAAS,4BACP,SACA,SACmB;AACnB,SAAO,OAAO,SAAS,aAAa;AAClC,UAAM,kBAAkB,uBAAuB,OAAO;AACtD,UAAM,iBAAiB,qBAAqB,OAAO;AACnD,UAAM,iBAAiB,qBAAqB,iBAAiB,cAAc;AAC3E,UAAM,SACJ,YAAY,WACR,MAAM,QAAQ,OAAO,QAAQ,MAAM,cAAc,IACjD,YAAY,WACV,MAAM,QAAQ,OAAO,EAAE,gBAAgB,CAAC,IACxC,YAAY,UACV,MAAM,QAAQ,MAAM,QAAQ,MAAM,cAAc,IAChD,MAAM,QAAQ,OAAO,QAAQ,MAAM,cAAc;AAE3D,aAAS,OAAO,OAAO,WAAW;AAClC,WAAO,SAAS,OAAO,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI;AAAA,EACxD;AACF;AAEA,SAAS,qBACP,iBACA,gBACgC;AAChC,SAAO;AAAA,IACL;AAAA,IACA,GAAI,mBAAmB,SAAY,CAAC,IAAI,EAAE,eAAe;AAAA,EAC3D;AACF;AAEA,SAAS,uBAAuB,SAAoC;AAClE,QAAM,gBACJ,QAAQ,MAAM,eAAe,KAC7B,QAAQ,SAAS,eAAe,KAChC,YAAY,QAAQ,SAAS,eAAe;AAE9C,SAAO,sBAAsB,aAAa;AAC5C;AAEA,SAAS,qBAAqB,SAAgD;AAC5E,SACE,QAAQ,MAAM,iBAAiB,KAC/B,QAAQ,SAAS,iBAAiB,KAClC,YAAY,QAAQ,SAAS,iBAAiB;AAElD;AAEA,SAAS,YACP,SACA,MACoB;AACpB,QAAM,QAAQ,UAAU,IAAI,KAAK,UAAU,KAAK,YAAY,CAAC;AAE7D,SAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC3C;AAEA,SAAS,sBAAsB,eAA2C;AACxE,QAAM,SAAS;AAEf,MAAI,eAAe,WAAW,MAAM,GAAG;AACrC,WAAO,cAAc,MAAM,OAAO,MAAM;AAAA,EAC1C;AAEA,SAAO;AACT;AAEA,SAAS,eAAe,OAA2C;AACjE,SAAO,qBAAqB,QAAQ,QAAQ,iBAAiB,KAAK;AACpE;","names":[]}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@aep-foundation/express",
+  "version": "0.1.0",
+  "description": "Express adapter for AEP Service handlers.",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "node": {
+        "import": "./dist/index.js",
+        "require": "./dist/index.cjs"
+      },
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "CHANGELOG.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@aep-foundation/core": "^0.1.0",
+    "@aep-foundation/service": "^0.1.0"
+  },
+  "peerDependencies": {
+    "express": ">=5"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.6",
+    "express": "^5.2.1"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run --coverage",
+    "test:watch": "vitest",
+    "lint": "eslint src test --max-warnings 0",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+    "clean": "rm -rf dist .turbo coverage"
+  }
+}