@bgord/bun 1.8.3 → 1.8.5

package/dist/tests/security-rule-name.vo.test.js

@@ -0,0 +1,28 @@
+import { describe, expect, test } from "bun:test";
+import { SecurityRuleName } from "../src/security-rule-name.vo";
+describe("SecurityRuleName VO", () => {
+    test("happy path", () => {
+        expect(SecurityRuleName.safeParse("a".repeat(512)).success).toEqual(true);
+        expect(SecurityRuleName.safeParse("A".repeat(512)).success).toEqual(true);
+        expect(SecurityRuleName.safeParse("honey_pot").success).toEqual(true);
+    });
+    test("rejects prefix", () => {
+        expect(() => SecurityRuleName.parse("!abc")).toThrow("security.rule.name.bad.chars");
+    });
+    test("rejects non-string - null", () => {
+        expect(() => SecurityRuleName.parse(null)).toThrow("security.rule.name.type");
+    });
+    test("rejects non-string - number", () => {
+        expect(() => SecurityRuleName.parse(123)).toThrow("security.rule.name.type");
+    });
+    test("rejects empty", () => {
+        expect(() => SecurityRuleName.parse("")).toThrow("security.rule.name.empty");
+    });
+    test("rejects too long", () => {
+        expect(() => SecurityRuleName.parse(`${"a".repeat(512)}abc`)).toThrow("security.rule.name.too.long");
+    });
+    test("rejects bad chars", () => {
+        expect(() => SecurityRuleName.parse(`${"a".repeat(511)}!`)).toThrow("security.rule.name.bad.chars");
+    });
+});
+//# sourceMappingURL=security-rule-name.vo.test.js.map

package/dist/tests/security-rule-name.vo.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-name.vo.test.js","sourceRoot":"","sources":["../../tests/security-rule-name.vo.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC1B,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/security-rule-or.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-rule-or.strategy.test.d.ts.map

package/dist/tests/security-rule-or.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-or.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/security-rule-or.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/security-rule-or.strategy.test.js

@@ -0,0 +1,42 @@
+import { describe, expect, test } from "bun:test";
+import { SecurityRuleBaitRoutesStrategy } from "../src/security-rule-bait-routes.strategy";
+import { SecurityRuleFailStrategy } from "../src/security-rule-fail.strategy";
+import { SecurityRuleName } from "../src/security-rule-name.vo";
+import { SecurityRuleOrStrategy } from "../src/security-rule-or.strategy";
+import { SecurityRulePassStrategy } from "../src/security-rule-pass.strategy";
+const forbidden = "/.env";
+const allowed = "/about";
+const baitRoutes = new SecurityRuleBaitRoutesStrategy([forbidden]);
+const pass = new SecurityRulePassStrategy();
+const fail = new SecurityRuleFailStrategy();
+describe("SecurityRuleOrStrategy", () => {
+    test("isViolated - one violation", async () => {
+        const rule = new SecurityRuleOrStrategy([fail, pass]);
+        const context = { req: { path: allowed } };
+        expect(await rule.isViolated(context)).toEqual(true);
+    });
+    test("isViolated - all violated", async () => {
+        const rule = new SecurityRuleOrStrategy([fail, fail]);
+        const context = { req: { path: allowed } };
+        expect(await rule.isViolated(context)).toEqual(true);
+    });
+    test("isViolated - false", async () => {
+        const rule = new SecurityRuleOrStrategy([pass, pass]);
+        const context = { req: { path: allowed } };
+        expect(await rule.isViolated(context)).toEqual(false);
+    });
+    test("missing rules", () => {
+        expect(() => new SecurityRuleOrStrategy([])).toThrow("security.rule.or.adapter.error.missing.rules");
+    });
+    test("just enough rules", () => {
+        expect(() => new SecurityRuleOrStrategy([pass, pass, pass, pass, pass])).not.toThrow();
+    });
+    test("max rules", () => {
+        expect(() => new SecurityRuleOrStrategy([pass, pass, pass, pass, pass, pass])).toThrow("security.rule.or.adapter.error.max.rules");
+    });
+    test("name", () => {
+        const rule = new SecurityRuleOrStrategy([baitRoutes, pass]);
+        expect(rule.name).toEqual(SecurityRuleName.parse("or_bait_routes_pass"));
+    });
+});
+//# sourceMappingURL=security-rule-or.strategy.test.js.map

package/dist/tests/security-rule-or.strategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-or.strategy.test.js","sourceRoot":"","sources":["../../tests/security-rule-or.strategy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,MAAM,UAAU,GAAG,IAAI,8BAA8B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACnE,MAAM,IAAI,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAC5C,MAAM,IAAI,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAE5C,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,IAAI,GAAG,IAAI,sBAAsB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAS,CAAC;QAElD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,IAAI,sBAAsB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAS,CAAC;QAElD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,IAAI,GAAG,IAAI,sBAAsB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAS,CAAC;QAElD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,sBAAsB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,sBAAsB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CACpF,0CAA0C,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QAChB,MAAM,IAAI,GAAG,IAAI,sBAAsB,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAE5D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/security-rule-pass.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-rule-pass.strategy.test.d.ts.map

package/dist/tests/security-rule-pass.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-pass.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/security-rule-pass.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/security-rule-pass.strategy.test.js

@@ -0,0 +1,13 @@
+import { describe, expect, test } from "bun:test";
+import { SecurityRuleName } from "../src/security-rule-name.vo";
+import { SecurityRulePassStrategy } from "../src/security-rule-pass.strategy";
+const rule = new SecurityRulePassStrategy();
+describe("SecurityRulePassStrategy", () => {
+    test("isViolated - false", async () => {
+        expect(await rule.isViolated()).toEqual(false);
+    });
+    test("name", () => {
+        expect(rule.name).toEqual(SecurityRuleName.parse("pass"));
+    });
+});
+//# sourceMappingURL=security-rule-pass.strategy.test.js.map

package/dist/tests/security-rule-pass.strategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-pass.strategy.test.js","sourceRoot":"","sources":["../../tests/security-rule-pass.strategy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,MAAM,IAAI,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAE5C,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/security-rule-user-agent.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-rule-user-agent.strategy.test.d.ts.map

package/dist/tests/security-rule-user-agent.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-user-agent.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/security-rule-user-agent.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/security-rule-user-agent.strategy.test.js

@@ -0,0 +1,23 @@
+import { describe, expect, test } from "bun:test";
+import { SecurityRuleName } from "../src/security-rule-name.vo";
+import { SecurityRuleUserAgentStrategy } from "../src/security-rule-user-agent.strategy";
+import * as mocks from "./mocks";
+const valid = "anon";
+const invalid = "unknown";
+describe("SecurityRuleUserAgentStrategy", () => {
+    test("isViolated - true", async () => {
+        const rule = new SecurityRuleUserAgentStrategy([valid]);
+        const context = { env: mocks.ip, req: { raw: {}, header: () => valid } };
+        expect(await rule.isViolated(context)).toEqual(true);
+    });
+    test("isViolated - false", async () => {
+        const rule = new SecurityRuleUserAgentStrategy([invalid]);
+        const context = { env: mocks.ip, req: { raw: {}, header: () => valid } };
+        expect(await rule.isViolated(context)).toEqual(false);
+    });
+    test("name", () => {
+        const rule = new SecurityRuleUserAgentStrategy(["other"]);
+        expect(rule.name).toEqual(SecurityRuleName.parse("user_agent"));
+    });
+});
+//# sourceMappingURL=security-rule-user-agent.strategy.test.js.map

package/dist/tests/security-rule-user-agent.strategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-user-agent.strategy.test.js","sourceRoot":"","sources":["../../tests/security-rule-user-agent.strategy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,MAAM,KAAK,GAAG,MAAM,CAAC;AACrB,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAI,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,IAAI,GAAG,IAAI,6BAA6B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAS,CAAC;QAEhF,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,IAAI,GAAG,IAAI,6BAA6B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAS,CAAC;QAEhF,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QAChB,MAAM,IAAI,GAAG,IAAI,6BAA6B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAE1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/security-rule-violation-threshold.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-rule-violation-threshold.strategy.test.d.ts.map

package/dist/tests/security-rule-violation-threshold.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-violation-threshold.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/security-rule-violation-threshold.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/security-rule-violation-threshold.strategy.test.js

@@ -0,0 +1,57 @@
+import { describe, expect, jest, spyOn, test } from "bun:test";
+import * as tools from "@bgord/tools";
+import { CacheRepositoryNodeCacheAdapter } from "../src/cache-repository-node-cache.adapter";
+import { HashContentSha256BunStrategy } from "../src/hash-content-sha256-bun.strategy";
+import { SecurityRuleBaitRoutesStrategy } from "../src/security-rule-bait-routes.strategy";
+import { SecurityRuleName } from "../src/security-rule-name.vo";
+import { SecurityRuleViolationThresholdStrategy } from "../src/security-rule-violation-threshold.strategy";
+import * as mocks from "./mocks";
+const allowed = "/about";
+const forbidden = "/.env";
+const baitRoutes = new SecurityRuleBaitRoutesStrategy([forbidden]);
+const ttl = tools.Duration.Minutes(1);
+const CacheRepository = new CacheRepositoryNodeCacheAdapter({ type: "finite", ttl });
+const HashContent = new HashContentSha256BunStrategy();
+const deps = { CacheRepository, HashContent };
+const config = { threshold: tools.IntegerPositive.parse(3) };
+const rule = new SecurityRuleViolationThresholdStrategy(baitRoutes, config, deps);
+describe("SecurityRuleViolationThresholdStrategy", () => {
+    test("isViolated - true", async () => {
+        jest.useFakeTimers();
+        const context = { env: mocks.ip, req: { path: forbidden, raw: {}, header: () => "anon" } };
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(true);
+        jest.advanceTimersByTime(ttl.add(tools.Duration.MIN).ms);
+        expect(await rule.isViolated(context)).toEqual(false);
+        await CacheRepository.flush();
+        jest.useRealTimers();
+    });
+    test("isViolated - false", async () => {
+        const context = { env: mocks.ip, req: { path: allowed, raw: {}, header: () => "anon" } };
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(false);
+        await CacheRepository.flush();
+    });
+    test("isViolated - non-violations do not reset the counter", async () => {
+        const context = { env: mocks.ip, req: { path: forbidden, raw: {}, header: () => "anon" } };
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated({ env: mocks.ip, req: { path: allowed, raw: {}, header: () => "anon" } })).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(true);
+        await CacheRepository.flush();
+    });
+    test("isViolated - cache failure", async () => {
+        spyOn(CacheRepository, "get").mockImplementation(mocks.throwIntentionalError);
+        const context = { env: mocks.ip, req: { path: forbidden, raw: {}, header: () => "anon" } };
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(false);
+        expect(await rule.isViolated(context)).toEqual(false);
+        await CacheRepository.flush();
+    });
+    test("name", () => {
+        expect(rule.name).toEqual(SecurityRuleName.parse("violation_threshold_3_bait_routes"));
+    });
+});
+//# sourceMappingURL=security-rule-violation-threshold.strategy.test.js.map

package/dist/tests/security-rule-violation-threshold.strategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-violation-threshold.strategy.test.js","sourceRoot":"","sources":["../../tests/security-rule-violation-threshold.strategy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,MAAM,OAAO,GAAG,QAAQ,CAAC;AACzB,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,UAAU,GAAG,IAAI,8BAA8B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAEnE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,+BAA+B,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AACrF,MAAM,WAAW,GAAG,IAAI,4BAA4B,EAAE,CAAC;AACvD,MAAM,IAAI,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;AAC9C,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAE7D,MAAM,IAAI,GAAG,IAAI,sCAAsC,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAElF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAI,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACnC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAS,CAAC;QAElG,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAErD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEtD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAS,CAAC;QAEhG,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEtD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAS,CAAC;QAElG,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CACJ,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAS,CAAC,CACvG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC5C,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAS,CAAC;QAElG,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEtD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/setup.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=setup.service.test.d.ts.map

package/dist/tests/setup.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.service.test.d.ts","sourceRoot":"","sources":["../../tests/setup.service.test.ts"],"names":[],"mappings":""}

package/dist/tests/setup.service.test.js

@@ -0,0 +1,151 @@
+import { describe, expect, jest, spyOn, test } from "bun:test";
+import * as tools from "@bgord/tools";
+import { Hono } from "hono";
+import { ClockSystemAdapter } from "../src/clock-system.adapter";
+import { FileReaderJsonNoopAdapter } from "../src/file-reader-json-noop.adapter";
+import { IdProviderDeterministicAdapter } from "../src/id-provider-deterministic.adapter";
+import { LoggerNoopAdapter } from "../src/logger-noop.adapter";
+import { Setup } from "../src/setup.service";
+import * as mocks from "./mocks";
+const ip = { server: { requestIP: () => ({ address: "127.0.0.1", family: "foo", port: "123" }) } };
+const predefinedRequestId = "123";
+const I18n = { supportedLanguages: { pl: "pl", en: "en" }, defaultLanguage: "pl" };
+const version = "1.2.3";
+const FileReaderJson = new FileReaderJsonNoopAdapter({ version });
+const Logger = new LoggerNoopAdapter();
+const IdProvider = new IdProviderDeterministicAdapter([
+    mocks.correlationId,
+    mocks.correlationId,
+    mocks.correlationId,
+    mocks.correlationId,
+    mocks.correlationId,
+    mocks.correlationId,
+    mocks.correlationId,
+]);
+const Clock = new ClockSystemAdapter();
+const deps = { Logger, I18n, IdProvider, Clock, FileReaderJson };
+describe("Setup service", () => {
+    test("happy path", async () => {
+        const app = new Hono()
+            .use(...Setup.essentials(deps))
+            .get("/ping", (c) => c.json({
+            requestId: c.get("requestId"),
+            timeZoneOffset: c.get("timeZoneOffset"),
+            language: c.get("language"),
+            etag: c.get("ETag"),
+            weakEtag: c.get("WeakETag"),
+        }));
+        const response = await app.request("/ping", { method: "GET" }, ip);
+        const json = await response.json();
+        expect(response.headers.toJSON()).toEqual({
+            "content-type": "application/json",
+            "server-timing": expect.any(String),
+            "cross-origin-embedder-policy": "require-corp",
+            "cross-origin-opener-policy": "same-origin",
+            "cross-origin-resource-policy": "same-origin",
+            "referrer-policy": "no-referrer",
+            "strict-transport-security": "max-age=15552000; includeSubDomains",
+            "x-content-type-options": "nosniff",
+            "x-dns-prefetch-control": "off",
+            "x-frame-options": "SAMEORIGIN",
+            "x-xss-protection": "0",
+            "api-version": version,
+            vary: "Origin",
+            "x-correlation-id": mocks.correlationId,
+            "origin-agent-cluster": "?1",
+            "x-download-options": "noopen",
+            "x-permitted-cross-domain-policies": "none",
+        });
+        expect(json).toEqual({
+            requestId: mocks.correlationId,
+            timeZoneOffset: { internal: 0 },
+            language: I18n.defaultLanguage,
+            etag: null,
+            weakEtag: null,
+        });
+    });
+    test("x-correlation-id forwarding", async () => {
+        const app = new Hono()
+            .use(...Setup.essentials(deps))
+            .get("/ping", (c) => c.json({ requestId: c.get("requestId") }));
+        const response = await app.request("/ping", { method: "GET", headers: new Headers({ "x-correlation-id": predefinedRequestId }) }, ip);
+        const json = await response.json();
+        expect(response.headers.toJSON()).toEqual(expect.objectContaining({ "x-correlation-id": predefinedRequestId }));
+        expect(json).toEqual({ requestId: predefinedRequestId });
+    });
+    test("maintenance mode", async () => {
+        const app = new Hono()
+            .use(...Setup.essentials(deps, { maintenanceMode: { enabled: true } }))
+            .get("/ping", (c) => c.text("OK"));
+        const response = await app.request("/ping", { method: "GET", headers: new Headers({ "x-correlation-id": predefinedRequestId }) }, ip);
+        const json = await response.json();
+        expect(response.headers.toJSON()).toEqual({
+            "content-type": "application/json",
+            "retry-after": tools.Duration.Hours(1).seconds.toString(),
+        });
+        expect(json).toEqual({ reason: "maintenance" });
+    });
+    test("bodyLimit", async () => {
+        spyOn(process.stderr, "write").mockImplementation(jest.fn());
+        const boundary = "----bun-test-boundary";
+        const content = [
+            `--${boundary}`,
+            'Content-Disposition: form-data; name="file"; filename="too-big.txt"',
+            "Content-Type: text/plain",
+            "",
+            "this content is larger than 10 bytes",
+            `--${boundary}--`,
+            "",
+        ].join("\r\n");
+        const headers = { "Content-Type": `multipart/form-data; boundary=${boundary}` };
+        const app = new Hono({})
+            .use(...Setup.essentials(deps, { BODY_LIMIT_MAX_SIZE: tools.Size.fromBytes(2) }))
+            .post("/upload", async (c) => {
+            await c.req.parseBody();
+            return c.text("OK");
+        });
+        const response = await app.request("/upload", { method: "POST", body: new TextEncoder().encode(content), headers }, ip);
+        expect(response.status).toEqual(413);
+    });
+    test("languageDetector - supportedLanguages", async () => {
+        const app = new Hono().use(...Setup.essentials(deps)).get("/lang", (c) => c.text(c.get("language")));
+        const response = await app.request("/lang", { headers: { "Accept-Language": "de-DE,de;q=0.9" } }, ip);
+        expect(await response.text()).toEqual(I18n.defaultLanguage);
+    });
+    test("cors - server-to-server allowed", async () => {
+        const app = new Hono().use(...Setup.essentials(deps)).get("/cors", (c) => c.text("ok"));
+        const response = await app.request("/cors", {}, ip);
+        expect(response.status).toEqual(200);
+        expect(response.headers.get("access-control-allow-origin")).toEqual(null);
+    });
+    test("cors - same-origin fetch allowed", async () => {
+        const app = new Hono().use(...Setup.essentials(deps)).get("/cors", (c) => c.text("ok"));
+        const response = await app.request("/cors", { headers: { Origin: "http://localhost" } }, ip);
+        expect(response.status).toEqual(200);
+        expect(response.headers.get("access-control-allow-origin")).toBe("http://localhost");
+    });
+    test("cors - cross-origin fetch blocked", async () => {
+        const app = new Hono().use(...Setup.essentials(deps)).get("/cors", (c) => c.text("ok"));
+        const response = await app.request("/cors", { headers: { Origin: "https://evil.example" } }, ip);
+        expect(response.status).toEqual(200);
+        expect(response.headers.get("access-control-allow-origin")).toBeNull();
+    });
+    test("cors - cross-origin preflight blocked", async () => {
+        const app = new Hono().use(...Setup.essentials(deps)).options("/cors", (c) => c.text("ok"));
+        const response = await app.request("/cors", {
+            method: "OPTIONS",
+            headers: { Origin: "https://evil.example", "Access-Control-Request-Method": "POST" },
+        });
+        expect(response.headers.get("access-control-allow-origin")).toBeNull();
+    });
+    test("cors - overrides", async () => {
+        const origin = "https://some.example";
+        const app = new Hono()
+            .use(...Setup.essentials(deps, { cors: { origin } }))
+            .get("/cors", (c) => c.text("ok"));
+        const response = await app.request("/cors", { headers: { Origin: origin } }, ip);
+        expect(response.status).toEqual(200);
+        expect(response.headers.get("access-control-allow-origin")).toEqual(origin);
+    });
+});
+//# sourceMappingURL=setup.service.test.js.map

package/dist/tests/setup.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.service.test.js","sourceRoot":"","sources":["../../tests/setup.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;AACnG,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,IAAI,GAAmB,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAEnG,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,cAAc,GAAG,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAClE,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;AACvC,MAAM,UAAU,GAAG,IAAI,8BAA8B,CAAC;IACpD,KAAK,CAAC,aAAa;IACnB,KAAK,CAAC,aAAa;IACnB,KAAK,CAAC,aAAa;IACnB,KAAK,CAAC,aAAa;IACnB,KAAK,CAAC,aAAa;IACnB,KAAK,CAAC,aAAa;IACnB,KAAK,CAAC,aAAa;CACpB,CAAC,CAAC;AACH,MAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;AACvC,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAEjE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAA0D;aAC3E,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aAC9B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAClB,CAAC,CAAC,IAAI,CAAC;YACL,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;YAC7B,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACvC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC5B,CAAC,CACH,CAAC;QAEJ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;YACxC,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACnC,8BAA8B,EAAE,cAAc;YAC9C,4BAA4B,EAAE,aAAa;YAC3C,8BAA8B,EAAE,aAAa;YAC7C,iBAAiB,EAAE,aAAa;YAChC,2BAA2B,EAAE,qCAAqC;YAClE,wBAAwB,EAAE,SAAS;YACnC,wBAAwB,EAAE,KAAK;YAC/B,iBAAiB,EAAE,YAAY;YAC/B,kBAAkB,EAAE,GAAG;YACvB,aAAa,EAAE,OAAO;YACtB,IAAI,EAAE,QAAQ;YACd,kBAAkB,EAAE,KAAK,CAAC,aAAa;YACvC,sBAAsB,EAAE,IAAI;YAC5B,oBAAoB,EAAE,QAAQ;YAC9B,mCAAmC,EAAE,MAAM;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YACnB,SAAS,EAAE,KAAK,CAAC,aAAa;YAC9B,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC/B,QAAQ,EAAE,IAAI,CAAC,eAAe;YAC9B,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAA0D;aAC3E,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aAC9B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAChC,OAAO,EACP,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC,EAAE,EACpF,EAAE,CACH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CACvC,MAAM,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC,CACrE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAA0D;aAC3E,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;aACtE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAChC,OAAO,EACP,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC,EAAE,EACpF,EAAE,CACH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;YACxC,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE;SAC1D,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;QAC3B,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACzC,MAAM,OAAO,GAAG;YACd,KAAK,QAAQ,EAAE;YACf,qEAAqE;YACrE,0BAA0B;YAC1B,EAAE;YACF,sCAAsC;YACtC,KAAK,QAAQ,IAAI;YACjB,EAAE;SACH,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,iCAAiC,QAAQ,EAAE,EAAE,CAAC;QAEhF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAyD,EAAE,CAAC;aAC7E,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAChF,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YAExB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEL,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAChC,SAAS,EACT,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EACpE,EAAE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAErG,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtG,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,eAAyB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAExF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAExF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAE7F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAExF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5F,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE;YAC1C,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,+BAA+B,EAAE,MAAM,EAAE;SACrF,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC;QAEtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;aACnB,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;aACpD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/shield-api-key.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shield-api-key.strategy.test.d.ts.map

package/dist/tests/shield-api-key.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-api-key.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/shield-api-key.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/shield-api-key.strategy.test.js

@@ -0,0 +1,45 @@
+import { describe, expect, test } from "bun:test";
+import * as tools from "@bgord/tools";
+import { Hono } from "hono";
+import { AccessDeniedApiKeyError, ShieldApiKeyStrategy } from "../src/shield-api-key.strategy";
+const VALID_API_KEY = "x".repeat(64);
+const INVALID_API_KEY = "invalid-api-key";
+const shield = new ShieldApiKeyStrategy({ API_KEY: tools.ApiKey.parse(VALID_API_KEY) });
+const app = new Hono()
+    .use(shield.verify)
+    .get("/ping", (c) => c.text("OK"))
+    // @ts-expect-error
+    .onError((error, c) => {
+    if (error.message === AccessDeniedApiKeyError.message) {
+        return c.json({ message: AccessDeniedApiKeyError.message, _known: true }, AccessDeniedApiKeyError.status);
+    }
+    return c.status(500);
+});
+describe("ShieldApiKeyStrategy", () => {
+    test("happy path", async () => {
+        const result = await app.request("/ping", {
+            method: "GET",
+            headers: new Headers({ [ShieldApiKeyStrategy.HEADER_NAME]: VALID_API_KEY }),
+        });
+        expect(result.status).toEqual(200);
+    });
+    test("denied - no api key", async () => {
+        const result = await app.request("/ping", {
+            method: "GET",
+            headers: new Headers({ [ShieldApiKeyStrategy.HEADER_NAME]: "" }),
+        });
+        const json = await result.json();
+        expect(result.status).toEqual(403);
+        expect(json.message).toEqual("access_denied_api_key");
+    });
+    test("denied - invalid api key", async () => {
+        const result = await app.request("/ping", {
+            method: "GET",
+            headers: new Headers({ [ShieldApiKeyStrategy.HEADER_NAME]: INVALID_API_KEY }),
+        });
+        const json = await result.json();
+        expect(result.status).toEqual(403);
+        expect(json.message).toEqual("access_denied_api_key");
+    });
+});
+//# sourceMappingURL=shield-api-key.strategy.test.js.map

package/dist/tests/shield-api-key.strategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-api-key.strategy.test.js","sourceRoot":"","sources":["../../tests/shield-api-key.strategy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE/F,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAE1C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AAExF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;KACnB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;KAClB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,mBAAmB;KAClB,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;IACpB,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,OAAO,EAAE,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAC1D,uBAAuB,CAAC,MAAM,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEL,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAC5B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE;YACxC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;SAC5E,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE;YACxC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAEjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE;YACxC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAEjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/shield-auth.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shield-auth.strategy.test.d.ts.map

package/dist/tests/shield-auth.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-auth.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/shield-auth.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/shield-auth.strategy.test.js

@@ -0,0 +1,85 @@
+import { describe, expect, spyOn, test } from "bun:test";
+import { Hono } from "hono";
+import { ShieldAuthStrategy } from "../src/shield-auth.strategy";
+const session = { id: "session-123" };
+const user = { id: "user-123", email: "test@example.com" };
+const auth = { api: { getSession: () => Promise.resolve(null) } };
+const strategy = new ShieldAuthStrategy(auth);
+describe("ShieldAuthStrategy", () => {
+    test("attach", async () => {
+        const getSessionSpy = spyOn(auth.api, "getSession").mockResolvedValue({ session, user });
+        const app = new Hono()
+            .use(strategy.attach)
+            .get("/", (c) => c.json({ user: c.get("user"), session: c.get("session") }));
+        const response = await app.request("/", { headers: { cookie: "session_token=123" } });
+        const json = await response.json();
+        expect(response.status).toEqual(200);
+        expect(json.user).toEqual(user);
+        expect(json.session).toEqual(session);
+        expect(getSessionSpy).toHaveBeenCalledWith({ headers: expect.any(Headers) });
+    });
+    test("attach - missing session", async () => {
+        spyOn(auth.api, "getSession").mockResolvedValue(null);
+        const app = new Hono()
+            .use(strategy.attach)
+            .get("/", (c) => c.json({ user: c.get("user"), session: c.get("session") }));
+        const response = await app.request("/");
+        const json = await response.json();
+        expect(response.status).toEqual(200);
+        expect(json.user).toEqual(null);
+        expect(json.session).toEqual(null);
+    });
+    test("verify - authenticated user", async () => {
+        const app = new Hono()
+            .use(async (c, next) => {
+            c.set("user", user);
+            await next();
+        })
+            .use(strategy.verify)
+            .get("/", (c) => c.text("ok"));
+        const response = await app.request("/");
+        expect(response.status).toEqual(200);
+        expect(await response.text()).toEqual("ok");
+    });
+    test("verify - guest user", async () => {
+        const app = new Hono()
+            .use(async (c, next) => {
+            c.set("user", null);
+            await next();
+        })
+            .use(strategy.verify)
+            .get("/", (c) => c.text("ok"))
+            .onError((err, c) => c.json({ message: err.message }, 403));
+        const response = await app.request("/");
+        const json = await response.json();
+        expect(response.status).toEqual(403);
+        expect(json.message).toEqual("access_denied_auth_shield");
+    });
+    test("reverse - guest user", async () => {
+        const app = new Hono()
+            .use(async (c, next) => {
+            c.set("user", null);
+            await next();
+        })
+            .use(strategy.reverse)
+            .get("/", (c) => c.text("ok"));
+        const response = await app.request("/");
+        expect(response.status).toEqual(200);
+        expect(await response.text()).toEqual("ok");
+    });
+    test("reverse - authenticated user", async () => {
+        const app = new Hono()
+            .use(async (c, next) => {
+            c.set("user", user);
+            await next();
+        })
+            .use(strategy.reverse)
+            .get("/", (c) => c.text("ok"))
+            .onError((err, c) => c.json({ message: err.message }, 403));
+        const response = await app.request("/");
+        const json = await response.json();
+        expect(response.status).toEqual(403);
+        expect(json.message).toEqual("access_denied_auth_shield");
+    });
+});
+//# sourceMappingURL=shield-auth.strategy.test.js.map

package/dist/tests/shield-auth.strategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-auth.strategy.test.js","sourceRoot":"","sources":["../../tests/shield-auth.strategy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;AACtC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;AAE3D,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAA8C,CAAC;AAE9G,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAI9C,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAS,CAAC,CAAC;QAChG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO;aACxB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;aACpB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO;aACxB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;aACpB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO;aACxB,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;aACD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;aACpB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAExC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO;aACxB,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;aACD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;aACpB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO;aACxB,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;aACD,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;aACrB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAExC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO;aACxB,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;aACD,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;aACrB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/shield-basic-auth.strategy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shield-basic-auth.strategy.test.d.ts.map

package/dist/tests/shield-basic-auth.strategy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-basic-auth.strategy.test.d.ts","sourceRoot":"","sources":["../../tests/shield-basic-auth.strategy.test.ts"],"names":[],"mappings":""}

package/dist/tests/shield-basic-auth.strategy.test.js

@@ -0,0 +1,29 @@
+import { describe, expect, test } from "bun:test";
+import { Hono } from "hono";
+import { BasicAuth } from "../src/basic-auth.service";
+import { BasicAuthPassword } from "../src/basic-auth-password.vo";
+import { BasicAuthUsername } from "../src/basic-auth-username.vo";
+import { ShieldBasicAuthStrategy } from "../src/shield-basic-auth.strategy";
+const config = { username: BasicAuthUsername.parse("admin"), password: BasicAuthPassword.parse("password") };
+const shield = new ShieldBasicAuthStrategy(config);
+describe("ShieldBasicAuthStrategy", () => {
+    test("happy path", async () => {
+        const app = new Hono().use(shield.verify).get("/ping", (c) => c.text("OK"));
+        const result = await app.request("/ping", { method: "GET", headers: BasicAuth.toHeader(config) });
+        expect(result.status).toEqual(200);
+    });
+    test("denied - no authorization", async () => {
+        const app = new Hono().use(shield.verify).get("/ping", () => expect.unreachable());
+        const result = await app.request("/ping", { method: "GET" });
+        expect(result.status).toEqual(401);
+    });
+    test("denied - invalid authorization", async () => {
+        const app = new Hono().use(shield.verify).get("/ping", () => expect.unreachable());
+        const result = await app.request("/ping", {
+            method: "GET",
+            headers: new Headers({ authorization: "abc" }),
+        });
+        expect(result.status).toEqual(401);
+    });
+});
+//# sourceMappingURL=shield-basic-auth.strategy.test.js.map