@darthcav/ts-http-server 0.5.0 → 0.6.0

package/README.md

@@ -12,7 +12,8 @@ A TypeScript wrapper HTTP server for Node.js >= 25 based upon [Fastify](https://
 - Strict TypeScript configuration with isolated declarations
 - Content negotiation for error responses (HTML / JSON / plain-text)
 - Access logging via `onResponse` hook — `info` for 2xx/3xx, `error` for 4xx/5xx
-- Default plugin set: CORS, compression, ETag, Helmet CSP, EJS views, and static files
+- Default plugin set: accepts, CORS, compression, ETag, Helmet CSP, EJS views, static files, Swagger, and Swagger UI
+- Optional Keycloak-backed JWT authentication for the default `/api/` routes
 - Returns a `FastifyInstance` for graceful shutdown via `SIGINT`/`SIGTERM`
 - Biome for linting and formatting
 - Built-in Node.js test runner
@@ -35,7 +36,7 @@ import pkg from "./package.json" with { type: "json" }
 
 const logger = await getConsoleLogger(pkg.name, "info")
 
-main(pkg.name, logger, false, () => {
+main(pkg.name, logger, async () => {
     const locals = { pkg }
     const plugins = defaultPlugins({ locals })
     const routes = defaultRoutes()
@@ -63,7 +64,50 @@ The `defaultPlugins` function accepts an optional `baseDir` to resolve the `src/
 `import.meta.dirname`):
 
 ```ts
-const plugins = defaultPlugins({ locals, baseDir: import.meta.dirname });
+const plugins = defaultPlugins({ locals, baseDir: import.meta.dirname })
+```
+
+### Keycloak authentication
+
+To protect routes with Keycloak JWT authentication, set `API_AUTH_PATHS` to a comma-separated list of
+[picomatch](https://github.com/micromatch/picomatch) glob patterns and provide the Keycloak connection variables. The
+server verifies bearer tokens against the realm's JWKS endpoint; public keys are cached and rotated automatically.
+
+```ts
+import { createKeycloakVerifier, type KeycloakAuthConfig } from "@darthcav/ts-http-server"
+
+const keycloakAuth: KeycloakAuthConfig = {
+    url: process.env["KEYCLOAK_URL"] ?? "",
+    realm: process.env["KEYCLOAK_REALM"] ?? "",
+    clientId: process.env["KEYCLOAK_CLIENT_ID"] ?? "",
+    clientSecret: process.env["KEYCLOAK_CLIENT_SECRET"] ?? "",
+}
+
+const verifyToken = createKeycloakVerifier(keycloakAuth)
+const locals = {
+    pkg,
+    authPaths: ["/api/**"],
+    authRealm: keycloakAuth.realm,   // used in WWW-Authenticate challenge
+}
+const plugins = defaultPlugins({ locals, keycloakAuth })   // marks /api/ as protected in OpenAPI
+const routes = defaultRoutes()
+
+const fastify = launcher({ logger, locals, plugins, routes, verifyToken })
+```
+
+When `locals.authPaths` is set, every request whose URL matches one of the glob patterns must carry
+`Authorization: Bearer <token>`. Missing or invalid tokens receive `401 Unauthorized` with a
+`WWW-Authenticate: Bearer realm="<authRealm>"` challenge (defaults to `"api"` when `authRealm` is not set). When
+`authPaths` is `undefined` (the default), all routes are public regardless of any token in the request.
+
+You can supply any custom `verifyToken` function instead of `createKeycloakVerifier` — it receives the raw
+`Authorization` header value and should return `true` to allow the request or `false` to reject it with 401:
+
+```ts
+const verifyToken = async (authorizationHeader: string | undefined): Promise<boolean> => {
+    return authorizationHeader === "Bearer my-static-token"
+}
+const fastify = launcher({ logger, locals, plugins, routes, verifyToken })
 ```
 
 ## Getting Started
@@ -100,6 +144,7 @@ src/
   start.ts          # Application entry point
   launcher.ts       # Application launcher (returns FastifyInstance)
   types.ts          # Shared type definitions
+  auth/             # Authentication utilities
   defaults/         # Default Fastify options, plugins, routes, and error handler
   hooks/            # Fastify hooks (preHandler, onResponse)
   __tests__/        # Test files
@@ -134,10 +179,15 @@ docker build \
 
 Runtime environment variables:
 
-| Variable                | Default     | Description                                |
-| ----------------------- | ----------- | ------------------------------------------ |
-| `HOST`                  | `localhost` | Bind address (use `0.0.0.0` in containers) |
-| `CONTAINER_EXPOSE_PORT` | `8888`      | Port the server listens on                 |
+| Variable                 | Default     | Description                                                           |
+| ------------------------ | ----------- | --------------------------------------------------------------------- |
+| `HOST`                   | `localhost` | Bind address (use `0.0.0.0` in containers)                            |
+| `CONTAINER_EXPOSE_PORT`  | `8888`      | Port the server listens on                                            |
+| `API_AUTH_PATHS`         | unset       | Comma-separated picomatch globs for protected routes (e.g. `/api/**`) |
+| `KEYCLOAK_URL`           | unset       | Keycloak server base URL                                              |
+| `KEYCLOAK_REALM`         | unset       | Keycloak realm name; also used as the `WWW-Authenticate` realm label  |
+| `KEYCLOAK_CLIENT_ID`     | unset       | Client ID registered in the realm                                     |
+| `KEYCLOAK_CLIENT_SECRET` | unset       | Client secret for the registered client                               |
 
 ### Run
 
@@ -170,7 +220,7 @@ services:
 
 [node-version]: https://img.shields.io/badge/node-%3E%3D25-orange.svg?style=flat-square
 [node-url]: https://nodejs.org
-[version-image]: https://img.shields.io/badge/version-0.5.0-blue.svg?style=flat-square
+[version-image]: https://img.shields.io/badge/version-0.6.0-blue.svg?style=flat-square
 [ci-badge]: https://github.com/darthcav/ts-http-server/actions/workflows/tests.yml/badge.svg
 [coverage-badge]: https://codecov.io/github/darthcav/ts-http-server/branch/dev/graph/badge.svg?token=K8Q4T4N9SG
 [coverage-url]: https://codecov.io/github/darthcav/ts-http-server

package/dist/__tests__/defaultPlugins.test.js

@@ -2,22 +2,67 @@ import { equal, ok } from "node:assert/strict";
 import { cwd } from "node:process";
 import { suite, test } from "node:test";
 import defaultPlugins from "../defaults/defaultPlugins.js";
+function getSwaggerDocument(plugins) {
+    const swaggerPlugin = plugins.get("@fastify/swagger");
+    const specification = swaggerPlugin?.opts?.["specification"];
+    if (specification &&
+        typeof specification === "object" &&
+        "document" in specification) {
+        return specification.document;
+    }
+    return undefined;
+}
 suite("defaultPlugins", () => {
     const locals = {
         pkg: { name: "ts-http-server", version: "0.0.0", description: "Test" },
     };
     test("returns all plugins using default baseDir", () => {
         const plugins = defaultPlugins({ locals });
-        equal(plugins.size, 7);
+        equal(plugins.size, 9);
         ok(plugins.has("@fastify/accepts"));
         ok(plugins.has("@fastify/view"));
         ok(plugins.has("@fastify/static"));
+        ok(plugins.has("@fastify/swagger"));
+        ok(plugins.has("@fastify/swagger-ui"));
     });
     test("returns all plugins using explicit baseDir", () => {
         const plugins = defaultPlugins({ locals, baseDir: cwd() });
-        equal(plugins.size, 7);
+        equal(plugins.size, 9);
         ok(plugins.has("@fastify/view"));
         ok(plugins.has("@fastify/static"));
+        ok(plugins.has("@fastify/swagger"));
+        ok(plugins.has("@fastify/swagger-ui"));
+    });
+    test("keeps /api/ public in OpenAPI when keycloakAuth is omitted", () => {
+        const plugins = defaultPlugins({ locals });
+        const document = getSwaggerDocument(plugins);
+        ok(document);
+        equal(document.security, undefined);
+        equal(document.paths?.["/api/"]?.get?.security, undefined);
+        equal(document.paths?.["/api/"]?.get?.responses?.["401"], undefined);
+        // The placeholder openIdConnect scheme defined in api.yaml is cleaned up
+        equal(document.components?.securitySchemes?.["openIdConnect"], undefined);
+    });
+    test("marks /api/ as OpenID Connect–protected in OpenAPI when keycloakAuth is provided", () => {
+        const plugins = defaultPlugins({
+            locals,
+            keycloakAuth: {
+                url: "https://auth.example.com",
+                realm: "test-realm",
+                clientId: "test-client",
+                clientSecret: "test-secret",
+            },
+        });
+        const document = getSwaggerDocument(plugins);
+        ok(document);
+        equal(Array.isArray(document.security), true);
+        equal(document.paths?.["/api/"]?.get?.security?.[0]?.["openIdConnect"]
+            ?.length, 0);
+        ok(document.paths?.["/api/"]?.get?.responses?.["401"]);
+        const scheme = document.components?.securitySchemes?.["openIdConnect"];
+        ok(scheme);
+        equal(scheme.type, "openIdConnect");
+        ok(scheme.openIdConnectUrl.includes("https://auth.example.com/realms/test-realm"));
     });
 });
 //# sourceMappingURL=defaultPlugins.test.js.map

package/dist/__tests__/defaultPlugins.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaultPlugins.test.js","sourceRoot":"","sources":["../../src/__tests__/defaultPlugins.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,cAAc,MAAM,+BAA+B,CAAA;AAE1D,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE;IACzB,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzE,CAAA;IAED,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACtB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACnC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;QAChC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAC1D,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACtB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;QAChC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}
+{"version":3,"file":"defaultPlugins.test.js","sourceRoot":"","sources":["../../src/__tests__/defaultPlugins.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEvC,OAAO,cAAc,MAAM,+BAA+B,CAAA;AAE1D,SAAS,kBAAkB,CACvB,OAA0C;IAE1C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IACrD,MAAM,aAAa,GAAG,aAAa,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,CAAA;IAE5D,IACI,aAAa;QACb,OAAO,aAAa,KAAK,QAAQ;QACjC,UAAU,IAAI,aAAa,EAC7B,CAAC;QACC,OAAQ,aAAoD,CAAC,QAAQ,CAAA;IACzE,CAAC;IAED,OAAO,SAAS,CAAA;AACpB,CAAC;AAED,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE;IACzB,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzE,CAAA;IAED,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACtB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACnC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;QAChC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAClC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACnC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAC1D,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACtB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;QAChC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAClC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACnC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAE5C,EAAE,CAAC,QAAQ,CAAC,CAAA;QACZ,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACnC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;QAC1D,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAA;QACpE,yEAAyE;QACzE,KAAK,CACD,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC,eAAe,CAAC,EACvD,SAAS,CACZ,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,OAAO,GAAG,cAAc,CAAC;YAC3B,MAAM;YACN,YAAY,EAAE;gBACV,GAAG,EAAE,0BAA0B;gBAC/B,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,aAAa;gBACvB,YAAY,EAAE,aAAa;aAC9B;SACJ,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAE5C,EAAE,CAAC,QAAQ,CAAC,CAAA;QACZ,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;QAC7C,KAAK,CACD,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC;YAC5D,EAAE,MAAM,EACZ,CAAC,CACJ,CAAA;QACD,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;QAEtD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,CACjD,eAAe,CACwC,CAAA;QAC3D,EAAE,CAAC,MAAM,CAAC,CAAA;QACV,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QACnC,EAAE,CACE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAC5B,4CAA4C,CAC/C,CACJ,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}

package/dist/__tests__/defaultRoutes.test.js

@@ -41,12 +41,12 @@ suite("defaultRoutes [HTTP]", () => {
     const locals = {
         pkg: { name: "ts-http-server", version: "0.0.0", description: "Test" },
     };
-    const plugins = defaultPlugins({ locals });
     const routes = new Map([...defaultRoutes(), ...errorRoute()]);
     const port = 19002;
     const base = `http://localhost:${port}`;
     let server;
     before(async () => {
+        const plugins = defaultPlugins({ locals });
         server = launcher({
             logger: testLogger,
             locals: { ...locals, port },
@@ -177,5 +177,230 @@ suite("defaultRoutes [HTTP]", () => {
         match(res.headers.get("content-type") ?? "", /text\/plain/);
         ok(body.includes("Not Found"));
     });
+    test("GET /api/ with application/json → 200 welcome message (auth disabled)", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: { accept: "application/json" },
+        });
+        const body = (await res.json());
+        equal(res.status, 200);
+        match(res.headers.get("content-type") ?? "", /application\/json/);
+        ok(typeof body.message === "string");
+    });
+    test("GET /api/ with text/html → 406 Not Acceptable", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: { accept: "text/html" },
+        });
+        equal(res.status, 406);
+    });
+    test("HEAD /api/ → 200", async () => {
+        const res = await fetch(`${base}/api/`, { method: "HEAD" });
+        equal(res.status, 200);
+    });
+    test("DELETE /api/ → 405 Method Not Allowed", async () => {
+        const res = await fetch(`${base}/api/`, { method: "DELETE" });
+        equal(res.status, 405);
+        equal(res.headers.get("allow"), "GET, HEAD");
+    });
+    test("PATCH /api/ → 405 Method Not Allowed", async () => {
+        const res = await fetch(`${base}/api/`, { method: "PATCH" });
+        equal(res.status, 405);
+        equal(res.headers.get("allow"), "GET, HEAD");
+    });
+    test("POST /api/ → 405 Method Not Allowed", async () => {
+        const res = await fetch(`${base}/api/`, { method: "POST" });
+        equal(res.status, 405);
+        equal(res.headers.get("allow"), "GET, HEAD");
+    });
+    test("PUT /api/ → 405 Method Not Allowed", async () => {
+        const res = await fetch(`${base}/api/`, { method: "PUT" });
+        equal(res.status, 405);
+        equal(res.headers.get("allow"), "GET, HEAD");
+    });
+});
+suite("defaultRoutes [HTTP] with authPaths=['/api/**'] and mock verifyToken", () => {
+    const noop = () => { };
+    const testLogger = {
+        category: ["test"],
+        info: noop,
+        error: noop,
+        warn: noop,
+        debug: noop,
+        getChild: () => testLogger,
+    };
+    const locals = {
+        pkg: {
+            name: "ts-http-server",
+            version: "0.0.0",
+            description: "Test",
+        },
+    };
+    const port = 19004;
+    const base = `http://localhost:${port}`;
+    let server;
+    before(async () => {
+        const plugins = defaultPlugins({ locals });
+        // Mock verifyToken: accepts only "Bearer test-token"
+        const verifyToken = async (authorizationHeader) => authorizationHeader === "Bearer test-token";
+        server = launcher({
+            logger: testLogger,
+            locals: { ...locals, port, authPaths: ["/api/**"] },
+            plugins,
+            routes: defaultRoutes(),
+            verifyToken,
+            opts: { disableRequestLogging: true },
+        });
+        await setTimeout(1000);
+    });
+    after(async () => {
+        await setTimeout(500);
+        await server.close();
+    });
+    test("GET /api/ without Authorization → 401 Unauthorized", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: { accept: "application/json" },
+        });
+        const body = (await res.json());
+        equal(res.status, 401);
+        equal(res.headers.get("www-authenticate"), 'Bearer realm="api"');
+        match(res.headers.get("content-type") ?? "", /application\/json/);
+        equal(body.statusCode, 401);
+        equal(body.error, "Unauthorized");
+    });
+    test("GET /api/ with invalid Authorization → 401 Unauthorized", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: {
+                accept: "application/json",
+                authorization: "Bearer wrong-token",
+            },
+        });
+        equal(res.status, 401);
+        equal(res.headers.get("www-authenticate"), 'Bearer realm="api"');
+    });
+    test("GET /api/ with valid Authorization → 200 welcome message", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: {
+                accept: "application/json",
+                authorization: "Bearer test-token",
+            },
+        });
+        const body = (await res.json());
+        equal(res.status, 200);
+        match(res.headers.get("content-type") ?? "", /application\/json/);
+        ok(typeof body.message === "string");
+    });
+    test("DELETE /api/ with valid Authorization → 405 Method Not Allowed", async () => {
+        const res = await fetch(`${base}/api/`, {
+            method: "DELETE",
+            headers: { authorization: "Bearer test-token" },
+        });
+        equal(res.status, 405);
+        equal(res.headers.get("allow"), "GET, HEAD");
+    });
+    test("GET / without Authorization → 200 (non-protected path)", async () => {
+        const res = await fetch(`${base}/`, {
+            headers: { accept: "text/html" },
+        });
+        equal(res.status, 200);
+    });
+});
+suite("defaultRoutes [HTTP] with authPaths and custom authRealm", () => {
+    const noop = () => { };
+    const testLogger = {
+        category: ["test"],
+        info: noop,
+        error: noop,
+        warn: noop,
+        debug: noop,
+        getChild: () => testLogger,
+    };
+    const locals = {
+        pkg: {
+            name: "ts-http-server",
+            version: "0.0.0",
+            description: "Test",
+        },
+    };
+    const port = 19006;
+    const base = `http://localhost:${port}`;
+    let server;
+    before(async () => {
+        const plugins = defaultPlugins({ locals });
+        server = launcher({
+            logger: testLogger,
+            locals: {
+                ...locals,
+                port,
+                authPaths: ["/api/**"],
+                authRealm: "my-realm",
+            },
+            plugins,
+            routes: defaultRoutes(),
+            opts: { disableRequestLogging: true },
+        });
+        await setTimeout(1000);
+    });
+    after(async () => {
+        await setTimeout(500);
+        await server.close();
+    });
+    test("GET /api/ without Authorization → 401 with custom realm", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: { accept: "application/json" },
+        });
+        equal(res.status, 401);
+        equal(res.headers.get("www-authenticate"), 'Bearer realm="my-realm"');
+    });
+});
+suite("defaultRoutes [HTTP] with no authPaths (auth disabled)", () => {
+    const noop = () => { };
+    const testLogger = {
+        category: ["test"],
+        info: noop,
+        error: noop,
+        warn: noop,
+        debug: noop,
+        getChild: () => testLogger,
+    };
+    const locals = {
+        pkg: { name: "ts-http-server", version: "0.0.0", description: "Test" },
+    };
+    const port = 19005;
+    const base = `http://localhost:${port}`;
+    let server;
+    before(async () => {
+        const plugins = defaultPlugins({ locals });
+        // verifyToken always returns false — but authPaths is unset so it is never called
+        const verifyToken = async () => false;
+        server = launcher({
+            logger: testLogger,
+            locals: { ...locals, port },
+            plugins,
+            routes: defaultRoutes(),
+            verifyToken,
+            opts: { disableRequestLogging: true },
+        });
+        await setTimeout(1000);
+    });
+    after(async () => {
+        await setTimeout(500);
+        await server.close();
+    });
+    test("GET /api/ without Authorization → 200 (auth disabled)", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: { accept: "application/json" },
+        });
+        const body = (await res.json());
+        equal(res.status, 200);
+        ok(typeof body.message === "string");
+    });
+    test("GET /api/ with any Authorization → 200 (auth disabled)", async () => {
+        const res = await fetch(`${base}/api/`, {
+            headers: {
+                accept: "application/json",
+                authorization: "Bearer anything",
+            },
+        });
+        equal(res.status, 200);
+    });
 });
 //# sourceMappingURL=defaultRoutes.test.js.map

package/dist/__tests__/defaultRoutes.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaultRoutes.test.js","sourceRoot":"","sources":["../../src/__tests__/defaultRoutes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,OAAO,cAAc,MAAM,+BAA+B,CAAA;AAC1D,OAAO,aAAa,MAAM,8BAA8B,CAAA;AACxD,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAC/B,8EAA8E;IAC9E,oCAAoC;IACpC,8EAA8E;IAC9E,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG;QACf,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;KACR,CAAA;IAEtB,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAC9E,SAAS,UAAU;QACf,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;QAC9C,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE;YACtB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;YACxC,CAAC;SACJ,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACjB,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzE,CAAA;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAA;IAE7D,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAuB,CAAA;IAE3B,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE;YAC3B,OAAO;YACP,MAAM;YACN,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAC3B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAC3B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAA;QACxE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;QACvC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;QAC5C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAA;QACxE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;QAC5C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAClC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAA;QACxE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAClC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;QAC9C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;QAC9C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,EAAE,CAAC,IAAI,CAAC,CAAA;IACZ,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE;SACxD,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,GAAG,GAAG,WAAW,CACnB;gBACI,QAAQ,EAAE,WAAW;gBACrB,IAAI;gBACJ,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;aACnC,EACD,CAAC,GAAG,EAAE,EAAE;gBACJ,GAAG,CAAC,MAAM,EAAE,CAAA;gBACZ,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,CAAA;YAChC,CAAC,CACJ,CAAA;YACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACvB,GAAG,CAAC,GAAG,EAAE,CAAA;QACb,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACpC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAA;QAC3D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}
+{"version":3,"file":"defaultRoutes.test.js","sourceRoot":"","sources":["../../src/__tests__/defaultRoutes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,OAAO,cAAc,MAAM,+BAA+B,CAAA;AAC1D,OAAO,aAAa,MAAM,8BAA8B,CAAA;AACxD,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAC/B,8EAA8E;IAC9E,oCAAoC;IACpC,8EAA8E;IAC9E,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG;QACf,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;KACR,CAAA;IAEtB,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAC9E,SAAS,UAAU;QACf,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;QAC9C,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE;YACtB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;YACxC,CAAC;SACJ,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACjB,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzE,CAAA;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAA;IAE7D,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAuB,CAAA;IAE3B,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE;YAC3B,OAAO;YACP,MAAM;YACN,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAC3B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAC3B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAA;QACxE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;QACvC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;QAC5C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAA;QACxE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;QAC5C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAClC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAA;QACxE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAClC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;QAC9C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAC1D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;QAC9C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,EAAE,CAAC,IAAI,CAAC,CAAA;IACZ,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE;SACxD,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,GAAG,GAAG,WAAW,CACnB;gBACI,QAAQ,EAAE,WAAW;gBACrB,IAAI;gBACJ,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;aACnC,EACD,CAAC,GAAG,EAAE,EAAE;gBACJ,GAAG,CAAC,MAAM,EAAE,CAAA;gBACZ,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,CAAA;YAChC,CAAC,CACJ,CAAA;YACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACvB,GAAG,CAAC,GAAG,EAAE,CAAA;QACb,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACpC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAA;QAC3D,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAA;QACtD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,EAAE,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;SACnC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA;AAEF,KAAK,CACD,sEAAsE,EACtE,GAAG,EAAE;IACD,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG;QACf,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;KACR,CAAA;IAEtB,MAAM,MAAM,GAAG;QACX,GAAG,EAAE;YACD,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,MAAM;SACtB;KACJ,CAAA;IAED,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAuB,CAAA;IAE3B,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,qDAAqD;QACrD,MAAM,WAAW,GAAG,KAAK,EACrB,mBAAuC,EACvB,EAAE,CAAC,mBAAmB,KAAK,mBAAmB,CAAA;QAElE,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE;YACnD,OAAO;YACP,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW;YACX,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAA;QACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC,CAAA;QAChE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,oBAAoB;aACtC;SACJ,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,mBAAmB;aACrC;SACJ,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAA;QACtD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;QACjE,EAAE,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE;SAClD,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;SACnC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACN,CAAC,CACJ,CAAA;AAED,KAAK,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACnE,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG;QACf,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;KACR,CAAA;IAEtB,MAAM,MAAM,GAAG;QACX,GAAG,EAAE;YACD,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,MAAM;SACtB;KACJ,CAAA;IAED,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAuB,CAAA;IAE3B,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE;gBACJ,GAAG,MAAM;gBACT,IAAI;gBACJ,SAAS,EAAE,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE,UAAU;aACxB;YACD,OAAO;YACP,MAAM,EAAE,aAAa,EAAE;YACvB,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA;AAEF,KAAK,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACjE,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG;QACf,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;KACR,CAAA;IAEtB,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzE,CAAA;IAED,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAuB,CAAA;IAE3B,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,kFAAkF;QAClF,MAAM,WAAW,GAAG,KAAK,IAAsB,EAAE,CAAC,KAAK,CAAA;QAEvD,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE;YAC3B,OAAO;YACP,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW;YACX,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAA;QACtD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,EAAE,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YACpC,OAAO,EAAE;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,iBAAiB;aACnC;SACJ,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}

package/dist/__tests__/keycloak.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=keycloak.test.d.ts.map

package/dist/__tests__/keycloak.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/keycloak.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/keycloak.test.js

@@ -0,0 +1,105 @@
+import { equal } from "node:assert/strict";
+import { createServer } from "node:http";
+import { after, before, suite, test } from "node:test";
+import { exportJWK, generateKeyPair, SignJWT } from "jose";
+import { createKeycloakVerifier } from "../auth/keycloak.js";
+// ---------------------------------------------------------------------------
+// Mock JWKS server + key pair used across all tests in this suite
+// ---------------------------------------------------------------------------
+suite("createKeycloakVerifier", () => {
+    const mockPort = 19010;
+    const mockBaseUrl = `http://localhost:${mockPort}`;
+    const testRealm = "test-realm";
+    const issuer = `${mockBaseUrl}/realms/${testRealm}`;
+    const config = {
+        url: mockBaseUrl,
+        realm: testRealm,
+        clientId: "test-client",
+        clientSecret: "test-secret",
+    };
+    let privateKey;
+    let jwksServer;
+    before(async () => {
+        const keyPair = await generateKeyPair("RS256");
+        privateKey = keyPair.privateKey;
+        const publicJwk = await exportJWK(keyPair.publicKey);
+        publicJwk.kid = "test-key-1";
+        publicJwk.use = "sig";
+        publicJwk.alg = "RS256";
+        const jwksBody = JSON.stringify({ keys: [publicJwk] });
+        const certsPath = `/realms/${testRealm}/protocol/openid-connect/certs`;
+        jwksServer = createServer((_req, res) => {
+            if (_req.url === certsPath) {
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(jwksBody);
+            }
+            else {
+                res.writeHead(404);
+                res.end();
+            }
+        });
+        await new Promise((resolve) => {
+            jwksServer.listen(mockPort, resolve);
+        });
+    });
+    after(async () => {
+        await new Promise((resolve, reject) => {
+            jwksServer.close((err) => (err ? reject(err) : resolve()));
+        });
+    });
+    /** Creates a valid JWT signed with the test key. */
+    async function validToken() {
+        return new SignJWT({})
+            .setProtectedHeader({ alg: "RS256", kid: "test-key-1" })
+            .setIssuer(issuer)
+            .setIssuedAt()
+            .setExpirationTime("1h")
+            .sign(privateKey);
+    }
+    test("returns false for undefined Authorization header", async () => {
+        const verify = createKeycloakVerifier(config);
+        equal(await verify(undefined), false);
+    });
+    test("returns false when Authorization does not start with 'Bearer '", async () => {
+        const verify = createKeycloakVerifier(config);
+        equal(await verify("Basic abc123"), false);
+        equal(await verify("bearer token"), false);
+    });
+    test("returns true for a valid signed JWT", async () => {
+        const verify = createKeycloakVerifier(config);
+        equal(await verify(`Bearer ${await validToken()}`), true);
+    });
+    test("returns false for a JWT with wrong issuer", async () => {
+        const verify = createKeycloakVerifier(config);
+        const token = await new SignJWT({})
+            .setProtectedHeader({ alg: "RS256", kid: "test-key-1" })
+            .setIssuer("https://wrong.example.com/realms/other")
+            .setIssuedAt()
+            .setExpirationTime("1h")
+            .sign(privateKey);
+        equal(await verify(`Bearer ${token}`), false);
+    });
+    test("returns false for an expired JWT", async () => {
+        const verify = createKeycloakVerifier(config);
+        const now = Math.floor(Date.now() / 1000);
+        const token = await new SignJWT({})
+            .setProtectedHeader({ alg: "RS256", kid: "test-key-1" })
+            .setIssuer(issuer)
+            .setIssuedAt(now - 120)
+            .setExpirationTime(now - 60)
+            .sign(privateKey);
+        equal(await verify(`Bearer ${token}`), false);
+    });
+    test("returns false for a malformed token string", async () => {
+        const verify = createKeycloakVerifier(config);
+        equal(await verify("Bearer not-a-real-jwt"), false);
+    });
+    test("strips trailing slash from base URL", async () => {
+        const verify = createKeycloakVerifier({
+            ...config,
+            url: `${mockBaseUrl}/`,
+        });
+        equal(await verify(`Bearer ${await validToken()}`), true);
+    });
+});
+//# sourceMappingURL=keycloak.test.js.map

package/dist/__tests__/keycloak.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak.test.js","sourceRoot":"","sources":["../../src/__tests__/keycloak.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAE5D,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E,KAAK,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAA;IACtB,MAAM,WAAW,GAAG,oBAAoB,QAAQ,EAAE,CAAA;IAClD,MAAM,SAAS,GAAG,YAAY,CAAA;IAC9B,MAAM,MAAM,GAAG,GAAG,WAAW,WAAW,SAAS,EAAE,CAAA;IACnD,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,aAAa;KAC9B,CAAA;IAED,IAAI,UAAsB,CAAA;IAC1B,IAAI,UAAmB,CAAA;IAEvB,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAA;QAC9C,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QAC/B,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACpD,SAAS,CAAC,GAAG,GAAG,YAAY,CAAA;QAC5B,SAAS,CAAC,GAAG,GAAG,KAAK,CAAA;QACrB,SAAS,CAAC,GAAG,GAAG,OAAO,CAAA;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,SAAS,GAAG,WAAW,SAAS,gCAAgC,CAAA;QAEtE,UAAU,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACpC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC1D,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,EAAE,CAAA;YACb,CAAC;QACL,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;IAEF,oDAAoD;IACpD,KAAK,UAAU,UAAU;QACrB,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;aACjB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;aACvD,SAAS,CAAC,MAAM,CAAC;aACjB,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,UAAU,CAAC,CAAA;IACzB,CAAC;IAED,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAC7C,KAAK,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAC7C,KAAK,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAA;QAC1C,KAAK,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAC7C,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,MAAM,UAAU,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;aAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;aACvD,SAAS,CAAC,wCAAwC,CAAC;aACnD,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,UAAU,CAAC,CAAA;QACrB,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;aAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;aACvD,SAAS,CAAC,MAAM,CAAC;aACjB,WAAW,CAAC,GAAG,GAAG,GAAG,CAAC;aACtB,iBAAiB,CAAC,GAAG,GAAG,EAAE,CAAC;aAC3B,IAAI,CAAC,UAAU,CAAC,CAAA;QACrB,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAC7C,KAAK,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,EAAE,KAAK,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,sBAAsB,CAAC;YAClC,GAAG,MAAM;YACT,GAAG,EAAE,GAAG,WAAW,GAAG;SACzB,CAAC,CAAA;QACF,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,MAAM,UAAU,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}

package/dist/__tests__/launcher.test.js

@@ -51,6 +51,28 @@ const routes = new Map([
             },
         },
     ],
+    [
+        "ERROR_INVALID_STATUS",
+        {
+            method: "GET",
+            url: "/error-invalid-status",
+            handler: async (_request, reply) => {
+                reply.status(600);
+                throw new Error("error with out-of-range status code");
+            },
+        },
+    ],
+    [
+        "ERROR_VALID_STATUS",
+        {
+            method: "GET",
+            url: "/error-valid-status",
+            handler: async (_request, reply) => {
+                reply.status(503);
+                throw new Error("error with valid 5xx status code");
+            },
+        },
+    ],
 ]);
 // ---------------------------------------------------------------------------
 // HTTP server suite
@@ -112,5 +134,17 @@ suite("launcher [HTTP]", () => {
         });
         equal(res.status, 500);
     });
+    test("GET /error-invalid-status → 500 (statusCode > 599 reset to 500)", async () => {
+        const res = await fetch(`${base}/error-invalid-status`, {
+            headers: { accept: "application/json" },
+        });
+        equal(res.status, 500);
+    });
+    test("GET /error-valid-status → 503 (valid 4xx–5xx status preserved)", async () => {
+        const res = await fetch(`${base}/error-valid-status`, {
+            headers: { accept: "application/json" },
+        });
+        equal(res.status, 503);
+    });
 });
 //# sourceMappingURL=launcher.test.js.map