@darthcav/ts-http-server 0.5.1 → 0.6.0

package/dist/__tests__/launcher.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.test.js","sourceRoot":"","sources":["../../src/__tests__/launcher.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,cAAc,MAAM,kBAAkB,CAAA;AAG7C,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAGrC,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;AAC3B,MAAM,UAAU,GAAG;IACf,QAAQ,EAAE,CAAC,MAAM,CAAC;IAClB,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;CACR,CAAA;AAEtB,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAoB;IACvC,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;CACnD,CAAC,CAAA;AAEF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAuB;IACzC;QACI,SAAS;QACT;YACI,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAC/D;KACJ;IACD;QACI,UAAU;QACV;YACI,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;YAC1C,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;gBAC/B,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;gBAClC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;YACtD,CAAC;SACJ;KACJ;IACD;QACI,aAAa;QACb;YACI,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;YACxC,CAAC;SACJ;KACJ;CACJ,CAAC,CAAA;AAEF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAyC,CAAA;IAE7C,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,EAAE,IAAI,EAAE;YAChB,OAAO;YACP,MAAM;YACN,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;QACnC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAA;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CACD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAC/B,iCAAiC,CACpC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAA;QACzD,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACpC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACpC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}
+{"version":3,"file":"launcher.test.js","sourceRoot":"","sources":["../../src/__tests__/launcher.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,cAAc,MAAM,kBAAkB,CAAA;AAG7C,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAGrC,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;AAC3B,MAAM,UAAU,GAAG;IACf,QAAQ,EAAE,CAAC,MAAM,CAAC;IAClB,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;CACR,CAAA;AAEtB,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAoB;IACvC,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;CACnD,CAAC,CAAA;AAEF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAuB;IACzC;QACI,SAAS;QACT;YACI,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAC/D;KACJ;IACD;QACI,UAAU;QACV;YACI,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;YAC1C,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;gBAC/B,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;gBAClC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;YACtD,CAAC;SACJ;KACJ;IACD;QACI,aAAa;QACb;YACI,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;YACxC,CAAC;SACJ;KACJ;IACD;QACI,sBAAsB;QACtB;YACI,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,uBAAuB;YAC5B,OAAO,EAAE,KAAK,EACV,QAA0C,EAC1C,KAAqC,EACvC,EAAE;gBACA,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YAC1D,CAAC;SACJ;KACJ;IACD;QACI,oBAAoB;QACpB;YACI,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,qBAAqB;YAC1B,OAAO,EAAE,KAAK,EACV,QAA0C,EAC1C,KAAqC,EACvC,EAAE;gBACA,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACvD,CAAC;SACJ;KACJ;CACJ,CAAC,CAAA;AAEF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACvC,IAAI,MAAyC,CAAA;IAE7C,MAAM,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,GAAG,QAAQ,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,EAAE,IAAI,EAAE;YAChB,OAAO;YACP,MAAM;YACN,IAAI,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;SACxC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;QACnC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAA;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtB,KAAK,CACD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAC/B,iCAAiC,CACpC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAA;QACzD,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACpC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACpC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,uBAAuB,EAAE;YACpD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,qBAAqB,EAAE;YAClD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}

package/dist/auth/keycloak.d.ts

@@ -0,0 +1,17 @@
+import type { KeycloakAuthConfig, TokenVerifier } from "../types.ts";
+/**
+ * Creates a JWT token verifier backed by a Keycloak realm's JWKS endpoint.
+ *
+ * The JWKS keys are fetched lazily on the first verification request and
+ * cached; key rotation is handled automatically by `jose`.
+ *
+ * The verifier extracts the bearer token from the `Authorization` header,
+ * verifies the JWT signature against the realm's public keys, and validates
+ * the issuer claim. Any verification failure returns `false` without throwing.
+ *
+ * @param config - Keycloak realm and client configuration.
+ * @returns An async {@link TokenVerifier} that returns `true` if the bearer
+ * JWT is valid, `false` otherwise.
+ */
+export declare function createKeycloakVerifier(config: KeycloakAuthConfig): TokenVerifier;
+//# sourceMappingURL=keycloak.d.ts.map

package/dist/auth/keycloak.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak.d.ts","sourceRoot":"","sources":["../../src/auth/keycloak.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEpE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAClC,MAAM,EAAE,kBAAkB,GAC3B,aAAa,CAuBf"}

package/dist/auth/keycloak.js

@@ -0,0 +1,35 @@
+import { createRemoteJWKSet, jwtVerify } from "jose";
+/**
+ * Creates a JWT token verifier backed by a Keycloak realm's JWKS endpoint.
+ *
+ * The JWKS keys are fetched lazily on the first verification request and
+ * cached; key rotation is handled automatically by `jose`.
+ *
+ * The verifier extracts the bearer token from the `Authorization` header,
+ * verifies the JWT signature against the realm's public keys, and validates
+ * the issuer claim. Any verification failure returns `false` without throwing.
+ *
+ * @param config - Keycloak realm and client configuration.
+ * @returns An async {@link TokenVerifier} that returns `true` if the bearer
+ * JWT is valid, `false` otherwise.
+ */
+export function createKeycloakVerifier(config) {
+    const baseUrl = config.url.replace(/\/$/, "");
+    const jwksUri = new URL(`/realms/${config.realm}/protocol/openid-connect/certs`, baseUrl);
+    const JWKS = createRemoteJWKSet(jwksUri);
+    const issuer = `${baseUrl}/realms/${config.realm}`;
+    return async function verifyToken(authorizationHeader) {
+        if (!authorizationHeader?.startsWith("Bearer ")) {
+            return false;
+        }
+        const token = authorizationHeader.slice(7);
+        try {
+            await jwtVerify(token, JWKS, { issuer });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+}
+//# sourceMappingURL=keycloak.js.map

package/dist/auth/keycloak.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak.js","sourceRoot":"","sources":["../../src/auth/keycloak.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAGpD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAClC,MAA0B;IAE1B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CACnB,WAAW,MAAM,CAAC,KAAK,gCAAgC,EACvD,OAAO,CACV,CAAA;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,GAAG,OAAO,WAAW,MAAM,CAAC,KAAK,EAAE,CAAA;IAElD,OAAO,KAAK,UAAU,WAAW,CAC7B,mBAAuC;QAEvC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAA;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1C,IAAI,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACxC,OAAO,IAAI,CAAA;QACf,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAA;QAChB,CAAC;IACL,CAAC,CAAA;AACL,CAAC"}

package/dist/defaults/defaultPlugins.d.ts

@@ -1,19 +1,24 @@
-import type { FSTPlugin, LauncherLocals } from "../types.ts";
+import type { DefaultPluginsOptions, FSTPlugin } from "../types.ts";
 /**
  * Builds the default plugin map for use with `launcher`.
  *
  * Registers: `@fastify/accepts`, `@fastify/compress`,
  * `@fastify/cors`, `@fastify/etag`, `@fastify/helmet`,
- * `@fastify/view` (EJS), and `@fastify/static`.
+ * `@fastify/view` (EJS), `@fastify/static`, `@fastify/swagger`,
+ * and `@fastify/swagger-ui`.
+ *
+ * Synchronously reads and resolves all `$ref` schema files from
+ * `src/openapi/schemas/` before building the plugin map, so `@fastify/swagger`
+ * receives a fully inlined document.
  *
  * @param opts.locals - Application locals; `locals.pkg` is exposed as the
  *   default context for every EJS view.
- * @param opts.baseDir - Optional base directory for resolving the `src/` folder; defaults to the parent of `import.meta.dirname`.
+ * @param opts.baseDir - Optional base directory for resolving the `src/`
+ *   folder; defaults to the parent of `import.meta.dirname`.
+ * @param opts.keycloakAuth - Optional Keycloak configuration used to mark the
+ *   generated `/api/` OpenAPI operations as OpenID Connect–protected.
  * @returns A `Map` of plugin names to plugin entries, suitable for passing as
  *   the `plugins` field of `LauncherOptions`.
  */
-export default function defaultPlugins(opts: {
-    locals: LauncherLocals;
-    baseDir?: string | null;
-}): Map<string, FSTPlugin>;
+export default function defaultPlugins(opts: DefaultPluginsOptions): Map<string, FSTPlugin>;
 //# sourceMappingURL=defaultPlugins.d.ts.map

package/dist/defaults/defaultPlugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaultPlugins.d.ts","sourceRoot":"","sources":["../../src/defaults/defaultPlugins.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CA8DzB"}
+{"version":3,"file":"defaultPlugins.d.ts","sourceRoot":"","sources":["../../src/defaults/defaultPlugins.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACR,qBAAqB,EACrB,SAAS,EAEZ,MAAM,aAAa,CAAA;AAwEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,OAAO,UAAU,cAAc,CAClC,IAAI,EAAE,qBAAqB,GAC5B,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CA8GxB"}

package/dist/defaults/defaultPlugins.js

@@ -1,3 +1,4 @@
+import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import FastifyAccepts from "@fastify/accepts";
 import FastifyCompress from "@fastify/compress";
@@ -5,18 +6,84 @@ import FastifyCors from "@fastify/cors";
 import FastifyEtag from "@fastify/etag";
 import FastifyHelmet from "@fastify/helmet";
 import FastifyStatic from "@fastify/static";
+import FastifySwagger from "@fastify/swagger";
+import FastifySwaggerUi from "@fastify/swagger-ui";
 import FastifyView from "@fastify/view";
 import Ejs from "ejs";
+import { parse } from "yaml";
+function configureApiDocumentAuth(apiDoc, keycloakAuth) {
+    if (!apiDoc.paths) {
+        return;
+    }
+    const apiPath = apiDoc.paths["/api/"];
+    if (!apiPath) {
+        return;
+    }
+    if (keycloakAuth) {
+        const baseUrl = keycloakAuth.url.replace(/\/$/, "");
+        const openIdConnectUrl = `${baseUrl}/realms/${keycloakAuth.realm}/.well-known/openid-configuration`;
+        apiDoc.components ??= {};
+        apiDoc.components.securitySchemes = {
+            openIdConnect: {
+                type: "openIdConnect",
+                openIdConnectUrl,
+            },
+        };
+        apiDoc.security = [{ openIdConnect: [] }];
+        for (const operation of Object.values(apiPath)) {
+            if (!operation ||
+                typeof operation !== "object" ||
+                !("responses" in operation)) {
+                continue;
+            }
+            operation.security = [{ openIdConnect: [] }];
+            operation.responses ??= {};
+            operation.responses["401"] = {
+                description: "Unauthorized",
+                content: {
+                    "application/json": {
+                        schema: { $ref: "#/components/schemas/Error" },
+                        examples: {
+                            "401": { $ref: "#/components/examples/http_401" },
+                        },
+                    },
+                },
+            };
+        }
+        return;
+    }
+    delete apiDoc.security;
+    if (apiDoc.components?.securitySchemes) {
+        delete apiDoc.components.securitySchemes["openIdConnect"];
+    }
+    for (const operation of Object.values(apiPath)) {
+        if (!operation ||
+            typeof operation !== "object" ||
+            !("responses" in operation)) {
+            continue;
+        }
+        delete operation.security;
+        delete operation.responses?.["401"];
+    }
+}
 /**
  * Builds the default plugin map for use with `launcher`.
  *
  * Registers: `@fastify/accepts`, `@fastify/compress`,
  * `@fastify/cors`, `@fastify/etag`, `@fastify/helmet`,
- * `@fastify/view` (EJS), and `@fastify/static`.
+ * `@fastify/view` (EJS), `@fastify/static`, `@fastify/swagger`,
+ * and `@fastify/swagger-ui`.
+ *
+ * Synchronously reads and resolves all `$ref` schema files from
+ * `src/openapi/schemas/` before building the plugin map, so `@fastify/swagger`
+ * receives a fully inlined document.
  *
  * @param opts.locals - Application locals; `locals.pkg` is exposed as the
  *   default context for every EJS view.
- * @param opts.baseDir - Optional base directory for resolving the `src/` folder; defaults to the parent of `import.meta.dirname`.
+ * @param opts.baseDir - Optional base directory for resolving the `src/`
+ *   folder; defaults to the parent of `import.meta.dirname`.
+ * @param opts.keycloakAuth - Optional Keycloak configuration used to mark the
+ *   generated `/api/` OpenAPI operations as OpenID Connect–protected.
  * @returns A `Map` of plugin names to plugin entries, suitable for passing as
  *   the `plugins` field of `LauncherOptions`.
  */
@@ -26,6 +93,18 @@ export default function defaultPlugins(opts) {
     const srcDir = baseDir
         ? join(baseDir, "src")
         : join(import.meta.dirname, "..");
+    const apiDoc = parse(readFileSync(join(srcDir, "openapi", "api.yaml"), "utf8"));
+    const schemas = apiDoc.components?.schemas;
+    if (schemas) {
+        for (const key of Object.keys(schemas)) {
+            const schema = schemas[key];
+            if (schema && "$ref" in schema) {
+                const refPath = join(srcDir, "openapi", schema.$ref);
+                schemas[key] = parse(readFileSync(refPath, "utf8"));
+            }
+        }
+    }
+    configureApiDocumentAuth(apiDoc, opts.keycloakAuth);
     plugins.set("@fastify/accepts", {
         plugin: FastifyAccepts,
     });
@@ -46,6 +125,7 @@ export default function defaultPlugins(opts) {
             global: true,
             contentSecurityPolicy: {
                 directives: {
+                    connectSrc: ["'self'", "https://cdn.jsdelivr.net/"],
                     fontSrc: [
                         "'self'",
                         "https://fonts.googleapis.com/",
@@ -79,6 +159,33 @@ export default function defaultPlugins(opts) {
             prefix: "/",
         },
     });
+    plugins.set("@fastify/swagger", {
+        plugin: FastifySwagger,
+        opts: {
+            mode: "static",
+            specification: { document: apiDoc },
+            exposeRoute: true,
+        },
+    });
+    plugins.set("@fastify/swagger-ui", {
+        plugin: FastifySwaggerUi,
+        opts: {
+            routePrefix: "/docs",
+            uiConfig: {
+                deepLinking: true,
+                docExpansion: "list",
+                dom_id: "#swagger-ui",
+                jsonEditor: true,
+                showRequestHeaders: true,
+                tryItOutEnabled: false,
+                onComplete: () => {
+                    // @ts-expect-error — runs in browser context, not Node
+                    const topbar = document.querySelector("div.topbar");
+                    topbar?.remove();
+                },
+            },
+        },
+    });
     return plugins;
 }
 //# sourceMappingURL=defaultPlugins.js.map

package/dist/defaults/defaultPlugins.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaultPlugins.js","sourceRoot":"","sources":["../../src/defaults/defaultPlugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,cAAc,MAAM,kBAAkB,CAAA;AAC7C,OAAO,eAAe,MAAM,mBAAmB,CAAA;AAC/C,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,GAAG,MAAM,KAAK,CAAA;AAGrB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,IAGtC;IACG,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC5C,MAAM,MAAM,GAAG,OAAO;QAClB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAErC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE;QAC5B,MAAM,EAAE,cAAc;KACzB,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE;QAC7B,MAAM,EAAE,eAAe;KAC1B,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACzB,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC9B,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;QAC3B,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE;YACF,MAAM,EAAE,IAAI;YACZ,qBAAqB,EAAE;gBACnB,UAAU,EAAE;oBACR,OAAO,EAAE;wBACL,QAAQ;wBACR,+BAA+B;wBAC/B,4BAA4B;qBAC/B;oBACD,SAAS,EAAE;wBACP,QAAQ;wBACR,iBAAiB;wBACjB,2BAA2B;qBAC9B;iBACJ;aACJ;YACD,IAAI,EAAE;gBACF,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,IAAI;aAC1B;SACJ;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACF,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3B,cAAc,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;SACtC;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;QAC3B,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE;YACF,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC5B,MAAM,EAAE,GAAG;SACd;KACJ,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAClB,CAAC"}
+{"version":3,"file":"defaultPlugins.js","sourceRoot":"","sources":["../../src/defaults/defaultPlugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,cAAc,MAAM,kBAAkB,CAAA;AAC7C,OAAO,eAAe,MAAM,mBAAmB,CAAA;AAC/C,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,cAAc,MAAM,kBAAkB,CAAA;AAC7C,OAAO,gBAAgB,MAAM,qBAAqB,CAAA;AAClD,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,GAAG,MAAM,KAAK,CAAA;AAErB,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAO5B,SAAS,wBAAwB,CAC7B,MAA4B,EAC5B,YAAiC;IAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAChB,OAAM;IACV,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAM;IACV,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACnD,MAAM,gBAAgB,GAAG,GAAG,OAAO,WAAW,YAAY,CAAC,KAAK,mCAAmC,CAAA;QAEnG,MAAM,CAAC,UAAU,KAAK,EAAE,CAAA;QACxB,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG;YAChC,aAAa,EAAE;gBACX,IAAI,EAAE,eAAe;gBACrB,gBAAgB;aACnB;SACJ,CAAA;QACD,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;QAEzC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IACI,CAAC,SAAS;gBACV,OAAO,SAAS,KAAK,QAAQ;gBAC7B,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC,EAC7B,CAAC;gBACC,SAAQ;YACZ,CAAC;YAED,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;YAC5C,SAAS,CAAC,SAAS,KAAK,EAAE,CAAA;YAC1B,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG;gBACzB,WAAW,EAAE,cAAc;gBAC3B,OAAO,EAAE;oBACL,kBAAkB,EAAE;wBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE;wBAC9C,QAAQ,EAAE;4BACN,KAAK,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE;yBACpD;qBACJ;iBACJ;aACJ,CAAA;QACL,CAAC;QACD,OAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAA;IACtB,IAAI,MAAM,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAA;IAC7D,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IACI,CAAC,SAAS;YACV,OAAO,SAAS,KAAK,QAAQ;YAC7B,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC,EAC7B,CAAC;YACC,SAAQ;QACZ,CAAC;QAED,OAAO,SAAS,CAAC,QAAQ,CAAA;QACzB,OAAO,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,OAAO,UAAU,cAAc,CAClC,IAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC5C,MAAM,MAAM,GAAG,OAAO;QAClB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,KAAK,CAChB,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CACpC,CAAA;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,CAAA;IAC1C,IAAI,OAAO,EAAE,CAAC;QACV,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC3B,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAChB,MAAM,EACN,SAAS,EACR,MAA2B,CAAC,IAAI,CACpC,CAAA;gBACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAChB,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CACJ,CAAA;YACjC,CAAC;QACL,CAAC;IACL,CAAC;IACD,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;IAEnD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE;QAC5B,MAAM,EAAE,cAAc;KACzB,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE;QAC7B,MAAM,EAAE,eAAe;KAC1B,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACzB,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC9B,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;QAC3B,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE;YACF,MAAM,EAAE,IAAI;YACZ,qBAAqB,EAAE;gBACnB,UAAU,EAAE;oBACR,UAAU,EAAE,CAAC,QAAQ,EAAE,2BAA2B,CAAC;oBACnD,OAAO,EAAE;wBACL,QAAQ;wBACR,+BAA+B;wBAC/B,4BAA4B;qBAC/B;oBACD,SAAS,EAAE;wBACP,QAAQ;wBACR,iBAAiB;wBACjB,2BAA2B;qBAC9B;iBACJ;aACJ;YACD,IAAI,EAAE;gBACF,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,IAAI;aAC1B;SACJ;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACF,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3B,cAAc,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;SACtC;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;QAC3B,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE;YACF,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC5B,MAAM,EAAE,GAAG;SACd;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE;QAC5B,MAAM,EAAE,cAAc;QACtB,IAAI,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YACnC,WAAW,EAAE,IAAI;SACpB;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE;QAC/B,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE;YACF,WAAW,EAAE,OAAO;YACpB,QAAQ,EAAE;gBACN,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,aAAa;gBACrB,UAAU,EAAE,IAAI;gBAChB,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;gBACtB,UAAU,EAAE,GAAG,EAAE;oBACb,uDAAuD;oBACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAA;oBACnD,MAAM,EAAE,MAAM,EAAE,CAAA;gBACpB,CAAC;aACJ;SACJ;KACJ,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAClB,CAAC"}

package/dist/defaults/defaultRoutes.d.ts

@@ -5,6 +5,11 @@ import type { RouteOptions } from "fastify";
  * Registers:
  * - `GET /` — renders `index.ejs` for `text/html`, throws 406 otherwise.
  * - `DELETE|PATCH|POST|PUT|OPTIONS /` — responds with 405 Method Not Allowed.
+ * - `GET /api/` — returns a JSON welcome message.
+ * - `DELETE|PATCH|POST|PUT /api/` — responds with 405 Method Not Allowed.
+ *
+ * Authentication is handled globally by the `preHandler` hook registered in
+ * {@link launcher} when `locals.authPaths` is set.
  */
 export default function defaultRoutes(): Map<string, RouteOptions>;
 //# sourceMappingURL=defaultRoutes.d.ts.map

package/dist/defaults/defaultRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaultRoutes.d.ts","sourceRoot":"","sources":["../../src/defaults/defaultRoutes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAE3C;;;;;;GAMG;AACH,MAAM,CAAC,OAAO,UAAU,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CA+BjE"}
+{"version":3,"file":"defaultRoutes.d.ts","sourceRoot":"","sources":["../../src/defaults/defaultRoutes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,UAAU,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAuDjE"}

package/dist/defaults/defaultRoutes.js

@@ -5,6 +5,11 @@ import { methodNotAllowed, notAcceptable } from "@hapi/boom";
  * Registers:
  * - `GET /` — renders `index.ejs` for `text/html`, throws 406 otherwise.
  * - `DELETE|PATCH|POST|PUT|OPTIONS /` — responds with 405 Method Not Allowed.
+ * - `GET /api/` — returns a JSON welcome message.
+ * - `DELETE|PATCH|POST|PUT /api/` — responds with 405 Method Not Allowed.
+ *
+ * Authentication is handled globally by the `preHandler` hook registered in
+ * {@link launcher} when `locals.authPaths` is set.
  */
 export default function defaultRoutes() {
     const routes = new Map();
@@ -33,6 +38,31 @@ export default function defaultRoutes() {
             throw methodNotAllowed();
         },
     });
+    routes.set("API_INDEX", {
+        method: "GET",
+        url: "/api/",
+        exposeHeadRoute: true,
+        handler: async (request, reply) => {
+            const { locals } = request.server;
+            const accept = request.accepts();
+            switch (accept.type(["json"])) {
+                case "json":
+                    return reply.type("application/json").send({
+                        message: `Welcome to the index page of the server API :: ${locals.pkg?.["name"]}`,
+                    });
+                default:
+                    throw notAcceptable();
+            }
+        },
+    });
+    routes.set("API_INDEX_405", {
+        method: ["DELETE", "PATCH", "POST", "PUT"],
+        url: "/api/",
+        handler: async (_request, reply) => {
+            reply.header("allow", "GET, HEAD");
+            throw methodNotAllowed();
+        },
+    });
     return routes;
 }
 //# sourceMappingURL=defaultRoutes.js.map

package/dist/defaults/defaultRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaultRoutes.js","sourceRoot":"","sources":["../../src/defaults/defaultRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAG5D;;;;;;GAMG;AACH,MAAM,CAAC,OAAO,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE9C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;QAChB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,GAAG;QACR,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;YAChC,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM;oBACP,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;wBAC7C,SAAS,EAAE,OAAO;wBAClB,MAAM,EAAE,cAAc;qBACzB,CAAC,CAAA;gBACN;oBACI,MAAM,aAAa,EAAE,CAAA;YAC7B,CAAC;QACL,CAAC;KACJ,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE;QACpB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;QACrD,GAAG,EAAE,GAAG;QACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC/B,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAClC,MAAM,gBAAgB,EAAE,CAAA;QAC5B,CAAC;KACJ,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACjB,CAAC"}
+{"version":3,"file":"defaultRoutes.js","sourceRoot":"","sources":["../../src/defaults/defaultRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAG5D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE9C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;QAChB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,GAAG;QACR,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;YAChC,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM;oBACP,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;wBAC7C,SAAS,EAAE,OAAO;wBAClB,MAAM,EAAE,cAAc;qBACzB,CAAC,CAAA;gBACN;oBACI,MAAM,aAAa,EAAE,CAAA;YAC7B,CAAC;QACL,CAAC;KACJ,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE;QACpB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;QACrD,GAAG,EAAE,GAAG;QACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC/B,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAClC,MAAM,gBAAgB,EAAE,CAAA;QAC5B,CAAC;KACJ,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE;QACpB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,OAAO;QACZ,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;YAChC,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM;oBACP,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC;wBACvC,OAAO,EAAE,kDAAkD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;qBACpF,CAAC,CAAA;gBACN;oBACI,MAAM,aAAa,EAAE,CAAA;YAC7B,CAAC;QACL,CAAC;KACJ,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE;QACxB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;QAC1C,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC/B,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAClC,MAAM,gBAAgB,EAAE,CAAA;QAC5B,CAAC;KACJ,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACjB,CAAC"}

package/dist/hooks/authPreHandler.d.ts

@@ -0,0 +1,19 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+/**
+ * Factory that creates a Fastify `preHandler` hook enforcing bearer-token
+ * authentication on any route whose URL matches one of the given glob patterns.
+ *
+ * The returned hook is intended to be registered globally via
+ * `fastify.addHook("preHandler", createAuthPreHandler(authPaths))`.
+ * For every request, `request.routeOptions.url` is tested against the compiled
+ * picomatch matcher; non-matching routes pass through unconditionally.
+ *
+ * When a route is protected, token verification is delegated to the
+ * `verifyToken` decorator registered on the Fastify instance.
+ *
+ * @param authPaths - Array of picomatch glob patterns (e.g. `["/api/**"]`).
+ * @param realm - Protection-space label used in the `WWW-Authenticate` challenge
+ *   (RFC 6750). Typically the Keycloak realm name. Defaults to `"api"`.
+ */
+export declare function createAuthPreHandler(authPaths: string[], realm?: string): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+//# sourceMappingURL=authPreHandler.d.ts.map

package/dist/hooks/authPreHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authPreHandler.d.ts","sourceRoot":"","sources":["../../src/hooks/authPreHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAG3D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAChC,SAAS,EAAE,MAAM,EAAE,EACnB,KAAK,SAAQ,GACd,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAiBjE"}

package/dist/hooks/authPreHandler.js

@@ -0,0 +1,32 @@
+import { unauthorized } from "@hapi/boom";
+import picomatch from "picomatch";
+/**
+ * Factory that creates a Fastify `preHandler` hook enforcing bearer-token
+ * authentication on any route whose URL matches one of the given glob patterns.
+ *
+ * The returned hook is intended to be registered globally via
+ * `fastify.addHook("preHandler", createAuthPreHandler(authPaths))`.
+ * For every request, `request.routeOptions.url` is tested against the compiled
+ * picomatch matcher; non-matching routes pass through unconditionally.
+ *
+ * When a route is protected, token verification is delegated to the
+ * `verifyToken` decorator registered on the Fastify instance.
+ *
+ * @param authPaths - Array of picomatch glob patterns (e.g. `["/api/**"]`).
+ * @param realm - Protection-space label used in the `WWW-Authenticate` challenge
+ *   (RFC 6750). Typically the Keycloak realm name. Defaults to `"api"`.
+ */
+export function createAuthPreHandler(authPaths, realm = "api") {
+    const isProtected = picomatch(authPaths);
+    return async function authPreHandler(request, reply) {
+        if (!isProtected(request.routeOptions.url ?? "")) {
+            return;
+        }
+        const isAuthorized = await request.server.verifyToken(request.headers.authorization);
+        if (!isAuthorized) {
+            reply.header("www-authenticate", `Bearer realm="${realm}"`);
+            throw unauthorized("Missing or invalid bearer token");
+        }
+    };
+}
+//# sourceMappingURL=authPreHandler.js.map

package/dist/hooks/authPreHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authPreHandler.js","sourceRoot":"","sources":["../../src/hooks/authPreHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzC,OAAO,SAAS,MAAM,WAAW,CAAA;AAEjC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAChC,SAAmB,EACnB,KAAK,GAAG,KAAK;IAEb,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,KAAK,UAAU,cAAc,CAChC,OAAuB,EACvB,KAAmB;QAEnB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,OAAM;QACV,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CACjD,OAAO,CAAC,OAAO,CAAC,aAAa,CAChC,CAAA;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,iBAAiB,KAAK,GAAG,CAAC,CAAA;YAC3D,MAAM,YAAY,CAAC,iCAAiC,CAAC,CAAA;QACzD,CAAC;IACL,CAAC,CAAA;AACL,CAAC"}

package/dist/index.d.ts

@@ -7,9 +7,11 @@ import defaultErrorHandler from "./defaults/defaultErrorHandler.ts";
 import defaultFastifyOptions from "./defaults/defaultFastifyOptions.ts";
 import defaultPlugins from "./defaults/defaultPlugins.ts";
 import defaultRoutes from "./defaults/defaultRoutes.ts";
+import { createAuthPreHandler } from "./hooks/authPreHandler.ts";
 import onResponse from "./hooks/onResponse.ts";
 import preHandler from "./hooks/preHandler.ts";
 import launcher from "./launcher.ts";
-export type { FSTPlugin, LauncherLocals, LauncherOptions, } from "./types.ts";
-export { defaultErrorHandler, defaultFastifyOptions, defaultPlugins, defaultRoutes, launcher, onResponse, preHandler, };
+export { createKeycloakVerifier } from "./auth/keycloak.ts";
+export type { DefaultPluginsOptions, FSTPlugin, KeycloakAuthConfig, LauncherLocals, LauncherOptions, TokenVerifier, } from "./types.ts";
+export { createAuthPreHandler, defaultErrorHandler, defaultFastifyOptions, defaultPlugins, defaultRoutes, launcher, onResponse, preHandler, };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,mBAAmB,MAAM,mCAAmC,CAAA;AACnE,OAAO,qBAAqB,MAAM,qCAAqC,CAAA;AACvE,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,aAAa,MAAM,6BAA6B,CAAA;AACvD,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,QAAQ,MAAM,eAAe,CAAA;AAEpC,YAAY,EACR,SAAS,EACT,cAAc,EACd,eAAe,GAClB,MAAM,YAAY,CAAA;AACnB,OAAO,EACH,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,GACb,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,mBAAmB,MAAM,mCAAmC,CAAA;AACnE,OAAO,qBAAqB,MAAM,qCAAqC,CAAA;AACvE,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,aAAa,MAAM,6BAA6B,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,QAAQ,MAAM,eAAe,CAAA;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,YAAY,EACR,qBAAqB,EACrB,SAAS,EACT,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,GAChB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACH,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,GACb,CAAA"}

package/dist/index.js

@@ -7,8 +7,10 @@ import defaultErrorHandler from "./defaults/defaultErrorHandler.js";
 import defaultFastifyOptions from "./defaults/defaultFastifyOptions.js";
 import defaultPlugins from "./defaults/defaultPlugins.js";
 import defaultRoutes from "./defaults/defaultRoutes.js";
+import { createAuthPreHandler } from "./hooks/authPreHandler.js";
 import onResponse from "./hooks/onResponse.js";
 import preHandler from "./hooks/preHandler.js";
 import launcher from "./launcher.js";
-export { defaultErrorHandler, defaultFastifyOptions, defaultPlugins, defaultRoutes, launcher, onResponse, preHandler, };
+export { createKeycloakVerifier } from "./auth/keycloak.js";
+export { createAuthPreHandler, defaultErrorHandler, defaultFastifyOptions, defaultPlugins, defaultRoutes, launcher, onResponse, preHandler, };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,mBAAmB,MAAM,mCAAmC,CAAA;AACnE,OAAO,qBAAqB,MAAM,qCAAqC,CAAA;AACvE,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,aAAa,MAAM,6BAA6B,CAAA;AACvD,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,QAAQ,MAAM,eAAe,CAAA;AAOpC,OAAO,EACH,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,GACb,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,mBAAmB,MAAM,mCAAmC,CAAA;AACnE,OAAO,qBAAqB,MAAM,qCAAqC,CAAA;AACvE,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,aAAa,MAAM,6BAA6B,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAC9C,OAAO,QAAQ,MAAM,eAAe,CAAA;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAU3D,OAAO,EACH,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,GACb,CAAA"}

package/dist/launcher.d.ts

@@ -5,7 +5,7 @@ import type { LauncherOptions } from "./types.ts";
  *
  * Steps performed:
  * 1. Creates a `FastifyInstance` merging {@link defaultFastifyOptions} with `opts`.
- * 2. Decorates the instance with `locals` and any extra `decorators`.
+ * 2. Decorates the instance with `locals`, `verifyToken`, and any extra `decorators`.
  * 3. Registers all `plugins` and `routes`.
  * 4. Sets a `notFound` handler (throws Boom 404) and {@link defaultErrorHandler}.
  * 5. Registers {@link preHandler} and {@link onResponse} hooks.
@@ -13,5 +13,5 @@ import type { LauncherOptions } from "./types.ts";
  *
  * @returns The `FastifyInstance` (e.g. for use with `fastify.close()`).
  */
-export default function launcher({ logger, locals, plugins, routes, decorators, opts, done, }: LauncherOptions): FastifyInstance;
+export default function launcher({ logger, locals, plugins, routes, decorators, verifyToken, opts, done, }: LauncherOptions): FastifyInstance;
 //# sourceMappingURL=launcher.d.ts.map

package/dist/launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../src/launcher.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAA;AAIvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,EAC7B,MAAM,EACN,MAAM,EACN,OAAO,EACP,MAAM,EACN,UAAU,EACV,IAAI,EACJ,IAAI,GACP,EAAE,eAAe,GAAG,eAAe,CA4CnC"}
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../src/launcher.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAA;AAKvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,EAC7B,MAAM,EACN,MAAM,EACN,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,IAAI,EACJ,IAAI,GACP,EAAE,eAAe,GAAG,eAAe,CAoDnC"}

package/dist/launcher.js

@@ -3,13 +3,14 @@ import { notFound } from "@hapi/boom";
 import Fastify, {} from "fastify";
 import defaultErrorHandler from "./defaults/defaultErrorHandler.js";
 import defaultFastifyOptions from "./defaults/defaultFastifyOptions.js";
+import { createAuthPreHandler } from "./hooks/authPreHandler.js";
 import { onResponse, preHandler } from "./index.js";
 /**
  * Creates and starts a Fastify HTTP server with the given configuration.
  *
  * Steps performed:
  * 1. Creates a `FastifyInstance` merging {@link defaultFastifyOptions} with `opts`.
- * 2. Decorates the instance with `locals` and any extra `decorators`.
+ * 2. Decorates the instance with `locals`, `verifyToken`, and any extra `decorators`.
  * 3. Registers all `plugins` and `routes`.
  * 4. Sets a `notFound` handler (throws Boom 404) and {@link defaultErrorHandler}.
  * 5. Registers {@link preHandler} and {@link onResponse} hooks.
@@ -17,7 +18,7 @@ import { onResponse, preHandler } from "./index.js";
  *
  * @returns The `FastifyInstance` (e.g. for use with `fastify.close()`).
  */
-export default function launcher({ logger, locals, plugins, routes, decorators, opts, done, }) {
+export default function launcher({ logger, locals, plugins, routes, decorators, verifyToken, opts, done, }) {
     const host = locals?.host ?? "localhost";
     const port = locals?.port ?? 8888;
     const fastify = Fastify({
@@ -25,6 +26,7 @@ export default function launcher({ logger, locals, plugins, routes, decorators,
         ...opts,
     });
     fastify.decorate("locals", locals);
+    fastify.decorate("verifyToken", verifyToken ?? (async () => false));
     if (decorators instanceof Map) {
         for (const [key, value] of decorators) {
             fastify.decorate(key, value);
@@ -40,6 +42,9 @@ export default function launcher({ logger, locals, plugins, routes, decorators,
         throw notFound();
     });
     fastify.setErrorHandler(defaultErrorHandler);
+    if (locals.authPaths?.length) {
+        fastify.addHook("preHandler", createAuthPreHandler(locals.authPaths, locals.authRealm));
+    }
     // TODO: Add hook for `onRequestAbort`
     fastify.addHook("preHandler", preHandler);
     fastify.addHook("onResponse", onResponse);

package/dist/launcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../src/launcher.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAA;AACvD,OAAO,mBAAmB,MAAM,mCAAmC,CAAA;AACnE,OAAO,qBAAqB,MAAM,qCAAqC,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGnD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,EAC7B,MAAM,EACN,MAAM,EACN,OAAO,EACP,MAAM,EACN,UAAU,EACV,IAAI,EACJ,IAAI,GACU;IACd,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,CAAA;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC;QACpB,GAAG,qBAAqB,CAAC,MAAM,CAAC;QAChC,GAAG,IAAI;KACV,CAAC,CAAA;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAElC,IAAI,UAAU,YAAY,GAAG,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,QAAQ,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAA;IAE5C,sCAAsC;IACtC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IACzC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAEzC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;QACrC,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;QACD,IAAI,EAAE,EAAE,CAAA;IACZ,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAClB,CAAC"}
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../src/launcher.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAA;AACvD,OAAO,mBAAmB,MAAM,mCAAmC,CAAA;AACnE,OAAO,qBAAqB,MAAM,qCAAqC,CAAA;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGnD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,EAC7B,MAAM,EACN,MAAM,EACN,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,IAAI,EACJ,IAAI,GACU;IACd,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,CAAA;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC;QACpB,GAAG,qBAAqB,CAAC,MAAM,CAAC;QAChC,GAAG,IAAI;KACV,CAAC,CAAA;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAEnE,IAAI,UAAU,YAAY,GAAG,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,QAAQ,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAA;IAE5C,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,CACX,YAAY,EACZ,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAC3D,CAAA;IACL,CAAC;IAED,sCAAsC;IACtC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IACzC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAEzC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;QACrC,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;QACD,IAAI,EAAE,EAAE,CAAA;IACZ,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAClB,CAAC"}

package/dist/start.js

@@ -1,17 +1,46 @@
 import process, { env } from "node:process";
 import { getConsoleLogger, main } from "@darthcav/ts-utils";
 import pkg from "../package.json" with { type: "json" };
-import { defaultPlugins, defaultRoutes, launcher } from "./index.js";
+import { createKeycloakVerifier } from "./auth/keycloak.js";
+import { defaultPlugins, defaultRoutes, launcher, } from "./index.js";
 const logger = await getConsoleLogger(pkg.name, "info");
-main(pkg.name, logger, () => {
+main(pkg.name, logger, async () => {
+    const authPaths = env["API_AUTH_PATHS"]
+        ?.split(",")
+        .map((p) => p.trim())
+        .filter((p) => p.length > 0);
+    const keycloakUrl = env["KEYCLOAK_URL"]?.trim();
+    const keycloakRealm = env["KEYCLOAK_REALM"]?.trim();
+    const keycloakClientId = env["KEYCLOAK_CLIENT_ID"]?.trim();
+    const keycloakClientSecret = env["KEYCLOAK_CLIENT_SECRET"]?.trim();
+    const keycloakAuth = keycloakUrl && keycloakRealm && keycloakClientId && keycloakClientSecret
+        ? {
+            url: keycloakUrl,
+            realm: keycloakRealm,
+            clientId: keycloakClientId,
+            clientSecret: keycloakClientSecret,
+        }
+        : undefined;
     const locals = {
         pkg,
         host: env["HOST"] ?? "localhost",
-        port: Number(env["CONTAINER_EXPOSE_PORT"]) ?? 8888,
+        port: Number(env["CONTAINER_EXPOSE_PORT"]) || 8888,
+        ...(authPaths?.length ? { authPaths } : {}),
+        ...(keycloakRealm ? { authRealm: keycloakRealm } : {}),
     };
-    const plugins = defaultPlugins({ locals });
+    const plugins = keycloakAuth
+        ? defaultPlugins({ locals, keycloakAuth })
+        : defaultPlugins({ locals });
     const routes = defaultRoutes();
-    const fastify = launcher({ logger, locals, plugins, routes });
+    const fastify = keycloakAuth
+        ? launcher({
+            logger,
+            locals,
+            plugins,
+            routes,
+            verifyToken: createKeycloakVerifier(keycloakAuth),
+        })
+        : launcher({ logger, locals, plugins, routes });
     for (const signal of ["SIGINT", "SIGTERM"]) {
         process.on(signal, async (signal) => fastify
             .close()

package/dist/start.js.map

@@ -1 +1 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../src/start.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAEpE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAEvD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;IACxB,MAAM,MAAM,GAAG;QACX,GAAG;QACH,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW;QAChC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,IAAI;KACrD,CAAA;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;IAE9B,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7D,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QAClD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAChC,OAAO;aACF,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,KAAK,CACR,2DAA2D,MAAM,EAAE,CACtE,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC,CAAC,CACT,CAAA;IACL,CAAC;AACL,CAAC,CAAC,CAAA"}
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../src/start.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EACH,cAAc,EACd,aAAa,EAEb,QAAQ,GACX,MAAM,YAAY,CAAA;AAEnB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAEvD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACnC,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAEhC,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAA;IAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAA;IACnD,MAAM,gBAAgB,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC1D,MAAM,oBAAoB,GAAG,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAA;IAElE,MAAM,YAAY,GACd,WAAW,IAAI,aAAa,IAAI,gBAAgB,IAAI,oBAAoB;QACpE,CAAC,CAAC;YACI,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,gBAAgB;YAC1B,YAAY,EAAE,oBAAoB;SACrC;QACH,CAAC,CAAC,SAAS,CAAA;IAEnB,MAAM,MAAM,GAAG;QACX,GAAG;QACH,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW;QAChC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,IAAI;QAClD,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAA;IACD,MAAM,OAAO,GAAG,YAAY;QACxB,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC1C,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;IAE9B,MAAM,OAAO,GAAG,YAAY;QACxB,CAAC,CAAC,QAAQ,CAAC;YACL,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,WAAW,EAAE,sBAAsB,CAAC,YAAY,CAAC;SACpD,CAAC;QACJ,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IAEnD,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QAClD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAChC,OAAO;aACF,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,KAAK,CACR,2DAA2D,MAAM,EAAE,CACtE,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC,CAAC,CACT,CAAA;IACL,CAAC;AACL,CAAC,CAAC,CAAA"}