@eclosion-tech/syntropy-auth-express 0.1.0

package/dist/index.cjs

@@ -0,0 +1,68 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  requireSyntropyAuth: () => requireSyntropyAuth,
+  syntropyAuth: () => syntropyAuth
+});
+module.exports = __toCommonJS(index_exports);
+var import_syntropy_auth = require("@eclosion-tech/syntropy-auth");
+function syntropyAuth(config) {
+  const client = new import_syntropy_auth.SyntropyAuthClient({
+    baseUrl: config.baseUrl,
+    clientId: config.clientId,
+    clientSecret: config.clientSecret,
+    redirectUri: "http://localhost"
+    // unused for token validation
+  });
+  return async (req, _res, next) => {
+    const authHeader = req.headers.authorization;
+    if (!authHeader?.startsWith("Bearer ")) {
+      return next();
+    }
+    const token = authHeader.slice(7);
+    try {
+      const userInfo = await client.getUserInfo(token);
+      req.syntropyUser = userInfo;
+      req.syntropyAccessToken = token;
+    } catch {
+    }
+    next();
+  };
+}
+function requireSyntropyAuth(config) {
+  const authMiddleware = syntropyAuth(config);
+  return async (req, res, next) => {
+    await authMiddleware(req, res, () => {
+      if (!req.syntropyUser) {
+        res.status(401).json({ error: "Unauthorized" });
+        return;
+      }
+      next();
+    });
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  requireSyntropyAuth,
+  syntropyAuth
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { Request, Response, NextFunction } from \"express\";\nimport { SyntropyAuthClient } from \"@eclosion-tech/syntropy-auth\";\nimport type { SyntropyUserInfo } from \"@eclosion-tech/syntropy-auth\";\n\ndeclare global {\n  namespace Express {\n    interface Request {\n      syntropyUser?: SyntropyUserInfo;\n      syntropyAccessToken?: string;\n    }\n  }\n}\n\nexport interface SyntropyAuthExpressConfig {\n  /** Base URL of Syntropy Auth (e.g. https://auth.syntropy.chat) */\n  baseUrl: string;\n  /** OAuth client ID */\n  clientId: string;\n  /** OAuth client secret */\n  clientSecret?: string;\n}\n\n/**\n * Express middleware that validates Bearer tokens against Syntropy Auth.\n *\n * Reads the `Authorization: Bearer <token>` header, calls the userinfo\n * endpoint, and populates `req.syntropyUser` and `req.syntropyAccessToken`.\n *\n * Usage:\n * ```ts\n * import express from \"express\";\n * import { syntropyAuth } from \"@eclosion-tech/syntropy-auth-express\";\n *\n * const app = express();\n * app.use(syntropyAuth({\n *   baseUrl: \"https://auth.syntropy.chat\",\n *   clientId: \"my-api\",\n * }));\n *\n * app.get(\"/api/me\", (req, res) => {\n *   if (!req.syntropyUser) return res.status(401).json({ error: \"Unauthorized\" });\n *   res.json(req.syntropyUser);\n * });\n * ```\n */\nexport function syntropyAuth(config: SyntropyAuthExpressConfig) {\n  const client = new SyntropyAuthClient({\n    baseUrl: config.baseUrl,\n    clientId: config.clientId,\n    clientSecret: config.clientSecret,\n    redirectUri: \"http://localhost\", // unused for token validation\n  });\n\n  return async (req: Request, _res: Response, next: NextFunction) => {\n    const authHeader = req.headers.authorization;\n    if (!authHeader?.startsWith(\"Bearer \")) {\n      return next();\n    }\n\n    const token = authHeader.slice(7);\n\n    try {\n      const userInfo = await client.getUserInfo(token);\n      req.syntropyUser = userInfo;\n      req.syntropyAccessToken = token;\n    } catch {\n      // Invalid token — continue without user\n    }\n\n    next();\n  };\n}\n\n/**\n * Express middleware that requires a valid Syntropy Auth token.\n * Returns 401 if no valid token is present.\n */\nexport function requireSyntropyAuth(config: SyntropyAuthExpressConfig) {\n  const authMiddleware = syntropyAuth(config);\n\n  return async (req: Request, res: Response, next: NextFunction) => {\n    await authMiddleware(req, res, () => {\n      if (!req.syntropyUser) {\n        res.status(401).json({ error: \"Unauthorized\" });\n        return;\n      }\n      next();\n    });\n  };\n}\n\nexport type { SyntropyUserInfo };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,2BAAmC;AA4C5B,SAAS,aAAa,QAAmC;AAC9D,QAAM,SAAS,IAAI,wCAAmB;AAAA,IACpC,SAAS,OAAO;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,cAAc,OAAO;AAAA,IACrB,aAAa;AAAA;AAAA,EACf,CAAC;AAED,SAAO,OAAO,KAAc,MAAgB,SAAuB;AACjE,UAAM,aAAa,IAAI,QAAQ;AAC/B,QAAI,CAAC,YAAY,WAAW,SAAS,GAAG;AACtC,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,QAAQ,WAAW,MAAM,CAAC;AAEhC,QAAI;AACF,YAAM,WAAW,MAAM,OAAO,YAAY,KAAK;AAC/C,UAAI,eAAe;AACnB,UAAI,sBAAsB;AAAA,IAC5B,QAAQ;AAAA,IAER;AAEA,SAAK;AAAA,EACP;AACF;AAMO,SAAS,oBAAoB,QAAmC;AACrE,QAAM,iBAAiB,aAAa,MAAM;AAE1C,SAAO,OAAO,KAAc,KAAe,SAAuB;AAChE,UAAM,eAAe,KAAK,KAAK,MAAM;AACnC,UAAI,CAAC,IAAI,cAAc;AACrB,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAC9C;AAAA,MACF;AACA,WAAK;AAAA,IACP,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,51 @@
+import { Request, Response, NextFunction } from 'express';
+import { SyntropyUserInfo } from '@eclosion-tech/syntropy-auth';
+export { SyntropyUserInfo } from '@eclosion-tech/syntropy-auth';
+
+declare global {
+    namespace Express {
+        interface Request {
+            syntropyUser?: SyntropyUserInfo;
+            syntropyAccessToken?: string;
+        }
+    }
+}
+interface SyntropyAuthExpressConfig {
+    /** Base URL of Syntropy Auth (e.g. https://auth.syntropy.chat) */
+    baseUrl: string;
+    /** OAuth client ID */
+    clientId: string;
+    /** OAuth client secret */
+    clientSecret?: string;
+}
+/**
+ * Express middleware that validates Bearer tokens against Syntropy Auth.
+ *
+ * Reads the `Authorization: Bearer <token>` header, calls the userinfo
+ * endpoint, and populates `req.syntropyUser` and `req.syntropyAccessToken`.
+ *
+ * Usage:
+ * ```ts
+ * import express from "express";
+ * import { syntropyAuth } from "@eclosion-tech/syntropy-auth-express";
+ *
+ * const app = express();
+ * app.use(syntropyAuth({
+ *   baseUrl: "https://auth.syntropy.chat",
+ *   clientId: "my-api",
+ * }));
+ *
+ * app.get("/api/me", (req, res) => {
+ *   if (!req.syntropyUser) return res.status(401).json({ error: "Unauthorized" });
+ *   res.json(req.syntropyUser);
+ * });
+ * ```
+ */
+declare function syntropyAuth(config: SyntropyAuthExpressConfig): (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Express middleware that requires a valid Syntropy Auth token.
+ * Returns 401 if no valid token is present.
+ */
+declare function requireSyntropyAuth(config: SyntropyAuthExpressConfig): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+
+export { type SyntropyAuthExpressConfig, requireSyntropyAuth, syntropyAuth };

package/dist/index.d.ts

@@ -0,0 +1,51 @@
+import { Request, Response, NextFunction } from 'express';
+import { SyntropyUserInfo } from '@eclosion-tech/syntropy-auth';
+export { SyntropyUserInfo } from '@eclosion-tech/syntropy-auth';
+
+declare global {
+    namespace Express {
+        interface Request {
+            syntropyUser?: SyntropyUserInfo;
+            syntropyAccessToken?: string;
+        }
+    }
+}
+interface SyntropyAuthExpressConfig {
+    /** Base URL of Syntropy Auth (e.g. https://auth.syntropy.chat) */
+    baseUrl: string;
+    /** OAuth client ID */
+    clientId: string;
+    /** OAuth client secret */
+    clientSecret?: string;
+}
+/**
+ * Express middleware that validates Bearer tokens against Syntropy Auth.
+ *
+ * Reads the `Authorization: Bearer <token>` header, calls the userinfo
+ * endpoint, and populates `req.syntropyUser` and `req.syntropyAccessToken`.
+ *
+ * Usage:
+ * ```ts
+ * import express from "express";
+ * import { syntropyAuth } from "@eclosion-tech/syntropy-auth-express";
+ *
+ * const app = express();
+ * app.use(syntropyAuth({
+ *   baseUrl: "https://auth.syntropy.chat",
+ *   clientId: "my-api",
+ * }));
+ *
+ * app.get("/api/me", (req, res) => {
+ *   if (!req.syntropyUser) return res.status(401).json({ error: "Unauthorized" });
+ *   res.json(req.syntropyUser);
+ * });
+ * ```
+ */
+declare function syntropyAuth(config: SyntropyAuthExpressConfig): (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Express middleware that requires a valid Syntropy Auth token.
+ * Returns 401 if no valid token is present.
+ */
+declare function requireSyntropyAuth(config: SyntropyAuthExpressConfig): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+
+export { type SyntropyAuthExpressConfig, requireSyntropyAuth, syntropyAuth };

package/dist/index.js

@@ -0,0 +1,42 @@
+// src/index.ts
+import { SyntropyAuthClient } from "@eclosion-tech/syntropy-auth";
+function syntropyAuth(config) {
+  const client = new SyntropyAuthClient({
+    baseUrl: config.baseUrl,
+    clientId: config.clientId,
+    clientSecret: config.clientSecret,
+    redirectUri: "http://localhost"
+    // unused for token validation
+  });
+  return async (req, _res, next) => {
+    const authHeader = req.headers.authorization;
+    if (!authHeader?.startsWith("Bearer ")) {
+      return next();
+    }
+    const token = authHeader.slice(7);
+    try {
+      const userInfo = await client.getUserInfo(token);
+      req.syntropyUser = userInfo;
+      req.syntropyAccessToken = token;
+    } catch {
+    }
+    next();
+  };
+}
+function requireSyntropyAuth(config) {
+  const authMiddleware = syntropyAuth(config);
+  return async (req, res, next) => {
+    await authMiddleware(req, res, () => {
+      if (!req.syntropyUser) {
+        res.status(401).json({ error: "Unauthorized" });
+        return;
+      }
+      next();
+    });
+  };
+}
+export {
+  requireSyntropyAuth,
+  syntropyAuth
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { Request, Response, NextFunction } from \"express\";\nimport { SyntropyAuthClient } from \"@eclosion-tech/syntropy-auth\";\nimport type { SyntropyUserInfo } from \"@eclosion-tech/syntropy-auth\";\n\ndeclare global {\n  namespace Express {\n    interface Request {\n      syntropyUser?: SyntropyUserInfo;\n      syntropyAccessToken?: string;\n    }\n  }\n}\n\nexport interface SyntropyAuthExpressConfig {\n  /** Base URL of Syntropy Auth (e.g. https://auth.syntropy.chat) */\n  baseUrl: string;\n  /** OAuth client ID */\n  clientId: string;\n  /** OAuth client secret */\n  clientSecret?: string;\n}\n\n/**\n * Express middleware that validates Bearer tokens against Syntropy Auth.\n *\n * Reads the `Authorization: Bearer <token>` header, calls the userinfo\n * endpoint, and populates `req.syntropyUser` and `req.syntropyAccessToken`.\n *\n * Usage:\n * ```ts\n * import express from \"express\";\n * import { syntropyAuth } from \"@eclosion-tech/syntropy-auth-express\";\n *\n * const app = express();\n * app.use(syntropyAuth({\n *   baseUrl: \"https://auth.syntropy.chat\",\n *   clientId: \"my-api\",\n * }));\n *\n * app.get(\"/api/me\", (req, res) => {\n *   if (!req.syntropyUser) return res.status(401).json({ error: \"Unauthorized\" });\n *   res.json(req.syntropyUser);\n * });\n * ```\n */\nexport function syntropyAuth(config: SyntropyAuthExpressConfig) {\n  const client = new SyntropyAuthClient({\n    baseUrl: config.baseUrl,\n    clientId: config.clientId,\n    clientSecret: config.clientSecret,\n    redirectUri: \"http://localhost\", // unused for token validation\n  });\n\n  return async (req: Request, _res: Response, next: NextFunction) => {\n    const authHeader = req.headers.authorization;\n    if (!authHeader?.startsWith(\"Bearer \")) {\n      return next();\n    }\n\n    const token = authHeader.slice(7);\n\n    try {\n      const userInfo = await client.getUserInfo(token);\n      req.syntropyUser = userInfo;\n      req.syntropyAccessToken = token;\n    } catch {\n      // Invalid token — continue without user\n    }\n\n    next();\n  };\n}\n\n/**\n * Express middleware that requires a valid Syntropy Auth token.\n * Returns 401 if no valid token is present.\n */\nexport function requireSyntropyAuth(config: SyntropyAuthExpressConfig) {\n  const authMiddleware = syntropyAuth(config);\n\n  return async (req: Request, res: Response, next: NextFunction) => {\n    await authMiddleware(req, res, () => {\n      if (!req.syntropyUser) {\n        res.status(401).json({ error: \"Unauthorized\" });\n        return;\n      }\n      next();\n    });\n  };\n}\n\nexport type { SyntropyUserInfo };\n"],"mappings":";AACA,SAAS,0BAA0B;AA4C5B,SAAS,aAAa,QAAmC;AAC9D,QAAM,SAAS,IAAI,mBAAmB;AAAA,IACpC,SAAS,OAAO;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,cAAc,OAAO;AAAA,IACrB,aAAa;AAAA;AAAA,EACf,CAAC;AAED,SAAO,OAAO,KAAc,MAAgB,SAAuB;AACjE,UAAM,aAAa,IAAI,QAAQ;AAC/B,QAAI,CAAC,YAAY,WAAW,SAAS,GAAG;AACtC,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,QAAQ,WAAW,MAAM,CAAC;AAEhC,QAAI;AACF,YAAM,WAAW,MAAM,OAAO,YAAY,KAAK;AAC/C,UAAI,eAAe;AACnB,UAAI,sBAAsB;AAAA,IAC5B,QAAQ;AAAA,IAER;AAEA,SAAK;AAAA,EACP;AACF;AAMO,SAAS,oBAAoB,QAAmC;AACrE,QAAM,iBAAiB,aAAa,MAAM;AAE1C,SAAO,OAAO,KAAc,KAAe,SAAuB;AAChE,UAAM,eAAe,KAAK,KAAK,MAAM;AACnC,UAAI,CAAC,IAAI,cAAc;AACrB,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAC9C;AAAA,MACF;AACA,WAAK;AAAA,IACP,CAAC;AAAA,EACH;AACF;","names":[]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@eclosion-tech/syntropy-auth-express",
+  "version": "0.1.0",
+  "description": "Syntropy Auth Express middleware — session validation and user population",
+  "author": "Eclosion Tech",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/EclosionTech/Syntropy.git",
+    "directory": "packages/auth-express"
+  },
+  "homepage": "https://syntropy.chat",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@eclosion-tech/syntropy-auth": "0.1.0"
+  },
+  "peerDependencies": {
+    "express": ">=4"
+  },
+  "devDependencies": {
+    "@types/express": "^5",
+    "@types/node": "^20",
+    "express": "^5.0.0",
+    "tsup": "^8.3.5",
+    "typescript": "^5",
+    "vitest": "^3.0.4"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "syntropy",
+    "auth",
+    "express",
+    "middleware",
+    "oauth"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run --passWithNoTests",
+    "lint": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf dist node_modules"
+  }
+}