@furystack/rest-service 12.3.4 → 13.0.0

package/src/api-manager.ts

@@ -11,10 +11,7 @@ import { ErrorAction } from './actions/error-action.js'
 import { NotFoundAction } from './actions/not-found-action.js'
 import { addCorsHeaders } from './add-cors-header.js'
 import { CreateGetSchemaAction } from './endpoint-generators/create-get-schema-action.js'
-import {
-  CreateGetOpenApiDocumentAction,
-  CreateDeprecatedSwaggerRedirect,
-} from './endpoint-generators/create-get-openapi-document-action.js'
+import { CreateGetOpenApiDocumentAction } from './endpoint-generators/create-get-openapi-document-action.js'
 import { HttpUserContext } from './http-user-context.js'
 import type { CorsOptions } from './models/cors-options.js'
 import { readPostBody } from './read-post-body.js'
@@ -147,7 +144,6 @@ export class ApiManager {
             ...api.GET,
             '/schema': CreateGetSchemaAction(api, name, description, version),
             '/openapi.json': CreateGetOpenApiDocumentAction(api, name, description, version),
-            '/swagger.json': CreateDeprecatedSwaggerRedirect(api, name, description, version),
           },
         }
       : api

package/src/endpoint-generators/create-get-openapi-document-action.ts

@@ -58,39 +58,3 @@ export const CreateGetOpenApiDocumentAction = <T extends RestApiImplementation<R
     return JsonResult(cachedDoc, 200)
   }
 }
-
-/**
- * Generates a backward-compatible `/swagger.json` endpoint that serves the same OpenAPI document
- * as `CreateGetOpenApiDocumentAction` but includes `Deprecation` and `Link` headers
- * directing clients to use `/openapi.json` instead.
- *
- * @deprecated Use CreateGetOpenApiDocumentAction and `/openapi.json` instead.
- */
-export const CreateDeprecatedSwaggerRedirect = <T extends RestApiImplementation<RestApi>>(
-  api: T,
-  name = 'FuryStack API',
-  description = 'API documentation generated from FuryStack API schema',
-  version = '1.0.0',
-): RequestAction<{ result: OpenApiDocument }> => {
-  const { endpoints } = getSchemaFromApi({ api, name, description, version })
-  let cachedDoc: OpenApiDocument | undefined
-  return async ({ injector }) => {
-    if (!cachedDoc) {
-      const securitySchemes = getSecuritySchemesFromInjector(injector)
-      cachedDoc = buildOpenApiDoc(
-        endpoints,
-        name,
-        description,
-        version,
-        securitySchemes ? { securitySchemes } : undefined,
-      )
-    }
-    return JsonResult(cachedDoc, 200, {
-      Deprecation: 'true',
-      Link: '</openapi.json>; rel="successor-version"',
-    })
-  }
-}
-
-/** @deprecated Use CreateGetOpenApiDocumentAction instead */
-export const CreateGetSwaggerJsonAction = CreateGetOpenApiDocumentAction

package/src/endpoint-generators/with-schema-and-openapi-action.ts

@@ -9,6 +9,3 @@ export type WithSchemaAndOpenApiAction<T extends RestApi> = T & {
     '/openapi.json': { result: OpenApiDocument; headers: { accept: 'application/json' } }
   }
 }
-
-/** @deprecated Use WithSchemaAndOpenApiAction instead */
-export type WithSchemaAndSwaggerAction<T extends RestApi> = WithSchemaAndOpenApiAction<T>

package/src/openapi/generate-openapi-document.ts

@@ -193,6 +193,3 @@ export const generateOpenApiDocument = ({
 
   return doc
 }
-
-/** @deprecated Use generateOpenApiDocument instead */
-export const generateSwaggerJsonFromApiSchema = generateOpenApiDocument

package/src/rest-service.integration.spec.ts

@@ -6,9 +6,10 @@ import type { RestApi } from '@furystack/rest'
 import { serializeValue } from '@furystack/rest'
 import { PathHelper, usingAsync } from '@furystack/utils'
 import { describe, expect, it, vi } from 'vitest'
-import { GetCurrentUser, IsAuthenticated, LoginAction, LogoutAction } from './actions/index.js'
+import { GetCurrentUser, IsAuthenticated, LogoutAction, createPasswordLoginAction } from './actions/index.js'
 import './helpers.js'
 import { useHttpAuthentication, useRestService } from './helpers.js'
+import { createCookieLoginStrategy } from './login-response-strategy.js'
 import { DefaultSession } from './models/default-session.js'
 import { ServerManager } from './server-manager.js'
 import { JsonResult } from './request-action-implementation.js'
@@ -56,7 +57,7 @@ const createIntegrationApi = async () => {
         '/testUrlParams/:urlParam': async (options) => JsonResult({ urlParamValue: options.getUrlParams().urlParam }),
       },
       POST: {
-        '/login': LoginAction,
+        '/login': createPasswordLoginAction(createCookieLoginStrategy(i)),
         '/logout': LogoutAction,
         '/testPostBody': async (options) => {
           const body = await options.getBody()

package/src/validate.integration.spec.ts

@@ -179,51 +179,6 @@ describe('Validation integration tests', () => {
     })
   })
 
-  describe('swagger.json backward compatibility', () => {
-    it('Should serve the same OpenAPI document at /swagger.json when enabled', async () => {
-      await usingAsync(await createValidateApi({ enableGetSchema: true }), async ({ client }) => {
-        const result = await (client as ReturnType<typeof createClient<any>>)({
-          method: 'GET',
-          action: '/swagger.json',
-        })
-
-        expect(result.response.status).toBe(200)
-        expect(result.result).toBeDefined()
-
-        const openApiDoc = result.result as OpenApiDocument
-        expect(openApiDoc.openapi).toBe('3.1.0')
-        expect(openApiDoc.info?.title).toBe(name)
-      })
-    })
-
-    it('Should include Deprecation header on /swagger.json', async () => {
-      await usingAsync(await createValidateApi({ enableGetSchema: true }), async ({ client }) => {
-        const result = await (client as ReturnType<typeof createClient<any>>)({
-          method: 'GET',
-          action: '/swagger.json',
-        })
-
-        expect(result.response.headers.get('deprecation')).toBe('true')
-        expect(result.response.headers.get('link')).toContain('/openapi.json')
-      })
-    })
-
-    it('Should return a 404 for /swagger.json when not enabled', async () => {
-      await usingAsync(await createValidateApi({ enableGetSchema: false }), async ({ client }) => {
-        try {
-          await (client as ReturnType<typeof createClient<any>>)({
-            method: 'GET',
-            action: '/swagger.json',
-          })
-          expect.fail('Expected response error but got success')
-        } catch (error) {
-          expect(error).toBeInstanceOf(ResponseError)
-          expect((error as ResponseError).response.status).toBe(404)
-        }
-      })
-    })
-  })
-
   describe('Validation metadata', () => {
     it('Should return 404 when not enabled', async () => {
       expect.assertions(2)
@@ -577,22 +532,5 @@ describe('Validation integration tests', () => {
         })
       })
     })
-
-    it('Should include detected security schemes in the deprecated /swagger.json endpoint', async () => {
-      await usingAsync(await createApiWithAuth(), async ({ client }) => {
-        const result = await (client as ReturnType<typeof createClient<any>>)({
-          method: 'GET',
-          action: '/swagger.json',
-        })
-
-        const openApiDoc = result.result as OpenApiDocument
-        expect(openApiDoc.components?.securitySchemes?.basicAuth).toEqual({ type: 'http', scheme: 'basic' })
-        expect(openApiDoc.components?.securitySchemes?.cookieAuth).toEqual({
-          type: 'apiKey',
-          in: 'cookie',
-          name: 'session',
-        })
-      })
-    })
   })
 })

package/esm/actions/login-action.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=login-action.spec.d.ts.map

package/esm/actions/login-action.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-action.spec.d.ts","sourceRoot":"","sources":["../../src/actions/login-action.spec.ts"],"names":[],"mappings":""}

package/esm/actions/login-action.spec.js

@@ -1,34 +0,0 @@
-import { Injector } from '@furystack/inject';
-import { usingAsync } from '@furystack/utils';
-import { describe, expect, it, vi } from 'vitest';
-import { HttpUserContext } from '../http-user-context.js';
-import { LoginAction } from './login.js';
-describe('LoginAction', () => {
-    const request = { url: 'https://google.com' };
-    const response = {};
-    it('Returns the provided user with 200 on success', async () => {
-        const testUser = { Name: 'Userke' };
-        await usingAsync(new Injector(), async (i) => {
-            i.setExplicitInstance({
-                authenticateUser: vi.fn(async () => testUser),
-                cookieLogin: vi.fn(async () => testUser),
-                authentication: {},
-            }, HttpUserContext);
-            const result = await LoginAction({
-                request,
-                response,
-                injector: i,
-                getBody: async () => ({ username: 'testuser', password: 'alma' }),
-            });
-            expect(result.chunk).toEqual(testUser);
-            expect(result.statusCode).toBe(200);
-        });
-    });
-    it('Returns throw error with 400 on fail', async () => {
-        await usingAsync(new Injector(), async (i) => {
-            i.setExplicitInstance({ cookieLogin: async () => Promise.reject(new Error(':(')) }, HttpUserContext);
-            await expect(LoginAction({ request, response, injector: i, getBody: async () => ({ username: '', password: '' }) })).rejects.toThrowError('Login Failed');
-        });
-    });
-});
-//# sourceMappingURL=login-action.spec.js.map

package/esm/actions/login-action.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-action.spec.js","sourceRoot":"","sources":["../../src/actions/login-action.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAqB,CAAA;IAChE,MAAM,QAAQ,GAAG,EAAoB,CAAA;IAErC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QACnC,MAAM,UAAU,CAAC,IAAI,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC3C,CAAC,CAAC,mBAAmB,CACnB;gBACE,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC;gBAC7C,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC;gBACxC,cAAc,EAAE,EAAE;aACnB,EACD,eAAe,CAChB,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;gBAC/B,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;aAClE,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,UAAU,CAAC,IAAI,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC3C,CAAC,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YACpG,MAAM,MAAM,CACV,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CACvG,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/esm/actions/login.d.ts

@@ -1,19 +0,0 @@
-import type { User } from '@furystack/core';
-import type { RequestAction } from '../request-action-implementation.js';
-/**
- * Action that logs in the current user.
- * Should be called with a JSON POST body with `username` and `password` fields.
- * Returns the current user instance.
- *
- * @deprecated Use `createPasswordLoginAction(createCookieLoginStrategy(injector))` instead.
- * This static action resolves services from the request-scoped injector on
- * every call; the factory approach captures them once at setup time.
- */
-export declare const LoginAction: RequestAction<{
-    result: User;
-    body: {
-        username: string;
-        password: string;
-    };
-}>;
-//# sourceMappingURL=login.d.ts.map

package/esm/actions/login.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/actions/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAK3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AAGxE;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC;IACtC,MAAM,EAAE,IAAI,CAAA;IACZ,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7C,CAWA,CAAA"}

package/esm/actions/login.js

@@ -1,27 +0,0 @@
-import { RequestError } from '@furystack/rest';
-import { sleepAsync } from '@furystack/utils';
-import { HttpUserContext } from '../http-user-context.js';
-import { JsonResult } from '../request-action-implementation.js';
-/**
- * Action that logs in the current user.
- * Should be called with a JSON POST body with `username` and `password` fields.
- * Returns the current user instance.
- *
- * @deprecated Use `createPasswordLoginAction(createCookieLoginStrategy(injector))` instead.
- * This static action resolves services from the request-scoped injector on
- * every call; the factory approach captures them once at setup time.
- */
-export const LoginAction = async ({ injector, getBody, response }) => {
-    const userContext = injector.getInstance(HttpUserContext);
-    const body = await getBody();
-    try {
-        const user = await userContext.authenticateUser(body.username, body.password);
-        await userContext.cookieLogin(user, response);
-        return JsonResult(user, 200);
-    }
-    catch {
-        await sleepAsync(Math.random() * 1000);
-        throw new RequestError('Login Failed', 400);
-    }
-};
-//# sourceMappingURL=login.js.map

package/esm/actions/login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/actions/login.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAA;AAEhE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAGnB,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7E,MAAM,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC7C,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAA;QACtC,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC,CAAA"}

package/esm/swagger/generate-swagger-json.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=generate-swagger-json.spec.d.ts.map

package/esm/swagger/generate-swagger-json.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-swagger-json.spec.d.ts","sourceRoot":"","sources":["../../src/swagger/generate-swagger-json.spec.ts"],"names":[],"mappings":""}

package/esm/swagger/generate-swagger-json.spec.js

@@ -1,215 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { generateSwaggerJsonFromApiSchema } from '../openapi/generate-openapi-document.js';
-describe('generateSwaggerJsonFromApiSchema', () => {
-    it('Should generate a basic Swagger document with correct OpenAPI structure', () => {
-        const api = {
-            GET: {
-                '/api/test': {
-                    path: '/api/test',
-                    isAuthenticated: false,
-                    schemaName: 'Test',
-                    schema: { type: 'object', properties: { id: { type: 'string' } } },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check basic structure
-        expect(result.openapi).toBe('3.1.0');
-        expect(result.info.title).toBe('FuryStack API');
-        expect(result.info.version).toBe('1.0.0');
-        // Check security scheme is defined correctly for cookie-based auth
-        expect(result.components?.securitySchemes?.cookieAuth).toEqual({
-            type: 'apiKey',
-            in: 'cookie',
-            name: 'session',
-        });
-    });
-    it('Should convert API endpoints to OpenAPI paths correctly', () => {
-        const api = {
-            GET: {
-                '/api/users': {
-                    path: '/api/users',
-                    isAuthenticated: true,
-                    schemaName: 'UserCollection',
-                    schema: { type: 'array', items: { type: 'object' } },
-                },
-                '/api/users/:id': {
-                    path: '/api/users/:id',
-                    isAuthenticated: true,
-                    schemaName: 'User',
-                    schema: { type: 'object', properties: { id: { type: 'string' } } },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check paths
-        expect(result.paths?.['/api/users']).toBeDefined();
-        expect(result.paths?.['/api/users/{id}']).toBeDefined();
-        // Check methods
-        expect(result.paths?.['/api/users']?.get).toBeDefined();
-        expect(result.paths?.['/api/users/{id}']?.get).toBeDefined();
-        // Check security - should use cookieAuth for authenticated endpoints
-        expect(result.paths?.['/api/users']?.get?.security).toEqual([{ cookieAuth: [] }]);
-        expect(result.paths?.['/api/users/{id}']?.get?.security).toEqual([{ cookieAuth: [] }]);
-    });
-    it('Should extract path parameters correctly', () => {
-        const api = {
-            GET: {
-                '/api/users/:userId/posts/:postId': {
-                    path: '/api/users/:userId/posts/:postId',
-                    isAuthenticated: false,
-                    schemaName: 'Post',
-                    schema: { type: 'object' },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check path parameters
-        const parameters = result.paths?.['/api/users/{userId}/posts/{postId}']?.get?.parameters;
-        expect(parameters).toHaveLength(2);
-        expect(parameters?.[0].name).toBe('userId');
-        expect(parameters?.[0].in).toBe('path');
-        expect(parameters?.[0].required).toBe(true);
-        expect(parameters?.[1].name).toBe('postId');
-        expect(parameters?.[1].in).toBe('path');
-        expect(parameters?.[1].required).toBe(true);
-    });
-    it('Should handle different HTTP methods correctly', () => {
-        const api = {
-            GET: {
-                '/api/resource': {
-                    path: '/api/resource',
-                    isAuthenticated: false,
-                    schemaName: 'Resource',
-                    schema: { type: 'object' },
-                },
-            },
-            POST: {
-                '/api/resource': {
-                    path: '/api/resource',
-                    isAuthenticated: true,
-                    schemaName: 'ResourceInput',
-                    schema: { type: 'object' },
-                },
-            },
-            PUT: {
-                '/api/resource/:id': {
-                    path: '/api/resource/:id',
-                    isAuthenticated: true,
-                    schemaName: 'ResourceUpdate',
-                    schema: { type: 'object' },
-                },
-            },
-            DELETE: {
-                '/api/resource/:id': {
-                    path: '/api/resource/:id',
-                    isAuthenticated: true,
-                    schemaName: 'ResourceDelete',
-                    schema: { type: 'object' },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check multiple methods on same path
-        expect(result.paths?.['/api/resource'].get).toBeDefined();
-        expect(result.paths?.['/api/resource'].post).toBeDefined();
-        expect(result.paths?.['/api/resource/{id}'].put).toBeDefined();
-        expect(result.paths?.['/api/resource/{id}'].delete).toBeDefined();
-        // Verify security is applied correctly based on isAuthenticated
-        expect(result.paths?.['/api/resource'].get?.security).toEqual([]);
-        expect(result.paths?.['/api/resource'].post?.security).toEqual([{ cookieAuth: [] }]);
-    });
-    it('Should include schemas in components', () => {
-        const testSchema = {
-            type: 'object',
-            properties: {
-                id: { type: 'string' },
-                name: { type: 'string' },
-                age: { type: 'number' },
-            },
-        };
-        const api = {
-            GET: {
-                '/api/test': {
-                    path: '/api/test',
-                    isAuthenticated: false,
-                    schemaName: 'TestModel',
-                    schema: testSchema,
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check schema is included in components
-        expect(result.components?.schemas?.TestModel).toEqual(testSchema);
-    });
-    it('Should handle responses with correct status codes and content types', () => {
-        const api = {
-            GET: {
-                '/api/test': {
-                    path: '/api/test',
-                    isAuthenticated: false,
-                    schemaName: 'Test',
-                    schema: { type: 'object' },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check response structure
-        const responses = result.paths?.['/api/test'].get?.responses;
-        const response200 = responses?.['200'];
-        expect(response200).toBeDefined();
-        expect(response200.description).toBe('Successful operation');
-        expect((response200.content?.['application/json']?.schema).$ref).toBe('#/components/schemas/Test');
-        expect(responses?.['401']).toBeDefined();
-        expect(responses?.['500']).toBeDefined();
-        expect(responses?.['401'].description).toBe('Unauthorized');
-        expect(responses?.['500'].description).toBe('Internal server error');
-    });
-    it('Should use empty path object if it does not exist - for code coverage', () => {
-        const api = {
-            GET: {
-                '/api/test': {
-                    path: '/api/test',
-                    isAuthenticated: false,
-                    schemaName: 'Test',
-                    schema: { type: 'object' },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // This test is mainly for coverage, checking that the path initialization logic works
-        expect(result.paths?.['/api/test']).toBeDefined();
-    });
-    it('Should handle endpoints without schemas', () => {
-        const api = {
-            GET: {
-                '/api/no-schema': {
-                    path: '/api/no-schema',
-                    isAuthenticated: false,
-                    schemaName: 'EmptySchema',
-                    schema: null,
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Should still create the path without errors
-        expect(result.paths?.['/api/no-schema']).toBeDefined();
-        expect(result.paths?.['/api/no-schema'].get).toBeDefined();
-    });
-    it('Should use operationId based on method and path', () => {
-        const api = {
-            GET: {
-                '/api/users/:id/profile': {
-                    path: '/api/users/:id/profile',
-                    isAuthenticated: false,
-                    schemaName: 'UserProfile',
-                    schema: { type: 'object' },
-                },
-            },
-        };
-        const result = generateSwaggerJsonFromApiSchema({ api });
-        // Check operationId format
-        expect(result.paths?.['/api/users/{id}/profile'].get?.operationId).toBe('get_api_users_id_profile');
-    });
-});
-//# sourceMappingURL=generate-swagger-json.spec.js.map

package/esm/swagger/generate-swagger-json.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-swagger-json.spec.js","sourceRoot":"","sources":["../../src/swagger/generate-swagger-json.spec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAA;AAE1F,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,WAAW,EAAE;oBACX,IAAI,EAAE,WAAW;oBACjB,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACnE;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,wBAAwB;QACxB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEzC,mEAAmE;QACnE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC;YAC7D,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,SAAS;SAChB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,YAAY,EAAE;oBACZ,IAAI,EAAE,YAAY;oBAClB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,gBAAgB;oBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACrD;gBACD,gBAAgB,EAAE;oBAChB,IAAI,EAAE,gBAAgB;oBACtB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACnE;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,cAAc;QACd,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAEvD,gBAAgB;QAChB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAE5D,qEAAqE;QACrE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,kCAAkC,EAAE;oBAClC,IAAI,EAAE,kCAAkC;oBACxC,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,wBAAwB;QACxB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,oCAAoC,CAAC,EAAE,GAAG,EAAE,UAA+B,CAAA;QAC7G,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,eAAe,EAAE;oBACf,IAAI,EAAE,eAAe;oBACrB,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,UAAU;oBACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;YACD,IAAI,EAAE;gBACJ,eAAe,EAAE;oBACf,IAAI,EAAE,eAAe;oBACrB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,eAAe;oBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;YACD,GAAG,EAAE;gBACH,mBAAmB,EAAE;oBACnB,IAAI,EAAE,mBAAmB;oBACzB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,gBAAgB;oBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;YACD,MAAM,EAAE;gBACN,mBAAmB,EAAE;oBACnB,IAAI,EAAE,mBAAmB;oBACzB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,gBAAgB;oBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,sCAAsC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;QAEjE,gEAAgE;QAChE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACjE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACxB;SACF,CAAA;QAED,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,WAAW,EAAE;oBACX,IAAI,EAAE,WAAW;oBACjB,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,WAAW;oBACvB,MAAM,EAAE,UAAU;iBACnB;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,yCAAyC;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,WAAW,EAAE;oBACX,IAAI,EAAE,WAAW;oBACjB,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,2BAA2B;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,SAA2C,CAAA;QAE9F,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QACjC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAC5D,MAAM,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAA0B,CAAA,CAAC,IAAI,CAAC,CAAC,IAAI,CACtF,2BAA2B,CAC5B,CAAA;QACD,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACxC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACxC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC3D,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,WAAW,EAAE;oBACX,IAAI,EAAE,WAAW;oBACjB,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,sFAAsF;QACtF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,gBAAgB,EAAE;oBAChB,IAAI,EAAE,gBAAgB;oBACtB,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,aAAa;oBACzB,MAAM,EAAE,IAAe;iBACxB;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,8CAA8C;QAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACtD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAmC;YAC1C,GAAG,EAAE;gBACH,wBAAwB,EAAE;oBACxB,IAAI,EAAE,wBAAwB;oBAC9B,eAAe,EAAE,KAAK;oBACtB,UAAU,EAAE,aAAa;oBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC3B;aACF;SACF,CAAA;QAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAExD,2BAA2B;QAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACrG,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/src/actions/login-action.spec.ts

@@ -1,42 +0,0 @@
-import { Injector } from '@furystack/inject'
-import { usingAsync } from '@furystack/utils'
-import type { IncomingMessage, ServerResponse } from 'http'
-import { describe, expect, it, vi } from 'vitest'
-import { HttpUserContext } from '../http-user-context.js'
-import { LoginAction } from './login.js'
-
-describe('LoginAction', () => {
-  const request = { url: 'https://google.com' } as IncomingMessage
-  const response = {} as ServerResponse
-
-  it('Returns the provided user with 200 on success', async () => {
-    const testUser = { Name: 'Userke' }
-    await usingAsync(new Injector(), async (i) => {
-      i.setExplicitInstance(
-        {
-          authenticateUser: vi.fn(async () => testUser),
-          cookieLogin: vi.fn(async () => testUser),
-          authentication: {},
-        },
-        HttpUserContext,
-      )
-      const result = await LoginAction({
-        request,
-        response,
-        injector: i,
-        getBody: async () => ({ username: 'testuser', password: 'alma' }),
-      })
-      expect(result.chunk).toEqual(testUser)
-      expect(result.statusCode).toBe(200)
-    })
-  })
-
-  it('Returns throw error with 400 on fail', async () => {
-    await usingAsync(new Injector(), async (i) => {
-      i.setExplicitInstance({ cookieLogin: async () => Promise.reject(new Error(':(')) }, HttpUserContext)
-      await expect(
-        LoginAction({ request, response, injector: i, getBody: async () => ({ username: '', password: '' }) }),
-      ).rejects.toThrowError('Login Failed')
-    })
-  })
-})

package/src/actions/login.ts

@@ -1,32 +0,0 @@
-import type { User } from '@furystack/core'
-import { RequestError } from '@furystack/rest'
-import { sleepAsync } from '@furystack/utils'
-
-import { HttpUserContext } from '../http-user-context.js'
-import type { RequestAction } from '../request-action-implementation.js'
-import { JsonResult } from '../request-action-implementation.js'
-
-/**
- * Action that logs in the current user.
- * Should be called with a JSON POST body with `username` and `password` fields.
- * Returns the current user instance.
- *
- * @deprecated Use `createPasswordLoginAction(createCookieLoginStrategy(injector))` instead.
- * This static action resolves services from the request-scoped injector on
- * every call; the factory approach captures them once at setup time.
- */
-export const LoginAction: RequestAction<{
-  result: User
-  body: { username: string; password: string }
-}> = async ({ injector, getBody, response }) => {
-  const userContext = injector.getInstance(HttpUserContext)
-  const body = await getBody()
-  try {
-    const user = await userContext.authenticateUser(body.username, body.password)
-    await userContext.cookieLogin(user, response)
-    return JsonResult(user, 200)
-  } catch {
-    await sleepAsync(Math.random() * 1000)
-    throw new RequestError('Login Failed', 400)
-  }
-}