@futdevpro/nts-dynamo 1.15.49 → 1.15.52

package/.dynamo/pipeline.cicd.config.json

@@ -39,7 +39,10 @@
       "fatal": true,
       "discord": {
         "emoji": "🔐",
-        "name": "Pre-flight Check"
+        "name": "Pre-flight Check",
+        "group": "preflight",
+        "groupName": "Pre-flight Check",
+        "groupEmoji": "🔐"
       },
       "settings": {
         "requiredEnvVars": [
@@ -61,7 +64,8 @@
       "fatal": false,
       "discord": {
         "emoji": "🔍",
-        "name": "Dev Leftovers Check"
+        "name": "Dev Leftovers Check",
+        "group": "preflight"
       },
       "settings": {
         "checks": [
@@ -87,7 +91,10 @@
       "fatal": true,
       "discord": {
         "emoji": "🏗️",
-        "name": "Build"
+        "name": "Build",
+        "group": "build-test",
+        "groupName": "Build and Test",
+        "groupEmoji": "🏗️"
       }
     },
     {
@@ -96,7 +103,8 @@
       "fatal": true,
       "discord": {
         "emoji": "🧪",
-        "name": "Tests"
+        "name": "Tests",
+        "group": "build-test"
       }
     },
     {

package/build/_modules/server/server-status/server-status.controller.d.ts

@@ -1,9 +1,36 @@
+import { Request, Response } from 'express';
 import { DyFM_Error, DyFM_Errors, DyFM_ServerStatus } from '@futdevpro/fsm-dynamo';
 import { DyNTS_Errors_ControlService } from '../errors/errors.control-service';
 import { DyNTS_Controller } from '../../../_services/route/controller.service';
 import { DyNTS_Endpoint_Params } from '../../../_models/control-models/endpoint-params.control-model';
 import { DyNTS_ServerStatus_ControlService } from './server-status.control-service';
 import { DyNTS_ServerStatusSnapshot_ControlService } from './server-status-snapshot.control-service';
+/**
+ * Auth retrofit config a `DyNTS_ServerStatus_Controller`-hez. Opt-in — ha az
+ * `authPreProcess` nincs megadva, a controller a regi (auth nelkuli) viselkedest
+ * tartja. Ugyanaz a mintazat, mint a `DyNTS_Errors_Controller`-ben, DE biztonsagosabb
+ * default-tal: a liveness/readiness/client-version **probak SOHA nem gate-eltek**
+ * (orchestrator/LB auth nelkul hivja oket), es a default `protectedEndpoints` csak az
+ * admin-adat vegpontokat fedi (NEM a probakat).
+ *
+ * **Subclass-szintu konfiguracio:** az `authConfig` static, igy az abstract osztaly
+ * minden subclass-a kozott OSZTOTT (TypeScript a static field-eket per-class hatarozza meg).
+ */
+export interface DyNTS_ServerStatusController_AuthConfig {
+    /**
+     * Pre-process fuggveny ami minden vedett endpoint elott fut. Ha hianyzik vagy
+     * `undefined`, a controller NEM ad hozza auth-ot semelyik endpoint-hoz (regi
+     * viselkedes, opt-in safety).
+     */
+    authPreProcess?: (req: Request, res: Response) => Promise<void>;
+    /**
+     * Vedett endpoint nevek listaja. Ha hianyzik, a default = csak az admin-adat
+     * vegpontok (`getServerStatus`, `getErrorStatistics`) — a probak NEM. A
+     * `PUBLIC_PROBE_ENDPOINTS` (`getServerHealth`/`getServerReadiness`/
+     * `getServerStatusForClient`) MEG explicit listazva sem gate-elheto.
+     */
+    protectedEndpoints?: string[];
+}
 /**
  * Endpoints:
  *
@@ -20,6 +47,39 @@ import { DyNTS_ServerStatusSnapshot_ControlService } from './server-status-snaps
 export declare abstract class DyNTS_ServerStatus_Controller<T_ServerStatus extends DyFM_ServerStatus, T_Error extends DyFM_Error, T_Errors extends DyFM_Errors<T_Error>, T_Errors_ControlService extends DyNTS_Errors_ControlService<T_Error, T_Errors>, T_ServerStatusSnapshot extends DyFM_ServerStatus, T_ServerStatusSnapshot_ControlService extends DyNTS_ServerStatusSnapshot_ControlService<T_ServerStatusSnapshot>, T_ServerStatus_ControlService extends DyNTS_ServerStatus_ControlService<T_ServerStatus, T_Error, T_Errors, T_Errors_ControlService, T_ServerStatusSnapshot, T_ServerStatusSnapshot_ControlService>> extends DyNTS_Controller {
     protected abstract readonly server_CS: T_ServerStatus_ControlService;
     protected readonly additionalEndpoints: DyNTS_Endpoint_Params[];
+    /**
+     * Static auth config — opt-in retrofit. Default ures objektum → NO auth
+     * (a meglevo integraciok valtoznatlan viselkedessel folytatodnak).
+     */
+    protected static authConfig: DyNTS_ServerStatusController_AuthConfig;
+    /**
+     * Static config setter. Hivhato a szerver startup-jan az endpoint registration ELOTT.
+     *
+     * Use case (host app):
+     * ```ts
+     * ServerStatus_Controller.configure({
+     *   authPreProcess: async (req, res) => auth.authenticate_tokenAndPermission(req, res, FDP_Permission.X),
+     * });
+     * ```
+     * A probak (`getServerHealth`/`getServerReadiness`/`getServerStatusForClient`) ettol
+     * fuggetlenul NYITVA maradnak.
+     */
+    static configure(config: DyNTS_ServerStatusController_AuthConfig): void;
+    /**
+     * Aktualis auth config olvasasa (test/diagnosztika celokra).
+     */
+    static getAuthConfig(): DyNTS_ServerStatusController_AuthConfig;
+    /**
+     * Test-only: visszaallitja az auth config-ot ures objektumra. Production code NE hivja.
+     */
+    static _resetAuthConfigForTesting(): void;
+    /**
+     * Vissza-adja az adott endpoint-hoz tartozo `preProcesses` array-t.
+     * - Ha az auth NINCS configurolva → ures (regi viselkedes).
+     * - A public probak SOHA nem gate-eltek.
+     * - Egyebkent az endpoint a `protectedEndpoints` (default = admin-only) listan van-e.
+     */
+    protected getPreProcessesFor(endpointName: string): ((req: Request, res: Response) => Promise<void>)[];
     setupEndpoints(): void;
 }
 //# sourceMappingURL=server-status.controller.d.ts.map

package/build/_modules/server/server-status/server-status.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-status.controller.d.ts","sourceRoot":"","sources":["../../../../src/_modules/server/server-status/server-status.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAwC,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACzH,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAEtG,OAAO,EAAqB,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AAGrG;;;;;;;;;;;;GAYG;AACH,8BAAsB,6BAA6B,CACjD,cAAc,SAAS,iBAAiB,EACxC,OAAO,SAAS,UAAU,EAC1B,QAAQ,SAAS,WAAW,CAAC,OAAO,CAAC,EACrC,uBAAuB,SAAS,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC9E,sBAAsB,SAAS,iBAAiB,EAChD,qCAAqC,SAAS,yCAAyC,CAAC,sBAAsB,CAAC,EAC/G,6BAA6B,SAAS,iCAAiC,CACrE,cAAc,EACd,OAAO,EACP,QAAQ,EACR,uBAAuB,EACvB,sBAAsB,EACtB,qCAAqC,CACtC,CACD,SAAQ,gBAAgB;IAMxB,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;IAGrE,SAAS,CAAC,QAAQ,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,CAAM;IAErE,cAAc,IAAI,IAAI;CA6FvB"}
+{"version":3,"file":"server-status.controller.d.ts","sourceRoot":"","sources":["../../../../src/_modules/server/server-status/server-status.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAwC,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACzH,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAEtG,OAAO,EAAqB,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AAGrG;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uCAAuC;IACtD;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAkBD;;;;;;;;;;;;GAYG;AACH,8BAAsB,6BAA6B,CACjD,cAAc,SAAS,iBAAiB,EACxC,OAAO,SAAS,UAAU,EAC1B,QAAQ,SAAS,WAAW,CAAC,OAAO,CAAC,EACrC,uBAAuB,SAAS,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC9E,sBAAsB,SAAS,iBAAiB,EAChD,qCAAqC,SAAS,yCAAyC,CAAC,sBAAsB,CAAC,EAC/G,6BAA6B,SAAS,iCAAiC,CACrE,cAAc,EACd,OAAO,EACP,QAAQ,EACR,uBAAuB,EACvB,sBAAsB,EACtB,qCAAqC,CACtC,CACD,SAAQ,gBAAgB;IAMxB,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;IAGrE,SAAS,CAAC,QAAQ,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,CAAM;IAErE;;;OAGG;IACH,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,uCAAuC,CAAM;IAE1E;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,uCAAuC,GAAG,IAAI;IAIvE;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,uCAAuC;IAI/D;;OAEG;IACH,MAAM,CAAC,0BAA0B,IAAI,IAAI;IAIzC;;;;;OAKG;IACH,SAAS,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE;IAQtG,cAAc,IAAI,IAAI;CAkGvB"}

package/build/_modules/server/server-status/server-status.controller.js

@@ -5,6 +5,20 @@ const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
 const controller_service_1 = require("../../../_services/route/controller.service");
 const endpoint_params_control_model_1 = require("../../../_models/control-models/endpoint-params.control-model");
 const global_settings_const_1 = require("../../../_collections/global-settings.const");
+/**
+ * Public probak — orchestrator/LB hivja auth nelkul, ezert SOHA nem gate-eljuk
+ * (meg ha a host explicit listazza is a `protectedEndpoints`-ban).
+ */
+const PUBLIC_PROBE_ENDPOINTS = [
+    'getServerHealth', 'getServerReadiness', 'getServerStatusForClient',
+];
+/**
+ * Default vedett vegpontok (ha a host nem ad `protectedEndpoints`-t): csak az
+ * admin-adat vegpontok.
+ */
+const DEFAULT_PROTECTED_ENDPOINTS = [
+    'getServerStatus', 'getErrorStatistics',
+];
 /**
  * Endpoints:
  *
@@ -21,6 +35,55 @@ const global_settings_const_1 = require("../../../_collections/global-settings.c
 class DyNTS_ServerStatus_Controller extends controller_service_1.DyNTS_Controller {
     /* protected abstract getServerService(): T_ServerStatusService; */
     additionalEndpoints = [];
+    /**
+     * Static auth config — opt-in retrofit. Default ures objektum → NO auth
+     * (a meglevo integraciok valtoznatlan viselkedessel folytatodnak).
+     */
+    static authConfig = {};
+    /**
+     * Static config setter. Hivhato a szerver startup-jan az endpoint registration ELOTT.
+     *
+     * Use case (host app):
+     * ```ts
+     * ServerStatus_Controller.configure({
+     *   authPreProcess: async (req, res) => auth.authenticate_tokenAndPermission(req, res, FDP_Permission.X),
+     * });
+     * ```
+     * A probak (`getServerHealth`/`getServerReadiness`/`getServerStatusForClient`) ettol
+     * fuggetlenul NYITVA maradnak.
+     */
+    static configure(config) {
+        DyNTS_ServerStatus_Controller.authConfig = config;
+    }
+    /**
+     * Aktualis auth config olvasasa (test/diagnosztika celokra).
+     */
+    static getAuthConfig() {
+        return DyNTS_ServerStatus_Controller.authConfig;
+    }
+    /**
+     * Test-only: visszaallitja az auth config-ot ures objektumra. Production code NE hivja.
+     */
+    static _resetAuthConfigForTesting() {
+        DyNTS_ServerStatus_Controller.authConfig = {};
+    }
+    /**
+     * Vissza-adja az adott endpoint-hoz tartozo `preProcesses` array-t.
+     * - Ha az auth NINCS configurolva → ures (regi viselkedes).
+     * - A public probak SOHA nem gate-eltek.
+     * - Egyebkent az endpoint a `protectedEndpoints` (default = admin-only) listan van-e.
+     */
+    getPreProcessesFor(endpointName) {
+        const cfg = DyNTS_ServerStatus_Controller.authConfig;
+        if (!cfg.authPreProcess) {
+            return [];
+        }
+        if (PUBLIC_PROBE_ENDPOINTS.includes(endpointName)) {
+            return [];
+        }
+        const protectedNames = cfg.protectedEndpoints ?? DEFAULT_PROTECTED_ENDPOINTS;
+        return protectedNames.includes(endpointName) ? [cfg.authPreProcess] : [];
+    }
     setupEndpoints() {
         /* if (!this.getServerService) {
           throw new DyFM_Error({
@@ -40,6 +103,7 @@ class DyNTS_ServerStatus_Controller extends controller_service_1.DyNTS_Controlle
                 name: 'getServerStatus',
                 type: fsm_dynamo_1.DyFM_HttpCallType.get,
                 endpoint: '/status',
+                preProcesses: this.getPreProcessesFor('getServerStatus'),
                 tasks: [
                     async (req, res, issuer) => {
                         res.send(await this.server_CS.getServerStatus(issuer));
@@ -50,6 +114,7 @@ class DyNTS_ServerStatus_Controller extends controller_service_1.DyNTS_Controlle
                 name: 'getServerHealth',
                 type: fsm_dynamo_1.DyFM_HttpCallType.get,
                 endpoint: '/health',
+                preProcesses: this.getPreProcessesFor('getServerHealth'),
                 tasks: [
                     async (req, res, issuer) => {
                         res.send(await this.server_CS.getServerStatus(issuer));
@@ -62,6 +127,7 @@ class DyNTS_ServerStatus_Controller extends controller_service_1.DyNTS_Controlle
                 name: 'getServerReadiness',
                 type: fsm_dynamo_1.DyFM_HttpCallType.get,
                 endpoint: '/readiness',
+                preProcesses: this.getPreProcessesFor('getServerReadiness'),
                 tasks: [
                     async (req, res, issuer) => {
                         const readiness = await this.server_CS.checkDbReadiness();
@@ -73,6 +139,7 @@ class DyNTS_ServerStatus_Controller extends controller_service_1.DyNTS_Controlle
                 name: 'getServerStatusForClient',
                 type: fsm_dynamo_1.DyFM_HttpCallType.get,
                 endpoint: '/status/:version',
+                preProcesses: this.getPreProcessesFor('getServerStatusForClient'),
                 tasks: [
                     async (req, res, issuer) => {
                         res.send(await this.server_CS.getServerStatus(issuer, req.params.version));
@@ -83,6 +150,7 @@ class DyNTS_ServerStatus_Controller extends controller_service_1.DyNTS_Controlle
                 name: 'getErrorStatistics',
                 type: fsm_dynamo_1.DyFM_HttpCallType.get,
                 endpoint: '/statistics/error/:range',
+                preProcesses: this.getPreProcessesFor('getErrorStatistics'),
                 tasks: [
                     async (req, res, issuer) => {
                         res.send(await this.server_CS.getErrorStatistics(req.params.range, issuer));

package/build/_modules/server/server-status/server-status.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-status.controller.js","sourceRoot":"","sources":["../../../../src/_modules/server/server-status/server-status.controller.ts"],"names":[],"mappings":";;;AAGA,sDAAyH;AAEzH,oFAA+E;AAC/E,iHAAsG;AACtG,uFAAoF;AAKpF;;;;;;;;;;;;GAYG;AACH,MAAsB,6BAepB,SAAQ,qCAAgB;IAQxB,mEAAmE;IAChD,mBAAmB,GAA4B,EAAE,CAAC;IAErE,cAAc;QACZ;;;;;YAKI;QAEJ,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,iEAAiE;gBAC1E,SAAS,EAAE,GAAG,6CAAqB,CAAC,mBAAmB,gBAAgB;aACxE,CAAC,CAAC;QACL,CAAC;QAED,mDAAmD;QAEnD,IAAI,CAAC,SAAS,GAAG;YACf,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBACnE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAC7C,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBACnE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAC7C,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,qFAAqF;YACrF,uFAAuF;YACvF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBACnE,MAAM,SAAS,GAAsB,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;wBAE7E,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1D,CAAC;iBACF;aACF,CAAC;YAEF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBAEnE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACjE,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,0BAA0B;gBACpC,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAkB,EAAE;wBAEpE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CACrC,GAAG,CAAC,MAAM,CAAC,KAA0B,EACrC,MAAM,CACP,CACF,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,GAAG,IAAI,CAAC,mBAAmB;SAC5B,CAAC;IACJ,CAAC;CACF;AAvHD,sEAuHC"}
+{"version":3,"file":"server-status.controller.js","sourceRoot":"","sources":["../../../../src/_modules/server/server-status/server-status.controller.ts"],"names":[],"mappings":";;;AAGA,sDAAyH;AAEzH,oFAA+E;AAC/E,iHAAsG;AACtG,uFAAoF;AAiCpF;;;GAGG;AACH,MAAM,sBAAsB,GAAa;IACvC,iBAAiB,EAAE,oBAAoB,EAAE,0BAA0B;CACpE,CAAC;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAAa;IAC5C,iBAAiB,EAAE,oBAAoB;CACxC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAsB,6BAepB,SAAQ,qCAAgB;IAQxB,mEAAmE;IAChD,mBAAmB,GAA4B,EAAE,CAAC;IAErE;;;OAGG;IACO,MAAM,CAAC,UAAU,GAA4C,EAAE,CAAC;IAE1E;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,SAAS,CAAC,MAA+C;QAC9D,6BAA6B,CAAC,UAAU,GAAG,MAAM,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,OAAO,6BAA6B,CAAC,UAAU,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,0BAA0B;QAC/B,6BAA6B,CAAC,UAAU,GAAG,EAAE,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACO,kBAAkB,CAAC,YAAoB;QAC/C,MAAM,GAAG,GAA4C,6BAA6B,CAAC,UAAU,CAAC;QAC9F,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QACvC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QACjE,MAAM,cAAc,GAAa,GAAG,CAAC,kBAAkB,IAAI,2BAA2B,CAAC;QACvF,OAAO,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,cAAc;QACZ;;;;;YAKI;QAEJ,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,iEAAiE;gBAC1E,SAAS,EAAE,GAAG,6CAAqB,CAAC,mBAAmB,gBAAgB;aACxE,CAAC,CAAC;QACL,CAAC;QAED,mDAAmD;QAEnD,IAAI,CAAC,SAAS,GAAG;YACf,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC;gBACxD,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBACnE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAC7C,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC;gBACxD,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBACnE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAC7C,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,qFAAqF;YACrF,uFAAuF;YACvF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,YAAY;gBACtB,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC;gBAC3D,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBACnE,MAAM,SAAS,GAAsB,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;wBAE7E,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1D,CAAC;iBACF;aACF,CAAC;YAEF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,kBAAkB;gBAC5B,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,0BAA0B,CAAC;gBACjE,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAiB,EAAE;wBAEnE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACjE,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,IAAI,qDAAqB,CAAC;gBACxB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,0BAA0B;gBACpC,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC;gBAC3D,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,MAAc,EAAkB,EAAE;wBAEpE,GAAG,CAAC,IAAI,CACN,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CACrC,GAAG,CAAC,MAAM,CAAC,KAA0B,EACrC,MAAM,CACP,CACF,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC;YAEF,GAAG,IAAI,CAAC,mBAAmB;SAC5B,CAAC;IACJ,CAAC;;AA7KH,sEA8KC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@futdevpro/nts-dynamo",
-  "version": "01.15.49",
+  "version": "01.15.52",
   "description": "Dynamic NodeTS (NodeJS-Typescript), MongoDB Backend System Framework by Future Development Program Ltd.",
   "DyBu_settings": {
     "packageType": "server-package",
@@ -332,7 +332,7 @@
     "ts-node": "~10.9.2"
   },
   "devDependencies": {
-    "@futdevpro/dynamo-eslint": "1.15.14",
+    "@futdevpro/dynamo-eslint": "1.15.16",
     "@discordjs/opus": "^0.10.0",
     "@discordjs/voice": "^0.18.0",
     "@types/jasmine": "~4.3.5",

package/pnpm-workspace.yaml

@@ -1,8 +1,4 @@
 allowBuilds:
   '@discordjs/opus': false
 minimumReleaseAgeExclude:
-  - '@futdevpro/fsm-dynamo@1.15.17'
-  - '@futdevpro/fsm-dynamo@1.15.18'
-  - '@futdevpro/fsm-dynamo@1.15.19'
-  - '@futdevpro/fsm-dynamo@1.15.20'
-  - '@futdevpro/fsm-dynamo@1.15.21'
+  - '@futdevpro/*'

package/src/_modules/server/server-status/server-status.controller.spec.ts

@@ -158,5 +158,82 @@ describe('| DyNTS_ServerStatus_Controller', () => {
       }).toThrow();
     });
   });
+
+  describe('| opt-in admin auth retrofit', (): void => {
+    afterEach((): void => {
+      DyNTS_ServerStatus_Controller._resetAuthConfigForTesting();
+    });
+
+    const preCount = (controller: any, name: string): number => {
+      const ep: any = controller.endpoints.find((e: any) => e.name === name);
+      return (ep?.preProcesses ?? []).length;
+    };
+
+    it('| default: NO preProcesses on any endpoint (backwards compatible)', (): void => {
+      controller.setupEndpoints();
+      for (const ep of controller.endpoints) {
+        const pre: any = (ep as any).preProcesses;
+        expect(pre === undefined || pre.length === 0).toBe(true);
+      }
+    });
+
+    it('| configure({ authPreProcess }) → admin endpoints gated, probák NEM', (): void => {
+      const fakeAuth = async (): Promise<void> => { /* noop */ };
+      DyNTS_ServerStatus_Controller.configure({ authPreProcess: fakeAuth });
+      const c: any = new (TestServerStatusController as any)();
+      c.setupEndpoints();
+
+      // admin-adat → gated
+      expect(preCount(c, 'getServerStatus')).toBe(1);
+      expect(preCount(c, 'getErrorStatistics')).toBe(1);
+      // public probák → SOHA nem gated
+      expect(preCount(c, 'getServerHealth')).toBe(0);
+      expect(preCount(c, 'getServerReadiness')).toBe(0);
+      expect(preCount(c, 'getServerStatusForClient')).toBe(0);
+    });
+
+    it('| a probákat explicit protectedEndpoints-lista SEM gate-eli', (): void => {
+      const fakeAuth = async (): Promise<void> => { /* noop */ };
+      DyNTS_ServerStatus_Controller.configure({
+        authPreProcess: fakeAuth,
+        protectedEndpoints: [ 'getServerHealth', 'getServerReadiness', 'getServerStatusForClient', 'getServerStatus' ],
+      });
+      const c: any = new (TestServerStatusController as any)();
+      c.setupEndpoints();
+
+      expect(preCount(c, 'getServerHealth')).toBe(0);
+      expect(preCount(c, 'getServerReadiness')).toBe(0);
+      expect(preCount(c, 'getServerStatusForClient')).toBe(0);
+      // a nem-proba viszont gated
+      expect(preCount(c, 'getServerStatus')).toBe(1);
+    });
+
+    it('| protectedEndpoints subset → csak a megadott (nem-proba) neveken aktiv', (): void => {
+      const fakeAuth = async (): Promise<void> => { /* noop */ };
+      DyNTS_ServerStatus_Controller.configure({
+        authPreProcess: fakeAuth,
+        protectedEndpoints: [ 'getErrorStatistics' ],
+      });
+      const c: any = new (TestServerStatusController as any)();
+      c.setupEndpoints();
+
+      expect(preCount(c, 'getErrorStatistics')).toBe(1);
+      expect(preCount(c, 'getServerStatus')).toBe(0);
+    });
+
+    it('| getAuthConfig() returns the active config', (): void => {
+      const fakeAuth = async (): Promise<void> => { /* noop */ };
+      DyNTS_ServerStatus_Controller.configure({ authPreProcess: fakeAuth, protectedEndpoints: [ 'getErrorStatistics' ] });
+      const cfg = DyNTS_ServerStatus_Controller.getAuthConfig();
+      expect(cfg.authPreProcess).toBe(fakeAuth);
+      expect(cfg.protectedEndpoints).toEqual([ 'getErrorStatistics' ]);
+    });
+
+    it('| _resetAuthConfigForTesting() clears the config', (): void => {
+      DyNTS_ServerStatus_Controller.configure({ authPreProcess: async (): Promise<void> => { /* noop */ } });
+      DyNTS_ServerStatus_Controller._resetAuthConfigForTesting();
+      expect(DyNTS_ServerStatus_Controller.getAuthConfig().authPreProcess).toBeUndefined();
+    });
+  });
 });
 

package/src/_modules/server/server-status/server-status.controller.ts

@@ -10,18 +10,62 @@ import { DyNTS_DbReadiness, DyNTS_ServerStatus_ControlService } from './server-s
 import { DyNTS_ServerStatusSnapshot_ControlService } from './server-status-snapshot.control-service';
 
 
+/**
+ * Auth retrofit config a `DyNTS_ServerStatus_Controller`-hez. Opt-in — ha az
+ * `authPreProcess` nincs megadva, a controller a regi (auth nelkuli) viselkedest
+ * tartja. Ugyanaz a mintazat, mint a `DyNTS_Errors_Controller`-ben, DE biztonsagosabb
+ * default-tal: a liveness/readiness/client-version **probak SOHA nem gate-eltek**
+ * (orchestrator/LB auth nelkul hivja oket), es a default `protectedEndpoints` csak az
+ * admin-adat vegpontokat fedi (NEM a probakat).
+ *
+ * **Subclass-szintu konfiguracio:** az `authConfig` static, igy az abstract osztaly
+ * minden subclass-a kozott OSZTOTT (TypeScript a static field-eket per-class hatarozza meg).
+ */
+export interface DyNTS_ServerStatusController_AuthConfig {
+  /**
+   * Pre-process fuggveny ami minden vedett endpoint elott fut. Ha hianyzik vagy
+   * `undefined`, a controller NEM ad hozza auth-ot semelyik endpoint-hoz (regi
+   * viselkedes, opt-in safety).
+   */
+  authPreProcess?: (req: Request, res: Response) => Promise<void>;
+
+  /**
+   * Vedett endpoint nevek listaja. Ha hianyzik, a default = csak az admin-adat
+   * vegpontok (`getServerStatus`, `getErrorStatistics`) — a probak NEM. A
+   * `PUBLIC_PROBE_ENDPOINTS` (`getServerHealth`/`getServerReadiness`/
+   * `getServerStatusForClient`) MEG explicit listazva sem gate-elheto.
+   */
+  protectedEndpoints?: string[];
+}
+
+/**
+ * Public probak — orchestrator/LB hivja auth nelkul, ezert SOHA nem gate-eljuk
+ * (meg ha a host explicit listazza is a `protectedEndpoints`-ban).
+ */
+const PUBLIC_PROBE_ENDPOINTS: string[] = [
+  'getServerHealth', 'getServerReadiness', 'getServerStatusForClient',
+];
+
+/**
+ * Default vedett vegpontok (ha a host nem ad `protectedEndpoints`-t): csak az
+ * admin-adat vegpontok.
+ */
+const DEFAULT_PROTECTED_ENDPOINTS: string[] = [
+  'getServerStatus', 'getErrorStatistics',
+];
+
 /**
  * Endpoints:
- * 
+ *
  * getServerStatus
  * GET /status
- * 
+ *
  * getServerStatusForClient
  * GET /status/:version
- * 
+ *
  * getErrorStatistics
  * GET /statistics/error/:range
- * 
+ *
  */
 export abstract class DyNTS_ServerStatus_Controller<
   T_ServerStatus extends DyFM_ServerStatus,
@@ -45,10 +89,60 @@ export abstract class DyNTS_ServerStatus_Controller<
   } */
 
   protected abstract readonly server_CS: T_ServerStatus_ControlService;
-  
+
   /* protected abstract getServerService(): T_ServerStatusService; */
   protected readonly additionalEndpoints: DyNTS_Endpoint_Params[] = [];
 
+  /**
+   * Static auth config — opt-in retrofit. Default ures objektum → NO auth
+   * (a meglevo integraciok valtoznatlan viselkedessel folytatodnak).
+   */
+  protected static authConfig: DyNTS_ServerStatusController_AuthConfig = {};
+
+  /**
+   * Static config setter. Hivhato a szerver startup-jan az endpoint registration ELOTT.
+   *
+   * Use case (host app):
+   * ```ts
+   * ServerStatus_Controller.configure({
+   *   authPreProcess: async (req, res) => auth.authenticate_tokenAndPermission(req, res, FDP_Permission.X),
+   * });
+   * ```
+   * A probak (`getServerHealth`/`getServerReadiness`/`getServerStatusForClient`) ettol
+   * fuggetlenul NYITVA maradnak.
+   */
+  static configure(config: DyNTS_ServerStatusController_AuthConfig): void {
+    DyNTS_ServerStatus_Controller.authConfig = config;
+  }
+
+  /**
+   * Aktualis auth config olvasasa (test/diagnosztika celokra).
+   */
+  static getAuthConfig(): DyNTS_ServerStatusController_AuthConfig {
+    return DyNTS_ServerStatus_Controller.authConfig;
+  }
+
+  /**
+   * Test-only: visszaallitja az auth config-ot ures objektumra. Production code NE hivja.
+   */
+  static _resetAuthConfigForTesting(): void {
+    DyNTS_ServerStatus_Controller.authConfig = {};
+  }
+
+  /**
+   * Vissza-adja az adott endpoint-hoz tartozo `preProcesses` array-t.
+   * - Ha az auth NINCS configurolva → ures (regi viselkedes).
+   * - A public probak SOHA nem gate-eltek.
+   * - Egyebkent az endpoint a `protectedEndpoints` (default = admin-only) listan van-e.
+   */
+  protected getPreProcessesFor(endpointName: string): ((req: Request, res: Response) => Promise<void>)[] {
+    const cfg: DyNTS_ServerStatusController_AuthConfig = DyNTS_ServerStatus_Controller.authConfig;
+    if (!cfg.authPreProcess) { return []; }
+    if (PUBLIC_PROBE_ENDPOINTS.includes(endpointName)) { return []; }
+    const protectedNames: string[] = cfg.protectedEndpoints ?? DEFAULT_PROTECTED_ENDPOINTS;
+    return protectedNames.includes(endpointName) ? [cfg.authPreProcess] : [];
+  }
+
   setupEndpoints(): void {
     /* if (!this.getServerService) {
       throw new DyFM_Error({
@@ -71,6 +165,7 @@ export abstract class DyNTS_ServerStatus_Controller<
         name: 'getServerStatus',
         type: DyFM_HttpCallType.get,
         endpoint: '/status',
+        preProcesses: this.getPreProcessesFor('getServerStatus'),
         tasks: [
           async (req: Request, res: Response, issuer: string): Promise<void> => {
             res.send(
@@ -84,6 +179,7 @@ export abstract class DyNTS_ServerStatus_Controller<
         name: 'getServerHealth',
         type: DyFM_HttpCallType.get,
         endpoint: '/health',
+        preProcesses: this.getPreProcessesFor('getServerHealth'),
         tasks: [
           async (req: Request, res: Response, issuer: string): Promise<void> => {
             res.send(
@@ -99,6 +195,7 @@ export abstract class DyNTS_ServerStatus_Controller<
         name: 'getServerReadiness',
         type: DyFM_HttpCallType.get,
         endpoint: '/readiness',
+        preProcesses: this.getPreProcessesFor('getServerReadiness'),
         tasks: [
           async (req: Request, res: Response, issuer: string): Promise<void> => {
             const readiness: DyNTS_DbReadiness = await this.server_CS.checkDbReadiness();
@@ -112,6 +209,7 @@ export abstract class DyNTS_ServerStatus_Controller<
         name: 'getServerStatusForClient',
         type: DyFM_HttpCallType.get,
         endpoint: '/status/:version',
+        preProcesses: this.getPreProcessesFor('getServerStatusForClient'),
         tasks: [
           async (req: Request, res: Response, issuer: string): Promise<void> => {
 
@@ -126,6 +224,7 @@ export abstract class DyNTS_ServerStatus_Controller<
         name: 'getErrorStatistics',
         type: DyFM_HttpCallType.get,
         endpoint: '/statistics/error/:range',
+        preProcesses: this.getPreProcessesFor('getErrorStatistics'),
         tasks: [
           async (req: Request, res: Response, issuer: string) : Promise<void> => {