@futdevpro/nts-dynamo 1.15.68 → 1.15.70

package/src/_models/types/db-update.type.ts

@@ -1,100 +1,100 @@
-
-/**
- * @param update this uses the basic Mongoose updateOne
- * @example
- * // increase a specific value (here by 15): 
- * { $inc: { popularity: 15 } }
- * //
- * @example 
- * // or add element to a list:
- * { $push: { reactions: this.newReaction }
- * // or add multiple elements to a list
- * { $push: { schedule: {$each: [ monday, tuesday, wednesday ] } } }
- * //
- * @example 
- * // or all at once 
- * {  
- *   $inc: { popularity: this.newVote.amount }, 
- *   emailVerified: true, 
- *   $push: { reactions: this.newReaction } 
- * }
- * // further tools (syntax matches with $inc):
- * $currentDate: // Sets the value of a field to current date, either as a Date or a Timestamp.
- * $min:         // Only updates the field if the specified value is less than the existing field value.
- * $max:         // Only updates the field if the specified value is greater than the existing field value.
- * $mul:         // Multiplies the value of the field by the specified amount.
- * $rename:      // Renames a field.
- * $unset:       // Removes the specified field from a document. (set: "" to value)
- * //
- */
-export type DyNTS_DBUpdate<T> = {
-  /**
-   * Sets the value of a field to current date, either as a Date or a Timestamp.
-   */
-  /* $currentDate?: { [K in keyof T]?: boolean }; */
-  /**
-   * Increments the value of the field by the specified amount.
-   */
-  $inc?: { [K in keyof T]?: number };
-  /**
-   * Only updates the field if the specified value is less than the existing field value.
-   */
-  $min?: { [K in keyof T]?: number };
-  /**
-   * Only updates the field if the specified value is greater than the existing field value.
-   */
-  $max?: { [K in keyof T]?: number };
-  /**
-   * Multiplies the value of the field by the specified amount.
-   */
-  $mul?: { [K in keyof T]?: number };
-  /**
-   * Renames a field.
-   */
-  $rename?: { [K in keyof T]?: string };
-  /**
-   * Removes the specified field from a document. (set: "" to value)
-   */
-  $unset?: { [K in keyof T]?: string };
-  /**
-   * Sets the value of a field in a document.
-   */
-  $set?: { [K in keyof T]?: string } | any;
-  /**
-   * Sets the value of a field if an update results in an insert of a document. 
-   * Has no effect on update operations that modify existing documents.
-   */
-  $setOnInsert?: { [K in keyof T]?: T[K] };
-  /**
-   * Removes the first or last item of an array.
-   */
-
-  // array only operations
-  /**
-   * Removes the first or last item of an array.
-   */
-  $push?: { [K in keyof T]?: any | { $each?: T[K] } };
-  /**
-   * Removes the first or last item of an array.
-   */
-  $addToSet?: { [K in keyof T]?: any | { $each?: T[K] } };
-  /**
-   * Removes the first or last item of an array.
-   */
-  $pop?: { [K in keyof T]?: 1 | -1 };
-  /**
-   * Removes all array elements that match a specified query.
-   */
-  $pull?: { [K in keyof T]?: any | { $each?: T[K] } };
-  /**
-   * Removes all array elements that match a specified query.
-   */
-  $pullAll?: { [K in keyof T]?: any | { $each?: T[K] } };
-} & DyNTS_DBSimpleUpdate<T>;
-
-/**
- * 
- */
-export type DyNTS_DBSimpleUpdate<T> = {
-  [K in keyof T]?: T[K];
-};
+
+/**
+ * @param update this uses the basic Mongoose updateOne
+ * @example
+ * // increase a specific value (here by 15): 
+ * { $inc: { popularity: 15 } }
+ * //
+ * @example 
+ * // or add element to a list:
+ * { $push: { reactions: this.newReaction }
+ * // or add multiple elements to a list
+ * { $push: { schedule: {$each: [ monday, tuesday, wednesday ] } } }
+ * //
+ * @example 
+ * // or all at once 
+ * {  
+ *   $inc: { popularity: this.newVote.amount }, 
+ *   emailVerified: true, 
+ *   $push: { reactions: this.newReaction } 
+ * }
+ * // further tools (syntax matches with $inc):
+ * $currentDate: // Sets the value of a field to current date, either as a Date or a Timestamp.
+ * $min:         // Only updates the field if the specified value is less than the existing field value.
+ * $max:         // Only updates the field if the specified value is greater than the existing field value.
+ * $mul:         // Multiplies the value of the field by the specified amount.
+ * $rename:      // Renames a field.
+ * $unset:       // Removes the specified field from a document. (set: "" to value)
+ * //
+ */
+export type DyNTS_DBUpdate<T> = {
+  /**
+   * Sets the value of a field to current date, either as a Date or a Timestamp.
+   */
+  /* $currentDate?: { [K in keyof T]?: boolean }; */
+  /**
+   * Increments the value of the field by the specified amount.
+   */
+  $inc?: { [K in keyof T]?: number };
+  /**
+   * Only updates the field if the specified value is less than the existing field value.
+   */
+  $min?: { [K in keyof T]?: number };
+  /**
+   * Only updates the field if the specified value is greater than the existing field value.
+   */
+  $max?: { [K in keyof T]?: number };
+  /**
+   * Multiplies the value of the field by the specified amount.
+   */
+  $mul?: { [K in keyof T]?: number };
+  /**
+   * Renames a field.
+   */
+  $rename?: { [K in keyof T]?: string };
+  /**
+   * Removes the specified field from a document. (set: "" to value)
+   */
+  $unset?: { [K in keyof T]?: string };
+  /**
+   * Sets the value of a field in a document.
+   */
+  $set?: { [K in keyof T]?: string } | any;
+  /**
+   * Sets the value of a field if an update results in an insert of a document. 
+   * Has no effect on update operations that modify existing documents.
+   */
+  $setOnInsert?: { [K in keyof T]?: T[K] };
+  /**
+   * Removes the first or last item of an array.
+   */
+
+  // array only operations
+  /**
+   * Removes the first or last item of an array.
+   */
+  $push?: { [K in keyof T]?: any | { $each?: T[K] } };
+  /**
+   * Removes the first or last item of an array.
+   */
+  $addToSet?: { [K in keyof T]?: any | { $each?: T[K] } };
+  /**
+   * Removes the first or last item of an array.
+   */
+  $pop?: { [K in keyof T]?: 1 | -1 };
+  /**
+   * Removes all array elements that match a specified query.
+   */
+  $pull?: { [K in keyof T]?: any | { $each?: T[K] } };
+  /**
+   * Removes all array elements that match a specified query.
+   */
+  $pullAll?: { [K in keyof T]?: any | { $each?: T[K] } };
+} & DyNTS_DBSimpleUpdate<T>;
+
+/**
+ * 
+ */
+export type DyNTS_DBSimpleUpdate<T> = {
+  [K in keyof T]?: T[K];
+};

package/src/_modules/admin-auth/_models/admin-api-key-config.interface.ts

@@ -1,33 +1,33 @@
-/**
- * Config a `DyNTS_AdminApiKey_AuthService.configure(...)`-hoz.
- *
- * Minden mezo opcionalis — a default-ok megfelelnek a tipikus hasznalat-eset
- * elvarasanak (DYNTS_ADMIN_API_KEY env var + x-admin-api-key header +
- * Bearer fallback).
- */
-export interface DyNTS_AdminApiKey_Config {
-  /**
-   * Env var nev, ahonnan az admin API key olvasodik.
-   * Default: `DYNTS_ADMIN_API_KEY`.
-   *
-   * Override-olhato pl. multi-tenant deploy-okhoz vagy ha a host app
-   * mas konvenciot kovet (`MY_APP_ADMIN_KEY`, stb.).
-   */
-  envVarName?: string;
-
-  /**
-   * HTTP header nev (case-insensitive — Express normalizalja lowercase-re).
-   * Default: `x-admin-api-key`.
-   */
-  headerName?: string;
-
-  /**
-   * Engedi-e az `Authorization: Bearer <key>` fallback-et a primer header
-   * helyett. Default: `true`.
-   *
-   * Hasznos amikor a kliens egy generikus HTTP klienst hasznal ami csak
-   * az Authorization header-t allitja, vagy amikor proxy-k strippelik
-   * a custom header-eket.
-   */
-  allowAuthorizationBearer?: boolean;
-}
+/**
+ * Config a `DyNTS_AdminApiKey_AuthService.configure(...)`-hoz.
+ *
+ * Minden mezo opcionalis — a default-ok megfelelnek a tipikus hasznalat-eset
+ * elvarasanak (DYNTS_ADMIN_API_KEY env var + x-admin-api-key header +
+ * Bearer fallback).
+ */
+export interface DyNTS_AdminApiKey_Config {
+  /**
+   * Env var nev, ahonnan az admin API key olvasodik.
+   * Default: `DYNTS_ADMIN_API_KEY`.
+   *
+   * Override-olhato pl. multi-tenant deploy-okhoz vagy ha a host app
+   * mas konvenciot kovet (`MY_APP_ADMIN_KEY`, stb.).
+   */
+  envVarName?: string;
+
+  /**
+   * HTTP header nev (case-insensitive — Express normalizalja lowercase-re).
+   * Default: `x-admin-api-key`.
+   */
+  headerName?: string;
+
+  /**
+   * Engedi-e az `Authorization: Bearer <key>` fallback-et a primer header
+   * helyett. Default: `true`.
+   *
+   * Hasznos amikor a kliens egy generikus HTTP klienst hasznal ami csak
+   * az Authorization header-t allitja, vagy amikor proxy-k strippelik
+   * a custom header-eket.
+   */
+  allowAuthorizationBearer?: boolean;
+}

package/src/_modules/admin-auth/admin-api-key.auth-service.spec.ts

@@ -1,200 +1,200 @@
-import { Request, Response } from 'express';
-
-import { DyFM_Error } from '@futdevpro/fsm-dynamo';
-
-import { DyNTS_AdminApiKey_AuthService } from './admin-api-key.auth-service';
-
-
-const TEST_KEY: string = 'super-secret-admin-key-1234567890';
-const TEST_ENV_VAR: string = 'DYNTS_ADMIN_API_KEY';
-
-
-/** Test-only — minimal Request mock-ot ad vissza adott headers-szel. */
-const mockReq = (headers: Record<string, string | undefined> = {}): Request => {
-  return { headers: headers } as unknown as Request;
-};
-
-/** Test-only — minimal Response stub (verify nem irja, csak typing miatt kell). */
-const mockRes = (): Response => {
-  return {} as unknown as Response;
-};
-
-
-describe('| DyNTS_AdminApiKey_AuthService', (): void => {
-  let svc: DyNTS_AdminApiKey_AuthService;
-  let originalEnv: string | undefined;
-
-  beforeEach((): void => {
-    svc = DyNTS_AdminApiKey_AuthService.getInstance();
-    svc._resetForTesting();
-    originalEnv = process.env[TEST_ENV_VAR];
-  });
-
-  afterEach((): void => {
-    svc._resetForTesting();
-    if (originalEnv === undefined) {
-      delete process.env[TEST_ENV_VAR];
-    } else {
-      process.env[TEST_ENV_VAR] = originalEnv;
-    }
-  });
-
-
-  describe('| verify() — config errors', (): void => {
-    it('| 500 ha az env var nincs beallitva', async (): Promise<void> => {
-      delete process.env[TEST_ENV_VAR];
-      let thrown: any = null;
-      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(500);
-      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-CONFIG');
-    });
-
-    it('| 500 ha az env var ures string', async (): Promise<void> => {
-      process.env[TEST_ENV_VAR] = '';
-      let thrown: any = null;
-      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(500);
-    });
-  });
-
-  describe('| verify() — auth errors', (): void => {
-    beforeEach((): void => { process.env[TEST_ENV_VAR] = TEST_KEY; });
-
-    it('| 401 ha a header teljesen hianyzik', async (): Promise<void> => {
-      let thrown: any = null;
-      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
-      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-MISSING');
-    });
-
-    it('| 401 ha a header rossz erteku', async (): Promise<void> => {
-      let thrown: any = null;
-      try {
-        await svc.verify(mockReq({ 'x-admin-api-key': 'wrong-key' }), mockRes());
-      } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
-      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-INVALID');
-    });
-
-    it('| 401 length-mismatch eseten is (timing-safe path)', async (): Promise<void> => {
-      let thrown: any = null;
-      try {
-        await svc.verify(mockReq({ 'x-admin-api-key': 'short' }), mockRes());
-      } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
-      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-INVALID');
-    });
-  });
-
-  describe('| verify() — happy paths', (): void => {
-    beforeEach((): void => { process.env[TEST_ENV_VAR] = TEST_KEY; });
-
-    it('| silent pass ha az x-admin-api-key header egyezik', async (): Promise<void> => {
-      await expectAsync(
-        svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
-      ).toBeResolved();
-    });
-
-    it('| silent pass Authorization Bearer fallback-bol (default engedelyezve)', async (): Promise<void> => {
-      await expectAsync(
-        svc.verify(mockReq({ authorization: `Bearer ${TEST_KEY}` }), mockRes()),
-      ).toBeResolved();
-    });
-
-    it('| silent pass Authorization Bearer kis-nagybetu case-insensitive', async (): Promise<void> => {
-      await expectAsync(
-        svc.verify(mockReq({ authorization: `bearer ${TEST_KEY}` }), mockRes()),
-      ).toBeResolved();
-    });
-  });
-
-  describe('| configure() — overrides', (): void => {
-    it('| custom envVarName-bol olvas', async (): Promise<void> => {
-      svc.configure({ envVarName: 'MY_CUSTOM_KEY' });
-      process.env['MY_CUSTOM_KEY'] = TEST_KEY;
-
-      await expectAsync(
-        svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
-      ).toBeResolved();
-
-      delete process.env['MY_CUSTOM_KEY'];
-    });
-
-    it('| custom headerName-rol olvas', async (): Promise<void> => {
-      process.env[TEST_ENV_VAR] = TEST_KEY;
-      svc.configure({ headerName: 'x-my-admin' });
-
-      // Default x-admin-api-key MOSTANTOL NEM mukodik
-      let thrown: any = null;
-      try {
-        await svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes());
-      } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
-
-      // Az uj header viszont igen
-      await expectAsync(
-        svc.verify(mockReq({ 'x-my-admin': TEST_KEY }), mockRes()),
-      ).toBeResolved();
-    });
-
-    it('| allowAuthorizationBearer=false letiltja a Bearer fallback-et', async (): Promise<void> => {
-      process.env[TEST_ENV_VAR] = TEST_KEY;
-      svc.configure({ allowAuthorizationBearer: false });
-
-      let thrown: any = null;
-      try {
-        await svc.verify(mockReq({ authorization: `Bearer ${TEST_KEY}` }), mockRes());
-      } catch (e) { thrown = e; }
-      expect(thrown).not.toBeNull();
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
-    });
-
-    it('| configure() partial override — a tobbi mezo default marad', (): void => {
-      svc.configure({ headerName: 'x-only-header' });
-      const config = svc.getConfig();
-      expect(config.headerName).toBe('x-only-header');
-      expect(config.envVarName).toBe('DYNTS_ADMIN_API_KEY');
-      expect(config.allowAuthorizationBearer).toBe(true);
-    });
-
-    it('| configure() headerName lowercase-re normalizal', (): void => {
-      svc.configure({ headerName: 'X-Mixed-Case-Header' });
-      expect(svc.getConfig().headerName).toBe('x-mixed-case-header');
-    });
-  });
-
-  describe('| env-read-on-each-call (dynamic)', (): void => {
-    it('| env var update kozben hat: install-utani env-modositas ervenyes', async (): Promise<void> => {
-      delete process.env[TEST_ENV_VAR];
-      // Elso hivas: env hianyzik → 500
-      let thrown: any = null;
-      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
-      expect(DyFM_Error.getErrorStatus(thrown)).toBe(500);
-
-      // Most allitsuk be az env-et
-      process.env[TEST_ENV_VAR] = TEST_KEY;
-
-      // Masodik hivas helyes header-rel → pass
-      await expectAsync(
-        svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
-      ).toBeResolved();
-    });
-  });
-
-  describe('| .verify binding', (): void => {
-    it('| verify atadhato preProcesses-be detached method-kent (this-binding megtarttva)', async (): Promise<void> => {
-      process.env[TEST_ENV_VAR] = TEST_KEY;
-      const detached: (req: Request, res: Response) => Promise<void> = svc.verify;
-      // NEM call-ban svc.verify(...) hanem szabad fuggveny-kent — bindelt this-re kell hagyatkozni
-      await expectAsync(
-        detached(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
-      ).toBeResolved();
-    });
-  });
-});
+import { Request, Response } from 'express';
+
+import { DyFM_Error } from '@futdevpro/fsm-dynamo';
+
+import { DyNTS_AdminApiKey_AuthService } from './admin-api-key.auth-service';
+
+
+const TEST_KEY: string = 'super-secret-admin-key-1234567890';
+const TEST_ENV_VAR: string = 'DYNTS_ADMIN_API_KEY';
+
+
+/** Test-only — minimal Request mock-ot ad vissza adott headers-szel. */
+const mockReq = (headers: Record<string, string | undefined> = {}): Request => {
+  return { headers: headers } as unknown as Request;
+};
+
+/** Test-only — minimal Response stub (verify nem irja, csak typing miatt kell). */
+const mockRes = (): Response => {
+  return {} as unknown as Response;
+};
+
+
+describe('| DyNTS_AdminApiKey_AuthService', (): void => {
+  let svc: DyNTS_AdminApiKey_AuthService;
+  let originalEnv: string | undefined;
+
+  beforeEach((): void => {
+    svc = DyNTS_AdminApiKey_AuthService.getInstance();
+    svc._resetForTesting();
+    originalEnv = process.env[TEST_ENV_VAR];
+  });
+
+  afterEach((): void => {
+    svc._resetForTesting();
+    if (originalEnv === undefined) {
+      delete process.env[TEST_ENV_VAR];
+    } else {
+      process.env[TEST_ENV_VAR] = originalEnv;
+    }
+  });
+
+
+  describe('| verify() — config errors', (): void => {
+    it('| 500 ha az env var nincs beallitva', async (): Promise<void> => {
+      delete process.env[TEST_ENV_VAR];
+      let thrown: any = null;
+      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(500);
+      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-CONFIG');
+    });
+
+    it('| 500 ha az env var ures string', async (): Promise<void> => {
+      process.env[TEST_ENV_VAR] = '';
+      let thrown: any = null;
+      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(500);
+    });
+  });
+
+  describe('| verify() — auth errors', (): void => {
+    beforeEach((): void => { process.env[TEST_ENV_VAR] = TEST_KEY; });
+
+    it('| 401 ha a header teljesen hianyzik', async (): Promise<void> => {
+      let thrown: any = null;
+      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
+      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-MISSING');
+    });
+
+    it('| 401 ha a header rossz erteku', async (): Promise<void> => {
+      let thrown: any = null;
+      try {
+        await svc.verify(mockReq({ 'x-admin-api-key': 'wrong-key' }), mockRes());
+      } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
+      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-INVALID');
+    });
+
+    it('| 401 length-mismatch eseten is (timing-safe path)', async (): Promise<void> => {
+      let thrown: any = null;
+      try {
+        await svc.verify(mockReq({ 'x-admin-api-key': 'short' }), mockRes());
+      } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
+      expect(DyFM_Error.getErrorCode(thrown)).toContain('DyNTS-AAK-INVALID');
+    });
+  });
+
+  describe('| verify() — happy paths', (): void => {
+    beforeEach((): void => { process.env[TEST_ENV_VAR] = TEST_KEY; });
+
+    it('| silent pass ha az x-admin-api-key header egyezik', async (): Promise<void> => {
+      await expectAsync(
+        svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
+      ).toBeResolved();
+    });
+
+    it('| silent pass Authorization Bearer fallback-bol (default engedelyezve)', async (): Promise<void> => {
+      await expectAsync(
+        svc.verify(mockReq({ authorization: `Bearer ${TEST_KEY}` }), mockRes()),
+      ).toBeResolved();
+    });
+
+    it('| silent pass Authorization Bearer kis-nagybetu case-insensitive', async (): Promise<void> => {
+      await expectAsync(
+        svc.verify(mockReq({ authorization: `bearer ${TEST_KEY}` }), mockRes()),
+      ).toBeResolved();
+    });
+  });
+
+  describe('| configure() — overrides', (): void => {
+    it('| custom envVarName-bol olvas', async (): Promise<void> => {
+      svc.configure({ envVarName: 'MY_CUSTOM_KEY' });
+      process.env['MY_CUSTOM_KEY'] = TEST_KEY;
+
+      await expectAsync(
+        svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
+      ).toBeResolved();
+
+      delete process.env['MY_CUSTOM_KEY'];
+    });
+
+    it('| custom headerName-rol olvas', async (): Promise<void> => {
+      process.env[TEST_ENV_VAR] = TEST_KEY;
+      svc.configure({ headerName: 'x-my-admin' });
+
+      // Default x-admin-api-key MOSTANTOL NEM mukodik
+      let thrown: any = null;
+      try {
+        await svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes());
+      } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
+
+      // Az uj header viszont igen
+      await expectAsync(
+        svc.verify(mockReq({ 'x-my-admin': TEST_KEY }), mockRes()),
+      ).toBeResolved();
+    });
+
+    it('| allowAuthorizationBearer=false letiltja a Bearer fallback-et', async (): Promise<void> => {
+      process.env[TEST_ENV_VAR] = TEST_KEY;
+      svc.configure({ allowAuthorizationBearer: false });
+
+      let thrown: any = null;
+      try {
+        await svc.verify(mockReq({ authorization: `Bearer ${TEST_KEY}` }), mockRes());
+      } catch (e) { thrown = e; }
+      expect(thrown).not.toBeNull();
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(401);
+    });
+
+    it('| configure() partial override — a tobbi mezo default marad', (): void => {
+      svc.configure({ headerName: 'x-only-header' });
+      const config = svc.getConfig();
+      expect(config.headerName).toBe('x-only-header');
+      expect(config.envVarName).toBe('DYNTS_ADMIN_API_KEY');
+      expect(config.allowAuthorizationBearer).toBe(true);
+    });
+
+    it('| configure() headerName lowercase-re normalizal', (): void => {
+      svc.configure({ headerName: 'X-Mixed-Case-Header' });
+      expect(svc.getConfig().headerName).toBe('x-mixed-case-header');
+    });
+  });
+
+  describe('| env-read-on-each-call (dynamic)', (): void => {
+    it('| env var update kozben hat: install-utani env-modositas ervenyes', async (): Promise<void> => {
+      delete process.env[TEST_ENV_VAR];
+      // Elso hivas: env hianyzik → 500
+      let thrown: any = null;
+      try { await svc.verify(mockReq({}), mockRes()); } catch (e) { thrown = e; }
+      expect(DyFM_Error.getErrorStatus(thrown)).toBe(500);
+
+      // Most allitsuk be az env-et
+      process.env[TEST_ENV_VAR] = TEST_KEY;
+
+      // Masodik hivas helyes header-rel → pass
+      await expectAsync(
+        svc.verify(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
+      ).toBeResolved();
+    });
+  });
+
+  describe('| .verify binding', (): void => {
+    it('| verify atadhato preProcesses-be detached method-kent (this-binding megtarttva)', async (): Promise<void> => {
+      process.env[TEST_ENV_VAR] = TEST_KEY;
+      const detached: (req: Request, res: Response) => Promise<void> = svc.verify;
+      // NEM call-ban svc.verify(...) hanem szabad fuggveny-kent — bindelt this-re kell hagyatkozni
+      await expectAsync(
+        detached(mockReq({ 'x-admin-api-key': TEST_KEY }), mockRes()),
+      ).toBeResolved();
+    });
+  });
+});