@grasp-labs/ds-microfrontends-integration 0.7.0 → 0.8.0

package/README.md

@@ -220,41 +220,19 @@ npm install
 
 ### Dev auth middleware
 
-For local Express work you can protect every route with the provided development
-login middleware:
+`devAuthMiddleware` adds a quick login screen to your local Express setup and reuses the returned token for every backend call. Mount it before anything that proxies to your APIs so outbound requests get `Authorization: Bearer <token>` automatically.
 
 ```ts
 import express from "express";
-import { devLoginMiddleware } from "@grasp-labs/ds-microfrontends-integration/dev";
+import { devAuthMiddleware } from "@grasp-labs/ds-microfrontends-integration/dev";
 
 const app = express();
-app.use(devLoginMiddleware());
-```
-
-To skip the login form entirely, preload `DEV_AUTH_TOKEN` (for example by adding `DEV_AUTH_TOKEN=<value>` to a `.env` file or exporting it in your shell) before starting the server.
-
-Once you have a token you can forward it to internal services through your dev proxy. For example:
 
-```ts
-import { DEV_AUTH_TOKEN } from "@grasp-labs/ds-microfrontends-integration/dev";
-import { createProxyMiddleware } from "http-proxy-middleware";
-
-expressInstance.use(
-  `${BASE_PATH}/api/ds-config-api`,
-  createProxyMiddleware({
-    target: "https://your-backend-url.com",
-    on: {
-      proxyReq: (proxyReq) => {
-        const token = DEV_AUTH_TOKEN.get();
-        if (token) {
-          proxyReq.setHeader("Authorization", `Bearer ${token}`);
-        }
-      },
-    },
-  }),
-);
+app.use(devAuthMiddleware());
 ```
 
+Skip the form entirely by setting `DEV_AUTH_TOKEN` (env var or `.env` file) before starting the server. Need a token? Call the dev auth endpoint with your usual credentials and copy the `access_token`.
+
 ### Scripts
 
 - `npm run build` - Build the library

package/dist/dev/express-auth-middleware.d.ts

@@ -19,29 +19,25 @@ export type DevLoginOptions = {
     authEndpoint?: string;
 };
 /**
- * Creates an Express middleware that guards all routes behind a simple dev login.
- * Users are redirected to the login page unless a `DEV_AUTH_TOKEN` is present.
- * Configuration paths are normalized so callers can pass either "foo" or "/foo".
- * The middleware internally parses form submissions via `express.urlencoded({ extended: true })`.
+ * Simple Express middleware that forces a one-page dev login and then injects
+ * `Authorization: Bearer <token>` for subsequent requests. Mount it ahead of
+ * any backend proxy (e.g. `createProxyMiddleware`) so outgoing calls receive
+ * the token.
  *
- * To skip the HTML login entirely during local development, preload
- * `DEV_AUTH_TOKEN` (for example via a `.env` file or by exporting it before
- * starting Express). You can obtain a valid token by calling the dev auth login
- * endpoint (defaults to `https://auth-dev.grasp-daas.com/rest-auth/login/`,
- * overridable via {@link DevLoginOptions.authEndpoint}) with the same
- * credentials you would submit through the form and copying the returned
- * `access_token`.
+ * Skip the login screen by setting `DEV_AUTH_TOKEN` before starting your app
+ * (via `.env` or the shell). Tokens can be created by calling the dev auth
+ * endpoint with your normal credentials and copying the `access_token`.
  *
  * @example
  * ```typescript
  * import express from 'express';
- * import { devLoginMiddleware } from '@grasp-labs/ds-microfrontends-integration/dev';
+ * import { devAuthMiddleware } from '@grasp-labs/ds-microfrontends-integration/dev';
  *
  * const app = express();
- * app.use(devLoginMiddleware());
+ * app.use(devAuthMiddleware());
  * ```
  */
-export declare function devLoginMiddleware(options?: DevLoginOptions): (req: Request, res: Response, next: NextFunction) => Promise<any>;
+export declare function devAuthMiddleware(options?: DevLoginOptions): (req: Request, res: Response, next: NextFunction) => Promise<any>;
 /**
  * Simple in-memory token store backed by process.env.
  * Preloading `DEV_AUTH_TOKEN` (e.g. via a `.env` file or shell env var) skips the login flow entirely.

package/dist/dev/express-auth-middleware.js

@@ -139,13 +139,13 @@ function E(e = {}) {
     loginPath: t = "/__login",
     redirectAfterLoginPathTo: r = "/",
     authEndpoint: n = "https://auth-dev.grasp-daas.com/rest-auth/login/"
-  } = e, o = h(t, "loginPath"), c = h(
+  } = e, o = g(t, "loginPath"), c = g(
     r,
     "redirectAfterLoginPathTo"
   ), m = k();
-  return async (s, i, l) => {
-    if (g.exists())
-      return s.path === o ? i.redirect(c) : l();
+  return async (s, i, p) => {
+    if (l.exists())
+      return s.path === o ? i.redirect(c) : (s.headers.authorization = `Bearer ${l.get()}`, p());
     if (s.path !== o)
       return i.redirect(o);
     if (s.method === "GET")
@@ -154,18 +154,18 @@ function E(e = {}) {
       try {
         await m(s, i);
       } catch (a) {
-        return l(a);
+        return p(a);
       }
-      const { email: p, password: u } = s.body ?? {};
-      if (!p || !u)
+      const { email: u, password: h } = s.body ?? {};
+      if (!u || !h)
         return d(i, o, "Email and password are required.");
       try {
         const { access_token: a } = await x({
-          email: p,
-          password: u,
+          email: u,
+          password: h,
           authEndpoint: n
         });
-        return g.set(a), i.redirect(303, c);
+        return l.set(a), i.redirect(303, c);
       } catch (a) {
         const f = `${a instanceof Error ? a.message : String(a)}`;
         return d(i, o, f);
@@ -174,11 +174,11 @@ function E(e = {}) {
     return i.status(405).send("Method Not Allowed");
   };
 }
-function h(e, t) {
+function g(e, t) {
   const r = e.trim();
   if (!r)
     throw new Error(
-      `devLoginMiddleware ${t} must be a non-empty string`
+      `devAuthMiddleware ${t} must be a non-empty string`
     );
   return r.startsWith("/") ? r : `/${r}`;
 }
@@ -229,7 +229,7 @@ async function x({
     );
   return o;
 }
-const g = {
+const l = {
   get: () => process.env.DEV_AUTH_TOKEN,
   set: (e) => {
     process.env.DEV_AUTH_TOKEN = e;
@@ -237,6 +237,6 @@ const g = {
   exists: () => typeof process.env.DEV_AUTH_TOKEN == "string" && process.env.DEV_AUTH_TOKEN.length > 0
 };
 export {
-  g as DEV_AUTH_TOKEN,
-  E as devLoginMiddleware
+  l as DEV_AUTH_TOKEN,
+  E as devAuthMiddleware
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grasp-labs/ds-microfrontends-integration",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "private": false,
   "license": "Apache-2.0",
   "type": "module",