@mastra/fastify 1.2.6 → 1.3.0-alpha.1

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @mastra/fastify
 
+## 1.3.0-alpha.1
+
+### Minor Changes
+
+- Added adapter auth middleware helpers for raw framework routes. ([#14458](https://github.com/mastra-ai/mastra/pull/14458))
+
+  Use `createAuthMiddleware({ mastra })` when you mount routes directly on a Hono, Express, Fastify, or Koa app and still want Mastra auth to run. Set `requiresAuth: false` when you need to reuse the same helper chain on a public route.
+
+  ```ts
+  app.get('/custom/protected', createAuthMiddleware({ mastra }), handler);
+  ```
+
+### Patch Changes
+
+- Updated dependencies [[`7dbd611`](https://github.com/mastra-ai/mastra/commit/7dbd611a85cb1e0c0a1581c57564268cb183d86e), [`8a738d8`](https://github.com/mastra-ai/mastra/commit/8a738d844772e14be381d54b22fd5d548ee4af42), [`41aee84`](https://github.com/mastra-ai/mastra/commit/41aee84561ceebe28bad1ecba8702d92838f67f0)]:
+  - @mastra/core@1.16.0-alpha.1
+  - @mastra/server@1.16.0-alpha.1
+
+## 1.2.7-alpha.0
+
+### Patch Changes
+
+- Updated dependencies [[`68ed4e9`](https://github.com/mastra-ai/mastra/commit/68ed4e9f118e8646b60a6112dabe854d0ef53902), [`085c1da`](https://github.com/mastra-ai/mastra/commit/085c1daf71b55a97b8ebad26623089e40055021c), [`4a75e10`](https://github.com/mastra-ai/mastra/commit/4a75e106bd31c283a1b3fe74c923610dcc46415b), [`085c1da`](https://github.com/mastra-ai/mastra/commit/085c1daf71b55a97b8ebad26623089e40055021c), [`085c1da`](https://github.com/mastra-ai/mastra/commit/085c1daf71b55a97b8ebad26623089e40055021c)]:
+  - @mastra/core@1.16.0-alpha.0
+  - @mastra/server@1.16.0-alpha.0
+
 ## 1.2.6
 
 ### Patch Changes

package/dist/auth-middleware.d.ts

@@ -0,0 +1,8 @@
+import type { Mastra } from '@mastra/core/mastra';
+import type { preHandlerHookHandler } from 'fastify';
+export interface FastifyAuthMiddlewareOptions {
+    mastra: Mastra;
+    requiresAuth?: boolean;
+}
+export declare function createAuthMiddleware({ mastra, requiresAuth, }: FastifyAuthMiddlewareOptions): preHandlerHookHandler;
+//# sourceMappingURL=auth-middleware.d.ts.map

package/dist/auth-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../src/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAgC,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEnF,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAuBD,wBAAgB,oBAAoB,CAAC,EACnC,MAAM,EACN,YAAmB,GACpB,EAAE,4BAA4B,GAAG,qBAAqB,CA2CtD"}

package/dist/index.cjs

@@ -2,6 +2,8 @@
 
 var busboy = require('@fastify/busboy');
 var serverAdapter = require('@mastra/server/server-adapter');
+var requestContext = require('@mastra/core/request-context');
+var auth = require('@mastra/server/auth');
 
 // src/index.ts
 // @__NO_SIDE_EFFECTS__
@@ -212,6 +214,65 @@ var initializer2 = (inst, issues) => {
   });
 };
 var ZodError = $constructor("ZodError", initializer2);
+function toWebRequest(request) {
+  const protocol = request.protocol || "http";
+  const host = request.headers.host || "localhost";
+  const url = `${protocol}://${host}${request.url}`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(request.headers)) {
+    if (!value) continue;
+    if (Array.isArray(value)) {
+      value.forEach((v) => headers.append(key, v));
+    } else {
+      headers.set(key, value);
+    }
+  }
+  return new globalThis.Request(url, {
+    method: request.method,
+    headers
+  });
+}
+function createAuthMiddleware({
+  mastra,
+  requiresAuth = true
+}) {
+  return async (request, reply) => {
+    if (!requiresAuth) {
+      return;
+    }
+    const authConfig = mastra.getServer()?.auth;
+    if (!authConfig) {
+      return;
+    }
+    request.requestContext ??= new requestContext.RequestContext();
+    request.mastra ??= mastra;
+    const path = String(request.url.split("?")[0] || "/");
+    const method = String(request.method || "GET");
+    const customRouteAuthConfig = new Map(request.customRouteAuthConfig ?? []);
+    customRouteAuthConfig.set(`${method}:${path}`, true);
+    const authHeader = request.headers.authorization;
+    let token = authHeader ? authHeader.replace("Bearer ", "") : null;
+    const query = request.query;
+    if (!token && query.apiKey) {
+      token = query.apiKey || null;
+    }
+    const result = await auth.coreAuthMiddleware({
+      path,
+      method,
+      getHeader: (name) => request.headers[name.toLowerCase()],
+      mastra,
+      authConfig,
+      customRouteAuthConfig,
+      requestContext: request.requestContext,
+      rawRequest: toWebRequest(request),
+      token,
+      buildAuthorizeContext: () => toWebRequest(request)
+    });
+    if (result.action === "error") {
+      return reply.status(result.status).send(result.body);
+    }
+  };
+}
 
 // src/index.ts
 var _hasPermissionPromise;
@@ -226,7 +287,7 @@ function loadHasPermission() {
   }
   return _hasPermissionPromise;
 }
-function toWebRequest(request) {
+function toWebRequest2(request) {
   const protocol = request.protocol || "http";
   const host = request.headers.host || "localhost";
   const url = `${protocol}://${host}${request.url}`;
@@ -519,8 +580,8 @@ var MastraServer = class extends serverAdapter.MastraServer {
         getHeader: (name) => request.headers[name.toLowerCase()],
         getQuery: (name) => request.query[name],
         requestContext: request.requestContext,
-        request: toWebRequest(request),
-        buildAuthorizeContext: () => toWebRequest(request)
+        request: toWebRequest2(request),
+        buildAuthorizeContext: () => toWebRequest2(request)
       });
       if (authError) {
         return reply.status(authError.status).send({ error: authError.error });
@@ -676,8 +737,8 @@ var MastraServer = class extends serverAdapter.MastraServer {
           getHeader: (name) => request.headers[name.toLowerCase()],
           getQuery: (name) => request.query[name],
           requestContext: request.requestContext,
-          request: toWebRequest(request),
-          buildAuthorizeContext: () => toWebRequest(request)
+          request: toWebRequest2(request),
+          buildAuthorizeContext: () => toWebRequest2(request)
         });
         if (authError) {
           return reply.status(authError.status).send({ error: authError.error });
@@ -795,5 +856,6 @@ var MastraServer = class extends serverAdapter.MastraServer {
 };
 
 exports.MastraServer = MastraServer;
+exports.createAuthMiddleware = createAuthMiddleware;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map