@mug-lab/cookie-auth-proxy 0.1.0

package/config.json

@@ -0,0 +1,43 @@
+{
+  "listenHost": "localhost",
+  "listenPort": 4300,
+  "clientOrigin": "http://localhost:8080",
+  "apiOrigin": "",
+  "apiOriginAllowedPatterns": [],
+  "adminNotice": "",
+  "apiPathPatterns": [
+    "^/api(?:/|$)"
+  ],
+  "apiPathExcludes": [
+    "^/$",
+    "^/favicon\\.ico$",
+    "^/(?:assets|static)(?:/|$)",
+    "^/sockjs-node(?:/|$)"
+  ],
+  "preserveLocationHeaderPatterns": [],
+  "locationHeaderQueryOverrides": [],
+  "apiCookie": "sessionId=",
+  "sensitiveHeaderNames": [
+    "authorization",
+    "cookie",
+    "proxy-authorization",
+    "set-cookie",
+    "x-api-key",
+    "x-auth-token"
+  ],
+  "sensitiveCookieNames": [],
+  "startupStubImportDir": "stubs",
+  "startupOverrideImportDir": "overrides",
+  "serverAppPath": "/",
+  "adminHost": "localhost",
+  "adminPort": 4301,
+  "historyLimit": 200,
+  "maxAdminBodyBytes": 1048576,
+  "maxRequestBodyInspectionBytes": 10485760,
+  "maxResponseBodyRewriteBytes": 52428800,
+  "maxHistoryBodyBytes": 524288,
+  "allowRemoteAccess": false,
+  "stubsEnabled": false,
+  "jsonOverridesEnabled": false,
+  "logLevel": "info"
+}

package/cookie-auth-proxy.config.example.json

@@ -0,0 +1,43 @@
+{
+  "listenHost": "localhost",
+  "listenPort": 4300,
+  "clientOrigin": "http://localhost:8080",
+  "apiOrigin": "https://api.invalid",
+  "apiOriginAllowedPatterns": [],
+  "adminNotice": "",
+  "apiPathPatterns": [
+    "^/api(?:/|$)"
+  ],
+  "apiPathExcludes": [
+    "^/$",
+    "^/favicon\\.ico$",
+    "^/(?:assets|static)(?:/|$)",
+    "^/sockjs-node(?:/|$)"
+  ],
+  "preserveLocationHeaderPatterns": [],
+  "locationHeaderQueryOverrides": [],
+  "apiCookie": "sessionId=",
+  "sensitiveHeaderNames": [
+    "authorization",
+    "cookie",
+    "proxy-authorization",
+    "set-cookie",
+    "x-api-key",
+    "x-auth-token"
+  ],
+  "sensitiveCookieNames": [],
+  "startupStubImportDir": "cookie-auth-proxy/stubs",
+  "startupOverrideImportDir": "cookie-auth-proxy/overrides",
+  "serverAppPath": "/",
+  "adminHost": "localhost",
+  "adminPort": 4301,
+  "historyLimit": 200,
+  "maxAdminBodyBytes": 1048576,
+  "maxRequestBodyInspectionBytes": 10485760,
+  "maxResponseBodyRewriteBytes": 52428800,
+  "maxHistoryBodyBytes": 524288,
+  "allowRemoteAccess": false,
+  "stubsEnabled": false,
+  "jsonOverridesEnabled": false,
+  "logLevel": "info"
+}

package/overrides/README.md

@@ -0,0 +1,4 @@
+Place exported JSON override files in this directory to load them at proxy startup.
+
+Files are loaded in filename order. Use prefixes such as `010-user-role.json`
+when you need predictable override priority.

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@mug-lab/cookie-auth-proxy",
+  "version": "0.1.0",
+  "description": "Local development proxy for cookie-authenticated web apps.",
+  "type": "commonjs",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mug-lab/cookie-auth-proxy.git"
+  },
+  "bugs": {
+    "url": "https://github.com/mug-lab/cookie-auth-proxy/issues"
+  },
+  "homepage": "https://github.com/mug-lab/cookie-auth-proxy#readme",
+  "bin": {
+    "cookie-auth-proxy": "src/proxy.js"
+  },
+  "files": [
+    "src",
+    "README.md",
+    "SECURITY.md",
+    "config.json",
+    "cookie-auth-proxy.config.example.json",
+    "stubs/README.md",
+    "overrides/README.md"
+  ],
+  "scripts": {
+    "start": "node src/proxy.js --config config.json",
+    "start:example": "node src/proxy.js --config cookie-auth-proxy.config.example.json",
+    "test": "node test/check-syntax.js && node --test"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}

package/src/admin/admin.css

@@ -0,0 +1,508 @@
+* {
+  box-sizing: border-box;
+}
+:root {
+  --app-header-height: 46px;
+  --admin-notice-height: 0px;
+  --right-pane-left: 0px;
+  --right-pane-width: 100vw;
+  --right-sticky-height: 0px;
+  --sticky-top: var(--app-header-height);
+}
+html,
+body {
+  min-height: 100%;
+}
+body:has(.admin-notice:not(.hidden)) {
+  --admin-notice-height: 40px;
+  --sticky-top: calc(var(--app-header-height) + var(--admin-notice-height));
+}
+body {
+  margin: 0;
+  font-family: Arial, sans-serif;
+  color: #1d2733;
+  background: #f5f7fa;
+}
+header {
+  background: #192433;
+  color: #fff;
+  padding: 14px 20px;
+  position: sticky;
+  top: 0;
+  z-index: 100;
+}
+.admin-notice {
+  background: #fff3d6;
+  border-bottom: 1px solid #e8b75c;
+  color: #754600;
+  font-size: 14px;
+  font-weight: 700;
+  padding: 10px 20px;
+  position: sticky;
+  top: var(--app-header-height);
+  white-space: pre-wrap;
+  z-index: 90;
+}
+main {
+  display: grid;
+  grid-template-columns: minmax(420px, 460px) 1fr;
+  gap: 16px;
+  padding: 16px;
+  align-items: start;
+}
+main > div {
+  max-height: calc(100vh - var(--sticky-top) - 32px);
+  overflow: auto;
+  padding-right: 4px;
+  position: sticky;
+  top: calc(var(--sticky-top) + 16px);
+}
+section {
+  background: #fff;
+  border: 1px solid #d8e0ea;
+  border-radius: 8px;
+  padding: 16px;
+  margin-bottom: 16px;
+}
+.main-panel {
+  overflow: visible;
+}
+h1 {
+  font-size: 18px;
+  margin: 0;
+}
+h2 {
+  font-size: 15px;
+  margin: 0 0 12px;
+}
+h3 {
+  font-size: 13px;
+  margin: 12px 0 6px;
+}
+label {
+  display: block;
+  font-size: 12px;
+  font-weight: 700;
+  margin: 12px 0 4px;
+}
+input,
+textarea,
+select {
+  width: 100%;
+  border: 1px solid #b9c5d3;
+  border-radius: 6px;
+  padding: 8px;
+  font: inherit;
+}
+textarea {
+  min-height: 96px;
+  resize: vertical;
+}
+button {
+  border: 1px solid #9fb0c2;
+  border-radius: 6px;
+  background: #fff;
+  cursor: pointer;
+  padding: 8px 10px;
+  font: inherit;
+  transition:
+    background 0.12s ease,
+    border-color 0.12s ease,
+    box-shadow 0.12s ease,
+    transform 0.06s ease;
+}
+button:hover:not(:disabled) {
+  border-color: #2457d6;
+  box-shadow: 0 1px 5px rgba(36, 87, 214, 0.18);
+}
+button:active:not(:disabled) {
+  transform: translateY(1px);
+  background: #e9efff;
+}
+button.primary {
+  background: #2457d6;
+  border-color: #2457d6;
+  color: #fff;
+}
+button.primary:hover:not(:disabled) {
+  background: #1d49b7;
+}
+button.danger {
+  background: #fff7f7;
+  border-color: #e0a4a4;
+  color: #8b1e1e;
+}
+button.danger:hover:not(:disabled) {
+  border-color: #c84040;
+  color: #9f1d1d;
+  box-shadow: 0 1px 5px rgba(200, 64, 64, 0.18);
+}
+button:disabled {
+  cursor: not-allowed;
+  opacity: 0.45;
+}
+button.flash {
+  animation: flash 0.42s ease;
+}
+button.icon {
+  flex: 0 0 auto;
+  min-width: 34px;
+  height: 34px;
+  padding: 0 8px;
+  line-height: 1;
+}
+.external-link-icon {
+  display: inline-block;
+  font-size: 12px;
+  line-height: 1;
+  margin-left: 6px;
+  transform: translateY(-1px);
+}
+@keyframes flash {
+  0% {
+    box-shadow: 0 0 0 0 rgba(36, 87, 214, 0.5);
+  }
+  100% {
+    box-shadow: 0 0 0 8px rgba(36, 87, 214, 0);
+  }
+}
+.row {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+}
+.row > * {
+  flex: 1;
+}
+.muted {
+  color: #637083;
+  font-size: 12px;
+}
+.tabs {
+  display: flex;
+  gap: 8px;
+  border-bottom: 1px solid #d8e0ea;
+  margin: 0 0 12px;
+  background: #fff;
+  padding: 0 0 8px;
+}
+.tab {
+  flex: 0 0 auto;
+  transition: none;
+}
+.tab.active {
+  background: #192433;
+  border-color: #192433;
+  color: #fff;
+}
+.panel {
+  display: none;
+}
+.panel.active {
+  display: block;
+  padding-top: var(--right-sticky-height);
+}
+.panel-sticky {
+  background: #fff;
+  border: 1px solid #d8e0ea;
+  border-top: 0;
+  border-bottom-color: #eef2f7;
+  border-radius: 0 0 8px 8px;
+  left: var(--right-pane-left);
+  margin: 0;
+  padding: 0 16px 12px;
+  position: fixed;
+  top: calc(var(--sticky-top) - 4px);
+  width: var(--right-pane-width);
+  z-index: 20;
+  box-shadow:
+    0 8px 0 #fff,
+    0 2px 8px rgba(25, 36, 51, 0.08);
+}
+.scroll-area {
+  overflow: visible;
+}
+.toolbar {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 12px;
+}
+.filters {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+}
+.filters button {
+  padding: 6px 9px;
+}
+.filters button.active {
+  background: #e8eef8;
+  border-color: #6c82a0;
+  font-weight: 700;
+}
+.history,
+.stubs,
+.overrides {
+  display: grid;
+  gap: 8px;
+}
+.entry {
+  border: 1px solid #d8e0ea;
+  border-radius: 6px;
+  padding: 10px;
+}
+.filter-summary {
+  align-items: center;
+  color: #7a8797;
+  display: flex;
+  font-size: 12px;
+  gap: 10px;
+  justify-content: center;
+  padding: 2px 0;
+}
+.filter-summary::before,
+.filter-summary::after {
+  background: #d8e0ea;
+  content: "";
+  flex: 1;
+  height: 1px;
+  max-width: 160px;
+}
+.entry summary {
+  cursor: pointer;
+  font-weight: 700;
+  list-style-position: outside;
+  margin-left: 18px;
+  padding-left: 4px;
+}
+.entry summary .entry-head {
+  display: inline-flex;
+  width: calc(100% - 4px);
+  vertical-align: middle;
+}
+.entry.status-2xx {
+  border-color: #98c7ff;
+  background: #f2f8ff;
+}
+.entry.status-3xx {
+  border-color: #a7d9dd;
+  background: #f2fbfc;
+}
+.entry.status-4xx {
+  border-color: #f1c28d;
+  background: #fff7ed;
+}
+.entry.status-5xx {
+  border-color: #f0a0a0;
+  background: #fff1f1;
+}
+.entry.disabled-stub {
+  filter: grayscale(0.75);
+  opacity: 0.58;
+  background-image: repeating-linear-gradient(
+    135deg,
+    rgba(99, 112, 131, 0.08) 0 8px,
+    transparent 8px 16px
+  );
+}
+.entry-head {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+  justify-content: space-between;
+}
+.entry-title {
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+.entry-actions {
+  display: flex;
+  gap: 6px;
+  align-items: center;
+  margin-left: 8px;
+}
+.toolbar-group {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  align-items: center;
+}
+.section-head {
+  align-items: center;
+  display: flex;
+  gap: 8px;
+  justify-content: space-between;
+}
+.editor-section {
+  border-top: 1px solid #d8e0ea;
+  margin-top: 14px;
+  padding-top: 12px;
+}
+.editor-section h3 {
+  color: #334155;
+  font-size: 12px;
+  letter-spacing: 0;
+  margin: 0 0 8px;
+  text-transform: uppercase;
+}
+.error-message {
+  color: #9f1d1d;
+  font-weight: 700;
+}
+.runtime-actions {
+  display: flex;
+  gap: 8px;
+  margin-top: 10px;
+}
+.runtime-group {
+  border-top: 1px solid #d8e0ea;
+  margin-top: 14px;
+  padding-top: 14px;
+}
+.runtime-group:first-of-type {
+  border-top: 0;
+  margin-top: 0;
+  padding-top: 0;
+}
+.runtime-group h3 {
+  color: #334155;
+  font-size: 12px;
+  letter-spacing: 0;
+  margin: 0 0 10px;
+  text-transform: uppercase;
+}
+.runtime-command-group {
+  display: grid;
+  gap: 10px;
+}
+.runtime-command-group .runtime-actions {
+  margin-top: 0;
+}
+.cookie-header {
+  color: #637083;
+  display: grid;
+  font-size: 11px;
+  font-weight: 700;
+  gap: 8px;
+  grid-template-columns: minmax(120px, 0.85fr) minmax(170px, 1.15fr) 48px 36px;
+  margin-top: 8px;
+  text-transform: uppercase;
+}
+.cookie-list {
+  display: grid;
+  gap: 8px;
+  margin-top: 6px;
+}
+.cookie-row {
+  display: grid;
+  grid-template-columns: minmax(120px, 0.85fr) minmax(170px, 1.15fr) 48px 36px;
+  gap: 8px;
+  align-items: center;
+}
+.cookie-row input {
+  min-width: 0;
+}
+.cookie-row button {
+  height: 34px;
+  min-width: 0;
+  padding: 0;
+}
+.cookie-actions {
+  margin-top: 10px;
+}
+.cookie-actions button {
+  flex: 1;
+}
+.hidden {
+  display: none;
+}
+pre {
+  white-space: pre-wrap;
+  word-break: break-word;
+  background: #101820;
+  color: #d7f2ff;
+  border-radius: 6px;
+  padding: 10px;
+  overflow: visible;
+}
+.pill {
+  display: inline-block;
+  border-radius: 999px;
+  background: #edf2f7;
+  padding: 2px 8px;
+  font-size: 12px;
+  margin-left: 6px;
+}
+.status-2xx .status-pill {
+  background: #d9ecff;
+  color: #104f91;
+}
+.status-3xx .status-pill {
+  background: #d7f0f2;
+  color: #28666b;
+}
+.status-4xx .status-pill {
+  background: #ffe4bf;
+  color: #8a4a00;
+}
+.status-5xx .status-pill {
+  background: #ffd2d2;
+  color: #8b1e1e;
+}
+.switch {
+  align-items: center;
+  display: inline-flex;
+  gap: 8px;
+  flex: 0 0 auto;
+}
+.switch input {
+  display: none;
+}
+.slider {
+  width: 42px;
+  height: 22px;
+  background: #b6c0ce;
+  border-radius: 999px;
+  position: relative;
+  transition: background 0.12s ease;
+}
+.slider::after {
+  content: "";
+  width: 18px;
+  height: 18px;
+  background: #fff;
+  border-radius: 50%;
+  left: 2px;
+  top: 2px;
+  position: absolute;
+  transition: transform 0.12s ease;
+  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25);
+}
+.switch input:checked + .slider {
+  background: #2457d6;
+}
+.switch input:checked + .slider::after {
+  transform: translateX(20px);
+}
+@media (max-width: 900px) {
+  main {
+    grid-template-columns: 1fr;
+  }
+  main > div {
+    max-height: none;
+    overflow: visible;
+    position: static;
+    top: auto;
+  }
+  .panel-sticky {
+    position: static;
+    top: auto;
+    width: auto;
+  }
+  .panel.active {
+    padding-top: 0;
+  }
+}