@owlmeans/api-config-server 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 OwlMeans Common — Fullstack typescript framework
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,367 @@
+# @owlmeans/api-config-server
+
+The **@owlmeans/api-config-server** package provides server-side functionality for advertising API configuration to clients in OwlMeans Common Libraries, designed for fullstack microservices and microclients development with focus on security and proper authentication and authorization.
+
+## Purpose
+
+This package serves as the server-side component of the OwlMeans configuration system that:
+
+- **Advertises service configuration** to clients through API endpoints
+- **Filters sensitive information** before sending configuration to clients
+- **Supports multi-service architecture** by exposing service endpoint information
+- **Integrates with server modules** for seamless API endpoint creation
+- **Provides secure configuration sharing** with proper filtering of secrets and internal data
+
+## Core Concepts
+
+### Configuration Advertisement
+The server advertises its configuration to clients through a REST API endpoint, allowing clients to discover available services, their endpoints, and relevant configuration data.
+
+### Information Filtering
+The package carefully filters configuration data to ensure sensitive information (like secrets, API keys, and internal configurations) is not exposed to clients.
+
+### Service Discovery
+Clients can discover all available services, their hosts, ports, and base paths through the configuration API, enabling dynamic service discovery.
+
+### Plugin and Record Sharing
+The server can share frontend-compatible plugins and allowed configuration records with clients.
+
+## API Reference
+
+### Modules
+
+#### `modules`
+
+Exported server modules array containing the elevated API config module with server-side handler.
+
+```typescript
+import { modules } from '@owlmeans/api-config-server'
+
+// Register all server API config modules
+context.registerModules(modules)
+```
+
+### Actions
+
+#### `advertise`
+
+The main action handler that processes API configuration requests and returns filtered configuration.
+
+```typescript
+import { advertise } from '@owlmeans/api-config-server'
+
+// This handler is automatically attached to the API config module
+// It processes requests and returns filtered configuration
+```
+
+**Returns:** `ApiConfig` object containing:
+- `debug`: Debug configuration (filtered)
+- `brand`: Branding information
+- `services`: Service endpoint information (host, port, base, service name, type)
+- `plugins`: Frontend-compatible plugins
+- `[CONFIG_RECORD]`: Allowed configuration records
+- `oidc`: OIDC configuration (filtered, no secrets)
+- Additional safe configuration fields
+
+**Filtering Behavior:**
+- Removes sensitive keys defined in `notAdvertizedConfigKeys`
+- Filters service configurations to include only public information
+- Removes secrets from OIDC configuration
+- Only includes frontend-compatible plugins
+- Only includes allowed configuration record types
+
+## Configuration Filtering
+
+The package implements strict filtering to protect sensitive information:
+
+### Service Information
+From each service configuration, only these fields are shared:
+- `service`: Service name
+- `type`: Service type (Frontend/Backend)
+- `host`: Service host
+- `port`: Service port
+- `base`: Base path
+
+### OIDC Configuration
+For OIDC configuration, sensitive fields are filtered out:
+- **Removed**: `secret`, `apiClientId`
+- **Kept**: `clientCookie`, public provider information
+- **Internal providers**: Completely filtered out (where `internal: true`)
+
+### Plugin Filtering
+Only plugins marked as `AppType.Frontend` are included in the advertised configuration.
+
+### Configuration Records
+Only configuration records with types listed in `allowedConfigRecords` are shared with clients.
+
+## Usage Examples
+
+### Basic Server Setup
+
+```typescript
+import { makeServerContext, makeServerConfig } from '@owlmeans/server-context'
+import { modules } from '@owlmeans/api-config-server'
+import { AppType } from '@owlmeans/context'
+
+// Create server configuration
+const config = makeServerConfig(AppType.Backend, 'config-server', {
+  host: 'localhost',
+  port: 3000,
+  services: {
+    'user-service': {
+      service: 'user-service',
+      type: AppType.Backend,
+      host: 'users.api.com',
+      port: 8080,
+      base: '/api/v1'
+    },
+    'auth-service': {
+      service: 'auth-service', 
+      type: AppType.Backend,
+      host: 'auth.api.com',
+      port: 8081,
+      secret: 'very-secret-key' // This will be filtered out
+    }
+  },
+  debug: { all: true }
+})
+
+// Create and configure context
+const context = makeServerContext(config)
+
+// Register API config modules
+context.registerModules(modules)
+
+// Configure and initialize
+context.configure()
+await context.init()
+
+// API config endpoint is now available at the configured route
+```
+
+### Integration with Express
+
+```typescript
+import express from 'express'
+import { modules } from '@owlmeans/api-config-server'
+import { API_CONFIG } from '@owlmeans/api-config'
+
+const app = express()
+
+// After context initialization
+const configModule = context.module(API_CONFIG)
+
+// The module has a handler that returns filtered configuration
+app.get('/api/config', async (req, res) => {
+  try {
+    // The advertise handler is automatically attached
+    const request = adaptExpressRequest(req)
+    const response = provideResponse()
+    
+    await configModule.handle(request, response)
+    
+    if (response.error) {
+      res.status(500).json({ error: response.error.message })
+    } else {
+      res.json(response.value)
+    }
+  } catch (error) {
+    res.status(500).json({ error: 'Configuration unavailable' })
+  }
+})
+```
+
+### Custom Configuration Filtering
+
+```typescript
+import { makeServerConfig } from '@owlmeans/server-context'
+import { modules } from '@owlmeans/api-config-server'
+
+const config = makeServerConfig(AppType.Backend, 'api-server', {
+  // Public configuration (will be shared)
+  brand: {
+    name: 'My Application',
+    version: '1.0.0'
+  },
+  
+  // Service configuration (filtered)
+  services: {
+    'payment-service': {
+      service: 'payment-service',
+      type: AppType.Backend,
+      host: 'payments.api.com',
+      port: 443,
+      apiKey: 'secret-api-key', // Will be filtered out
+      publicEndpoint: '/api/v1' // Will be included as 'base'
+    }
+  },
+  
+  // OIDC configuration (partially filtered)
+  oidc: {
+    clientCookie: 'session-cookie', // Will be shared
+    providers: [
+      {
+        name: 'google',
+        clientId: 'public-client-id', // Will be shared
+        secret: 'client-secret', // Will be filtered out
+        issuer: 'https://accounts.google.com'
+      },
+      {
+        name: 'internal-auth',
+        internal: true, // Entire provider will be filtered out
+        clientId: 'internal-client',
+        secret: 'internal-secret'
+      }
+    ]
+  },
+  
+  // Plugins (only frontend plugins shared)
+  plugins: [
+    {
+      name: 'frontend-plugin',
+      type: AppType.Frontend,
+      config: { theme: 'dark' }
+    },
+    {
+      name: 'backend-plugin', 
+      type: AppType.Backend,
+      config: { database: 'secret-connection' } // Will be filtered out
+    }
+  ]
+})
+```
+
+### Multi-Service Architecture
+
+```typescript
+const config = makeServerConfig(AppType.Backend, 'gateway-server', {
+  services: {
+    'user-service': {
+      service: 'user-service',
+      type: AppType.Backend,
+      host: 'users.internal.com',
+      port: 8080,
+      base: '/users'
+    },
+    'order-service': {
+      service: 'order-service', 
+      type: AppType.Backend,
+      host: 'orders.internal.com',
+      port: 8081,
+      base: '/orders'
+    },
+    'notification-service': {
+      service: 'notification-service',
+      type: AppType.Backend, 
+      host: 'notifications.internal.com',
+      port: 8082,
+      base: '/notifications'
+    }
+  }
+})
+
+const context = makeServerContext(config)
+context.registerModules(modules)
+await context.configure().init()
+
+// Clients can now discover all services through the config API
+```
+
+## Security Considerations
+
+### Information Filtering
+The package implements multiple layers of security:
+
+1. **Automatic Secret Filtering** - Known secret fields are automatically removed
+2. **Service Information Limiting** - Only essential service discovery information is shared
+3. **OIDC Security** - Client secrets and internal configurations are filtered
+4. **Plugin Type Filtering** - Only frontend-compatible plugins are shared
+5. **Configuration Record Filtering** - Only explicitly allowed record types are shared
+
+### Best Practices
+
+1. **Minimize exposed information** - Only include necessary configuration in server config
+2. **Use environment variables** - Store secrets in environment variables, not configuration
+3. **Implement authentication** - Protect the config endpoint with appropriate authentication
+4. **Monitor access** - Log and monitor who accesses configuration endpoints
+5. **Regular security audits** - Review what information is being exposed
+
+### Example Security Setup
+
+```typescript
+import { modules } from '@owlmeans/api-config-server'
+import { authenticatedGuard } from '@owlmeans/server-auth'
+
+// Protect configuration endpoint with authentication
+const configModule = context.module(API_CONFIG)
+configModule.guards = ['authenticated']
+
+// Or use custom middleware for additional security
+app.get('/api/config', authenticateRequest, async (req, res) => {
+  // Only authenticated clients can access configuration
+})
+```
+
+## Integration Patterns
+
+### Microservices Gateway
+
+```typescript
+// Gateway server that advertises all microservice endpoints
+const gatewayConfig = makeServerConfig(AppType.Backend, 'api-gateway', {
+  services: {
+    ...userServiceConfig,
+    ...orderServiceConfig,
+    ...paymentServiceConfig,
+    ...notificationServiceConfig
+  }
+})
+
+// Clients connect to gateway and get all service information
+```
+
+### Development vs Production
+
+```typescript
+const isDevelopment = process.env.NODE_ENV === 'development'
+
+const config = makeServerConfig(AppType.Backend, 'api-server', {
+  debug: isDevelopment ? { all: true } : {},
+  services: {
+    'user-service': {
+      service: 'user-service',
+      type: AppType.Backend,
+      host: isDevelopment ? 'localhost' : 'users.prod.com',
+      port: isDevelopment ? 3001 : 443,
+      base: '/api/v1'
+    }
+  }
+})
+```
+
+## Error Handling
+
+The package handles configuration errors gracefully:
+
+- **Missing configuration** - Returns empty or default values
+- **Invalid service configs** - Filters out malformed service entries
+- **Plugin errors** - Continues processing even if plugin filtering fails
+- **OIDC parsing errors** - Falls back to basic configuration
+
+## Related Packages
+
+- [`@owlmeans/api-config`](../api-config) - Common API config module definitions
+- [`@owlmeans/api-config-client`](../api-config-client) - Client-side configuration fetching
+- [`@owlmeans/server-context`](../server-context) - Server-side context management
+- [`@owlmeans/server-module`](../server-module) - Server-side module system
+- [`@owlmeans/config`](../config) - Configuration management utilities
+
+## Dependencies
+
+This package depends on:
+- `@owlmeans/api-config` - Common API config definitions and constants
+- `@owlmeans/server-module` - Server-side module elevation and handling
+- `@owlmeans/server-context` - Server context types and configuration
+- `@owlmeans/server-api` - Request handling utilities
+- `@owlmeans/config` - Configuration management and plugin types
+- `@owlmeans/context` - Core context functionality and types

package/build/actions/config.d.ts

@@ -0,0 +1,4 @@
+import type { RefedModuleHandler } from '@owlmeans/server-module';
+import type { ApiConfig } from '@owlmeans/api-config';
+export declare const advertise: RefedModuleHandler<ApiConfig>;
+//# sourceMappingURL=config.d.ts.map

package/build/actions/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/actions/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AASrD,eAAO,MAAM,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAuClD,CAAA"}

package/build/actions/config.js

@@ -0,0 +1,34 @@
+import { notAdvertizedConfigKeys, allowedConfigRecords } from '@owlmeans/api-config';
+import { handleRequest } from '@owlmeans/server-api';
+import { PLUGINS } from '@owlmeans/config';
+import { AppType, CONFIG_RECORD } from '@owlmeans/context';
+export const advertise = handleRequest(async (_, ctx) => {
+    const apiConfig = {
+        debug: ctx.cfg.debug ?? {},
+        brand: {},
+        services: Object.fromEntries(Object.entries(ctx.cfg.services ?? {}).map(([service, config]) => [
+            service, {
+                service: config.service,
+                type: config.type,
+                host: config.host,
+                port: config.port,
+                base: config.base
+            }
+        ])),
+        plugins: (ctx.cfg[PLUGINS] ?? [])
+            .filter((plugin) => plugin.type === AppType.Frontend),
+        [CONFIG_RECORD]: (ctx.cfg[CONFIG_RECORD] ?? []).filter((record) => record.recordType != null && allowedConfigRecords.includes(record.recordType)),
+        ...(Object.fromEntries(Object.entries(ctx.cfg).filter(([key]) => ![
+            'debug', 'services', PLUGINS, ...notAdvertizedConfigKeys
+        ].includes(key)))),
+        ...("oidc" in ctx.cfg ? {
+            oidc: {
+                clientCookie: ctx.cfg.oidc.clientCookie,
+                providers: ctx.cfg.oidc.providers?.map(provider => Object.fromEntries(Object.entries(provider)
+                    .filter(([key]) => !['secret', 'apiClientId'].includes(key)))).filter(provider => provider.internal !== true),
+            }
+        } : {})
+    };
+    return apiConfig;
+});
+//# sourceMappingURL=config.js.map

package/build/actions/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/actions/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAG1D,MAAM,CAAC,MAAM,SAAS,GAAkC,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;IACrF,MAAM,SAAS,GAAc;QAC3B,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAChF,OAAO,EAAE;gBACP,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB;SACF,CAAC,CACH;QACD,OAAO,EAAE,CAAE,GAAG,CAAC,GAAiD,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aAC7E,MAAM,CAAC,CAAC,MAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC;QACrE,CAAC,aAAa,CAAC,EAAE,CAAE,GAAG,CAAC,GAAiD,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACnG,CAAC,MAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CACxG;QACD,GAAG,CACD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,uBAAuB;SACzD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACjB,CACF;QACD,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,IAAI,EAAE;gBACJ,YAAY,EAAG,GAAG,CAAC,GAAG,CAAC,IAAkC,CAAC,YAAY;gBACtE,SAAS,EAAG,GAAG,CAAC,GAAG,CAAC,IAAgC,CAAC,SAAS,EAAE,GAAG,CACjE,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;qBACpD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAChE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC;aACjD;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IAED,OAAO,SAAS,CAAA;AAClB,CAAC,CAAC,CAAA"}

package/build/actions/index.d.ts

@@ -0,0 +1,2 @@
+export * as config from './config.js';
+//# sourceMappingURL=index.d.ts.map

package/build/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA"}

package/build/actions/index.js

@@ -0,0 +1,2 @@
+export * as config from './config.js';
+//# sourceMappingURL=index.js.map

package/build/actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA"}

package/build/index.d.ts

@@ -0,0 +1,2 @@
+export * from './modules.js';
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA"}

package/build/index.js

@@ -0,0 +1,2 @@
+export * from './modules.js';
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA"}

package/build/modules.d.ts

@@ -0,0 +1,3 @@
+import type { ServerModule } from '@owlmeans/server-module';
+export declare const modules: ServerModule<unknown>[];
+//# sourceMappingURL=modules.d.ts.map

package/build/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAO3D,eAAO,MAAM,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAE1C,CAAA"}

package/build/modules.js

@@ -0,0 +1,8 @@
+import { elevate } from '@owlmeans/server-module';
+import { modules as list, API_CONFIG } from '@owlmeans/api-config';
+import { config } from './actions/index.js';
+elevate(list, API_CONFIG, config.advertise);
+export const modules = [
+    ...list.filter((module) => module.getAlias() === API_CONFIG)
+];
+//# sourceMappingURL=modules.js.map

package/build/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAE3C,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;AAE3C,MAAM,CAAC,MAAM,OAAO,GAA4B;IAC9C,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,UAAU,CAAC;CAC9F,CAAA"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@owlmeans/api-config-server",
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "sleep 18 && nodemon -e ts,tsx,json --watch src --exec \"tsc -p ./tsconfig.json\"",
+    "watch": "tsc -b -w --preserveWatchOutput --pretty"
+  },
+  "main": "build/index.js",
+  "module": "build/index.js",
+  "types": "build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./build/index.js",
+      "require": "./build/index.js",
+      "default": "./build/index.js",
+      "module": "./build/index.js",
+      "types": "./build/index.d.ts"
+    }
+  },
+  "dependencies": {
+    "@owlmeans/api-config": "^0.1.0",
+    "@owlmeans/server-api": "^0.1.0",
+    "@owlmeans/server-context": "^0.1.0",
+    "@owlmeans/server-module": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.7.8",
+    "nodemon": "^3.1.7",
+    "typescript": "^5.6.3"
+  },
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/actions/config.ts

@@ -0,0 +1,50 @@
+import type { RefedModuleHandler } from '@owlmeans/server-module'
+import type { ApiConfig } from '@owlmeans/api-config'
+import type { ServerConfig } from '@owlmeans/server-context'
+import type { PluginConfig } from '@owlmeans/config'
+import { notAdvertizedConfigKeys, allowedConfigRecords } from '@owlmeans/api-config'
+import { handleRequest } from '@owlmeans/server-api'
+import { PLUGINS } from '@owlmeans/config'
+import { AppType, CONFIG_RECORD } from '@owlmeans/context'
+import type { ConfigRecord } from '@owlmeans/context'
+
+export const advertise: RefedModuleHandler<ApiConfig> = handleRequest(async (_, ctx) => {
+  const apiConfig: ApiConfig = {
+    debug: ctx.cfg.debug ?? {},
+    brand: {},
+    services: Object.fromEntries(
+      Object.entries(ctx.cfg.services ?? {} as ServerConfig).map(([service, config]) => [
+        service, {
+          service: config.service,
+          type: config.type,
+          host: config.host,
+          port: config.port,
+          base: config.base
+        }
+      ])
+    ),
+    plugins: ((ctx.cfg as unknown as Record<string, PluginConfig[]>)[PLUGINS] ?? [])
+      .filter((plugin: PluginConfig) => plugin.type === AppType.Frontend),
+    [CONFIG_RECORD]: ((ctx.cfg as unknown as Record<string, ConfigRecord[]>)[CONFIG_RECORD] ?? []).filter(
+      (record: ConfigRecord) => record.recordType != null && allowedConfigRecords.includes(record.recordType)
+    ),
+    ...(
+      Object.fromEntries(
+        Object.entries(ctx.cfg).filter(([key]) => ![
+          'debug', 'services', PLUGINS, ...notAdvertizedConfigKeys
+        ].includes(key))
+      )
+    ),
+    ...("oidc" in ctx.cfg ? {
+      oidc: {
+        clientCookie: (ctx.cfg.oidc as { clientCookie: unknown }).clientCookie,
+        providers: (ctx.cfg.oidc as { providers: Object[] }).providers?.map(
+          provider => Object.fromEntries(Object.entries(provider)
+            .filter(([key]) => !['secret', 'apiClientId'].includes(key)))
+        ).filter(provider => provider.internal !== true),
+      }
+    } : {})
+  }
+
+  return apiConfig
+})

package/src/actions/index.ts

@@ -0,0 +1,2 @@
+
+export * as config from './config.js'

package/src/index.ts

@@ -0,0 +1,2 @@
+
+export * from './modules.js'

package/src/modules.ts

@@ -0,0 +1,11 @@
+
+import type { ServerModule } from '@owlmeans/server-module'
+import { elevate } from '@owlmeans/server-module'
+import { modules as list, API_CONFIG } from '@owlmeans/api-config'
+import { config } from './actions/index.js'
+
+elevate(list, API_CONFIG, config.advertise)
+
+export const modules: ServerModule<unknown>[] = [
+  ...list.filter((module): module is ServerModule<unknown> => module.getAlias() === API_CONFIG)
+]

package/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "extends": [
+    "../tsconfig.default.json",
+  ],
+  "compilerOptions": {
+    "rootDir": "./src/", /* Specify the root folder within your source files. */
+    "outDir": "./build/", /* Specify an output folder for all emitted files. */
+  },
+  "exclude": [
+    "./dist/**/*",
+    "./build/**/*",
+    "./*.ts"
+  ]
+}

package/tsconfig.tsbuildinfo

@@ -0,0 +1 @@
+{"root":["./src/index.ts","./src/modules.ts","./src/actions/config.ts","./src/actions/index.ts"],"version":"5.6.3"}