@prauga/flexdoc-backend 2.1.0 → 2.3.0

package/README.md

@@ -1,227 +1,227 @@
-# FlexDoc Backend
-
-[![npm version](https://img.shields.io/npm/v/@prauga/flexdoc-backend.svg)](https://www.npmjs.com/package/@prauga/flexdoc-backend)
-[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
-
-The backend package for FlexDoc, a modern, customizable OpenAPI documentation generator that creates beautiful API documentation.
-
-## Screenshots
-
-### Light Mode
-
-![FlexDoc Light Mode](./images/flexdoc-light.png)
-
-### Dark Mode
-
-![FlexDoc Dark Mode](./images/flexdoc-dark.png)
-
-## Features
-
-- **Modern UI**: Clean, responsive interface with dark mode support
-- **Customizable**: Easily customize colors, typography, and layout
-- **Interactive**: Test API endpoints directly from the documentation
-- **Framework Agnostic**: Works with any JavaScript framework
-- **OpenAPI Compatible**: Supports OpenAPI 3.0 specifications
-
-## Installation
-
-```bash
-npm install @prauga/flexdoc-backend
-```
-
-## Usage
-
-### Basic Usage
-
-```typescript
-import { FlexDoc } from '@prauga/flexdoc-backend';
-import { OpenAPIObject } from '@nestjs/swagger';
-
-// Create a new FlexDoc instance with your OpenAPI spec
-const flexdoc = new FlexDoc({
-  spec: yourOpenAPISpec as OpenAPIObject,
-  title: 'My API Documentation',
-  description: 'Documentation for my awesome API',
-});
-
-// Generate HTML documentation
-const html = flexdoc.generateHTML();
-
-// Serve the documentation
-app.get('/api/docs', (req, res) => {
-  res.send(html);
-});
-```
-
-### Configuration Options
-
-FlexDoc is highly customizable through the `FlexDocOptions` interface:
-
-```typescript
-import { FlexDoc, FlexDocOptions } from '@prauga/flexdoc-backend';
-
-const options: FlexDocOptions = {
-  // Required
-  spec: yourOpenAPISpec,
-
-  // Basic metadata
-  title: 'My API Documentation',
-  description: 'Documentation for my awesome API',
-
-  // Theme configuration
-  themeConfig: {
-    colors: {
-      primary: {
-        main: '#3b82f6',
-        light: '#eff6ff',
-        dark: '#2563eb',
-      },
-      // Additional color options...
-    },
-    typography: {
-      fontFamily: 'Inter, system-ui, sans-serif',
-      fontSize: '16px',
-      // Additional typography options...
-    },
-  },
-
-  // Footer customization
-  footer: {
-    copyright: '© 2025 My Company',
-    links: [
-      {
-        text: 'Terms',
-        url: '/terms',
-        icon: 'file-text', // Optional Lucide icon name
-      },
-      {
-        text: 'Privacy',
-        url: '/privacy',
-      },
-    ],
-  },
-
-  // Additional options...
-};
-
-const flexdoc = new FlexDoc(options);
-```
-
-### Framework Integration Examples
-
-#### NestJS
-
-```typescript
-import { NestFactory } from '@nestjs/core';
-import { SwaggerModule, DocumentBuilder } from '@nestjs/swagger';
-import { FlexDoc } from '@prauga/flexdoc-backend';
-import { AppModule } from './app.module';
-
-async function bootstrap() {
-  const app = await NestFactory.create(AppModule);
-
-  // Create OpenAPI spec with Swagger
-  const config = new DocumentBuilder()
-    .setTitle('My API')
-    .setDescription('My API description')
-    .setVersion('1.0')
-    .build();
-  const document = SwaggerModule.createDocument(app, config);
-
-  // Create FlexDoc instance
-  const flexdoc = new FlexDoc({
-    spec: document,
-    title: 'My API Documentation',
-    description: 'Documentation for my awesome API',
-    footer: {
-      copyright: '© 2025 My Company',
-    },
-  });
-
-  // Serve FlexDoc at /api/docs
-  app.use('/api/docs', (req, res) => {
-    res.send(flexdoc.generateHTML());
-  });
-
-  await app.listen(3000);
-}
-bootstrap();
-```
-
-#### Express
-
-```typescript
-import express from 'express';
-import { FlexDoc } from '@prauga/flexdoc-backend';
-import swaggerJsdoc from 'swagger-jsdoc';
-
-const app = express();
-
-// Generate OpenAPI spec
-const options = {
-  definition: {
-    openapi: '3.0.0',
-    info: {
-      title: 'My API',
-      version: '1.0.0',
-    },
-  },
-  apis: ['./src/routes/*.js'],
-};
-const openapiSpec = swaggerJsdoc(options);
-
-// Create FlexDoc instance
-const flexdoc = new FlexDoc({
-  spec: openapiSpec,
-  title: 'My API Documentation',
-});
-
-// Serve FlexDoc
-app.get('/api/docs', (req, res) => {
-  res.send(flexdoc.generateHTML());
-});
-
-app.listen(3000);
-```
-
-## API Reference
-
-### `FlexDoc` Class
-
-The main class for generating API documentation.
-
-#### Constructor
-
-```typescript
-constructor(options: FlexDocOptions)
-```
-
-#### Methods
-
-- `generateHTML()`: Generates the HTML documentation
-- `getOpenAPISpec()`: Returns the processed OpenAPI specification
-
-### `FlexDocOptions` Interface
-
-Configuration options for FlexDoc:
-
-| Property       | Type                            | Description                      |
-| -------------- | ------------------------------- | -------------------------------- |
-| `spec`         | `OpenAPIObject`                 | The OpenAPI specification object |
-| `title`        | `string`                        | Documentation title              |
-| `description`  | `string`                        | Documentation description        |
-| `themeConfig`  | `ThemeConfig`                   | Theme configuration              |
-| `footer`       | `FooterConfig`                  | Footer configuration             |
-| `favicon`      | `string`                        | URL to favicon                   |
-| `customCss`    | `string`                        | Custom CSS to inject             |
-| `customJs`     | `string`                        | Custom JavaScript to inject      |
-| `defaultTheme` | `'light' \| 'dark' \| 'system'` | Default theme mode               |
-
-## Contributing
-
-Contributions are welcome! Please feel free to submit a Pull Request.
-
-## License
-
-This project is licensed under the MIT License - see the LICENSE file for details.
-
+# FlexDoc Backend
+
+[![npm version](https://img.shields.io/npm/v/@prauga/flexdoc-backend.svg)](https://www.npmjs.com/package/@prauga/flexdoc-backend)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+The backend package for FlexDoc, a modern, customizable OpenAPI documentation generator that creates beautiful API documentation.
+
+## Screenshots
+
+### Light Mode
+
+![FlexDoc Light Mode](./images/flexdoc-light.png)
+
+### Dark Mode
+
+![FlexDoc Dark Mode](./images/flexdoc-dark.png)
+
+## Features
+
+- **Modern UI**: Clean, responsive interface with dark mode support
+- **Customizable**: Easily customize colors, typography, and layout
+- **Interactive**: Test API endpoints directly from the documentation
+- **Framework Agnostic**: Works with any JavaScript framework
+- **OpenAPI Compatible**: Supports OpenAPI 3.0 specifications
+
+## Installation
+
+```bash
+npm install @prauga/flexdoc-backend
+```
+
+## Usage
+
+### Basic Usage
+
+```typescript
+import { FlexDoc } from '@prauga/flexdoc-backend';
+import { OpenAPIObject } from '@nestjs/swagger';
+
+// Create a new FlexDoc instance with your OpenAPI spec
+const flexdoc = new FlexDoc({
+  spec: yourOpenAPISpec as OpenAPIObject,
+  title: 'My API Documentation',
+  description: 'Documentation for my awesome API',
+});
+
+// Generate HTML documentation
+const html = flexdoc.generateHTML();
+
+// Serve the documentation
+app.get('/api/docs', (req, res) => {
+  res.send(html);
+});
+```
+
+### Configuration Options
+
+FlexDoc is highly customizable through the `FlexDocOptions` interface:
+
+```typescript
+import { FlexDoc, FlexDocOptions } from '@prauga/flexdoc-backend';
+
+const options: FlexDocOptions = {
+  // Required
+  spec: yourOpenAPISpec,
+
+  // Basic metadata
+  title: 'My API Documentation',
+  description: 'Documentation for my awesome API',
+
+  // Theme configuration
+  themeConfig: {
+    colors: {
+      primary: {
+        main: '#3b82f6',
+        light: '#eff6ff',
+        dark: '#2563eb',
+      },
+      // Additional color options...
+    },
+    typography: {
+      fontFamily: 'Inter, system-ui, sans-serif',
+      fontSize: '16px',
+      // Additional typography options...
+    },
+  },
+
+  // Footer customization
+  footer: {
+    copyright: '© 2025 My Company',
+    links: [
+      {
+        text: 'Terms',
+        url: '/terms',
+        icon: 'file-text', // Optional Lucide icon name
+      },
+      {
+        text: 'Privacy',
+        url: '/privacy',
+      },
+    ],
+  },
+
+  // Additional options...
+};
+
+const flexdoc = new FlexDoc(options);
+```
+
+### Framework Integration Examples
+
+#### NestJS
+
+```typescript
+import { NestFactory } from '@nestjs/core';
+import { SwaggerModule, DocumentBuilder } from '@nestjs/swagger';
+import { FlexDoc } from '@prauga/flexdoc-backend';
+import { AppModule } from './app.module';
+
+async function bootstrap() {
+  const app = await NestFactory.create(AppModule);
+
+  // Create OpenAPI spec with Swagger
+  const config = new DocumentBuilder()
+    .setTitle('My API')
+    .setDescription('My API description')
+    .setVersion('1.0')
+    .build();
+  const document = SwaggerModule.createDocument(app, config);
+
+  // Create FlexDoc instance
+  const flexdoc = new FlexDoc({
+    spec: document,
+    title: 'My API Documentation',
+    description: 'Documentation for my awesome API',
+    footer: {
+      copyright: '© 2025 My Company',
+    },
+  });
+
+  // Serve FlexDoc at /api/docs
+  app.use('/api/docs', (req, res) => {
+    res.send(flexdoc.generateHTML());
+  });
+
+  await app.listen(3000);
+}
+bootstrap();
+```
+
+#### Express
+
+```typescript
+import express from 'express';
+import { FlexDoc } from '@prauga/flexdoc-backend';
+import swaggerJsdoc from 'swagger-jsdoc';
+
+const app = express();
+
+// Generate OpenAPI spec
+const options = {
+  definition: {
+    openapi: '3.0.0',
+    info: {
+      title: 'My API',
+      version: '1.0.0',
+    },
+  },
+  apis: ['./src/routes/*.js'],
+};
+const openapiSpec = swaggerJsdoc(options);
+
+// Create FlexDoc instance
+const flexdoc = new FlexDoc({
+  spec: openapiSpec,
+  title: 'My API Documentation',
+});
+
+// Serve FlexDoc
+app.get('/api/docs', (req, res) => {
+  res.send(flexdoc.generateHTML());
+});
+
+app.listen(3000);
+```
+
+## API Reference
+
+### `FlexDoc` Class
+
+The main class for generating API documentation.
+
+#### Constructor
+
+```typescript
+constructor(options: FlexDocOptions)
+```
+
+#### Methods
+
+- `generateHTML()`: Generates the HTML documentation
+- `getOpenAPISpec()`: Returns the processed OpenAPI specification
+
+### `FlexDocOptions` Interface
+
+Configuration options for FlexDoc:
+
+| Property       | Type                            | Description                      |
+| -------------- | ------------------------------- | -------------------------------- |
+| `spec`         | `OpenAPIObject`                 | The OpenAPI specification object |
+| `title`        | `string`                        | Documentation title              |
+| `description`  | `string`                        | Documentation description        |
+| `themeConfig`  | `ThemeConfig`                   | Theme configuration              |
+| `footer`       | `FooterConfig`                  | Footer configuration             |
+| `favicon`      | `string`                        | URL to favicon                   |
+| `customCss`    | `string`                        | Custom CSS to inject             |
+| `customJs`     | `string`                        | Custom JavaScript to inject      |
+| `defaultTheme` | `'light' \| 'dark' \| 'system'` | Default theme mode               |
+
+## Contributing
+
+Contributions are welcome! Please feel free to submit a Pull Request.
+
+## License
+
+This project is licensed under the MIT License - see the LICENSE file for details.
+

package/dist/auth.d.ts

@@ -0,0 +1,11 @@
+export interface FlexDocAuthOptions {
+    secretKey: string;
+    type: 'basic' | 'bearer';
+}
+export interface FlexDocAuthDecision {
+    authorized: boolean;
+    challenge?: string;
+    message?: string;
+}
+export declare function generateFlexDocPassword(username: string, secret: string): string;
+export declare function authorizeFlexDocRequest(authHeader: string | undefined, authOptions: FlexDocAuthOptions): FlexDocAuthDecision;

package/dist/auth.js

@@ -0,0 +1,99 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateFlexDocPassword = generateFlexDocPassword;
+exports.authorizeFlexDocRequest = authorizeFlexDocRequest;
+const crypto = __importStar(require("crypto"));
+const jwt = __importStar(require("jsonwebtoken"));
+function generateFlexDocPassword(username, secret) {
+    const hmac = crypto.createHmac('sha256', secret);
+    hmac.update(username);
+    const hash = hmac.digest('base64');
+    const basePassword = hash.substring(0, 12);
+    let password = basePassword;
+    if (!/[A-Z]/.test(password))
+        password += 'A';
+    if (!/[a-z]/.test(password))
+        password += 'a';
+    if (!/[0-9]/.test(password))
+        password += '1';
+    if (!/[^A-Za-z0-9]/.test(password))
+        password += '!';
+    return password;
+}
+function authorizeFlexDocRequest(authHeader, authOptions) {
+    const { type, secretKey } = authOptions;
+    if (type === 'basic') {
+        if (!authHeader || !authHeader.startsWith('Basic ')) {
+            return { authorized: false, challenge: 'Basic', message: 'Authentication required' };
+        }
+        const credentials = Buffer.from(authHeader.slice('Basic '.length), 'base64').toString('ascii');
+        const separatorIndex = credentials.indexOf(':');
+        const username = separatorIndex === -1 ? credentials : credentials.slice(0, separatorIndex);
+        const password = separatorIndex === -1 ? '' : credentials.slice(separatorIndex + 1);
+        if (password !== generateFlexDocPassword(username, secretKey)) {
+            return { authorized: false, challenge: 'Basic', message: 'Invalid credentials' };
+        }
+        return { authorized: true };
+    }
+    let token;
+    if (authHeader?.startsWith('Bearer ')) {
+        token = authHeader.slice('Bearer '.length);
+    }
+    else if (authHeader?.startsWith('Basic ')) {
+        const credentials = Buffer.from(authHeader.slice('Basic '.length), 'base64').toString('ascii');
+        const separatorIndex = credentials.indexOf(':');
+        token = separatorIndex === -1 ? undefined : credentials.slice(separatorIndex + 1);
+    }
+    if (token) {
+        try {
+            jwt.verify(token, secretKey);
+            return { authorized: true };
+        }
+        catch {
+            return {
+                authorized: false,
+                challenge: 'Basic realm="Enter token as password"',
+                message: 'Invalid or expired token',
+            };
+        }
+    }
+    return {
+        authorized: false,
+        challenge: 'Basic realm="Enter token as password"',
+        message: 'Authentication required',
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,0DAYC;AAED,0DAkDC;AA9ED,+CAAiC;AACjC,kDAAoC;AAapC,SAAgB,uBAAuB,CAAC,QAAgB,EAAE,MAAc;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE3C,IAAI,QAAQ,GAAG,YAAY,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,QAAQ,IAAI,GAAG,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,QAAQ,IAAI,GAAG,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,QAAQ,IAAI,GAAG,CAAC;IAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,QAAQ,IAAI,GAAG,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,uBAAuB,CACrC,UAA8B,EAC9B,WAA+B;IAE/B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC;IAExC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACvF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAEpF,IAAI,QAAQ,KAAK,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACnF,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,KAAyB,CAAC;IAC9B,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,KAAK,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC7B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,uCAAuC;gBAClD,OAAO,EAAE,0BAA0B;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,uCAAuC;QAClD,OAAO,EAAE,yBAAyB;KACnC,CAAC;AACJ,CAAC"}

package/dist/auth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth.test.js

@@ -0,0 +1,57 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const jwt = __importStar(require("jsonwebtoken"));
+const auth_1 = require("./auth");
+describe('FlexDoc route auth', () => {
+    it('validates generated basic-auth credentials', () => {
+        const secretKey = 'basic-secret';
+        const username = 'alice';
+        const password = (0, auth_1.generateFlexDocPassword)(username, secretKey);
+        const header = `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`;
+        expect((0, auth_1.authorizeFlexDocRequest)(undefined, { type: 'basic', secretKey })).toEqual(expect.objectContaining({ authorized: false, challenge: 'Basic' }));
+        expect((0, auth_1.authorizeFlexDocRequest)(header, { type: 'basic', secretKey })).toEqual({ authorized: true });
+    });
+    it('validates bearer tokens and preserves the password-field fallback', () => {
+        const secretKey = 'bearer-secret';
+        const token = jwt.sign({ sub: 'docs-user' }, secretKey);
+        const bearer = `Bearer ${token}`;
+        const basicFallback = `Basic ${Buffer.from(`token:${token}`).toString('base64')}`;
+        expect((0, auth_1.authorizeFlexDocRequest)(bearer, { type: 'bearer', secretKey })).toEqual({ authorized: true });
+        expect((0, auth_1.authorizeFlexDocRequest)(basicFallback, { type: 'bearer', secretKey })).toEqual({ authorized: true });
+        expect((0, auth_1.authorizeFlexDocRequest)('Bearer invalid', { type: 'bearer', secretKey })).toEqual(expect.objectContaining({ authorized: false, message: 'Invalid or expired token' }));
+    });
+});
+//# sourceMappingURL=auth.test.js.map

package/dist/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../src/auth.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAAoC;AACpC,iCAGgB;AAEhB,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG,cAAc,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAA,8BAAuB,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEpF,MAAM,CAAC,IAAA,8BAAuB,EAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAC9E,MAAM,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CACnE,CAAC;QACF,MAAM,CAAC,IAAA,8BAAuB,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,UAAU,KAAK,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAElF,MAAM,CAAC,IAAA,8BAAuB,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,IAAA,8BAAuB,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,IAAA,8BAAuB,EAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CACtF,MAAM,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CACpF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/flexdoc.module.test.js

@@ -2,6 +2,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const flexdoc_module_1 = require("./flexdoc.module");
 const setup_1 = require("./setup");
+jest.mock('@nestjs/common', () => ({
+    Module: () => (target) => target,
+    Inject: () => () => undefined,
+    Injectable: () => (target) => target,
+}));
+jest.mock('@nestjs/core', () => ({
+    HttpAdapterHost: class HttpAdapterHost {
+    },
+}));
 jest.mock('./setup', () => ({
     setupFlexDoc: jest.fn(),
 }));