@prosopo/api-express-router 3.0.6 → 3.0.33

package/dist/tests/unit/middlewares/authMiddleware.unit.test.js

@@ -0,0 +1,135 @@
+import { hexToU8a, isHex } from "@polkadot/util";
+import { ProsopoApiError, ProsopoEnvError, getLogger, } from "@prosopo/common";
+import { describe, expect, it, vi } from "vitest";
+import { authMiddleware } from "../../../middlewares/authMiddleware.js";
+const loggerOuter = getLogger("info", import.meta.url);
+const mockLogger = {
+    debug: vi.fn().mockImplementation(loggerOuter.debug.bind(loggerOuter)),
+    log: vi.fn().mockImplementation(loggerOuter.log.bind(loggerOuter)),
+    info: vi.fn().mockImplementation(loggerOuter.info.bind(loggerOuter)),
+    error: vi.fn().mockImplementation(loggerOuter.error.bind(loggerOuter)),
+    trace: vi.fn().mockImplementation(loggerOuter.trace.bind(loggerOuter)),
+    fatal: vi.fn().mockImplementation(loggerOuter.fatal.bind(loggerOuter)),
+    warn: vi.fn().mockImplementation(loggerOuter.warn.bind(loggerOuter)),
+};
+vi.mock("@polkadot/util", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        hexToU8a: vi.fn(),
+        isHex: vi.fn(),
+    };
+});
+const mockPair = {
+    publicKey: "mockPublicKey",
+    verify: vi.fn(),
+};
+const mockEnv = {
+    pair: mockPair,
+    authAccount: mockPair,
+    logger: mockLogger,
+};
+describe("authMiddleware", () => {
+    it("should call next() if signature is valid", async () => {
+        const mockLogger = {
+            debug: vi.fn().mockImplementation(loggerOuter.debug.bind(loggerOuter)),
+            log: vi.fn().mockImplementation(loggerOuter.log.bind(loggerOuter)),
+            info: vi.fn().mockImplementation(loggerOuter.info.bind(loggerOuter)),
+            error: vi.fn().mockImplementation(loggerOuter.error.bind(loggerOuter)),
+            trace: vi.fn().mockImplementation(loggerOuter.trace.bind(loggerOuter)),
+            fatal: vi.fn().mockImplementation(loggerOuter.fatal.bind(loggerOuter)),
+            warn: vi.fn().mockImplementation(loggerOuter.warn.bind(loggerOuter)),
+        };
+        const mockReq = {
+            url: "/v1/prosopo/provider/captcha/image",
+            originalUrl: "/v1/prosopo/provider/captcha/image",
+            headers: {
+                signature: "0x1234",
+                timestamp: new Date().getTime(),
+            },
+            logger: mockLogger,
+        };
+        const mockRes = {
+            status: vi.fn().mockReturnThis(),
+            json: vi.fn(),
+        };
+        const mockNext = vi.fn();
+        vi.mocked(isHex).mockReturnValue(true);
+        vi.mocked(hexToU8a).mockReturnValue(new Uint8Array());
+        vi.mocked(mockPair.verify).mockReturnValue(true);
+        const middleware = authMiddleware(mockEnv.pair, mockEnv.authAccount);
+        await middleware(mockReq, mockRes, mockNext);
+        expect(mockNext).toHaveBeenCalled();
+        expect(mockRes.status).not.toHaveBeenCalled();
+    });
+    it("should return 401 if signature is invalid", async () => {
+        const mockLogger = {
+            debug: vi.fn().mockImplementation(loggerOuter.debug.bind(loggerOuter)),
+            log: vi.fn().mockImplementation(loggerOuter.log.bind(loggerOuter)),
+            info: vi.fn().mockImplementation(loggerOuter.info.bind(loggerOuter)),
+            error: vi.fn().mockImplementation(loggerOuter.error.bind(loggerOuter)),
+            trace: vi.fn().mockImplementation(loggerOuter.trace.bind(loggerOuter)),
+            fatal: vi.fn().mockImplementation(loggerOuter.fatal.bind(loggerOuter)),
+            warn: vi.fn().mockImplementation(loggerOuter.warn.bind(loggerOuter)),
+        };
+        const mockReq = {
+            url: "/v1/prosopo/provider/captcha/image",
+            originalUrl: "/v1/prosopo/provider/captcha/image",
+            headers: {
+                signature: "0x1234",
+                timestamp: new Date().getTime(),
+            },
+            logger: mockLogger,
+        };
+        const mockRes = {
+            status: vi.fn().mockReturnThis(),
+            json: vi.fn(),
+        };
+        const mockNext = vi.fn();
+        vi.mocked(isHex).mockReturnValue(true);
+        vi.mocked(hexToU8a).mockReturnValue(new Uint8Array());
+        vi.mocked(mockPair.verify).mockReturnValue(false);
+        const middleware = authMiddleware(mockEnv.pair, mockEnv.authAccount);
+        await middleware(mockReq, mockRes, mockNext);
+        expect(mockNext).not.toHaveBeenCalled();
+        expect(mockRes.status).toHaveBeenCalledWith(401);
+        expect(mockRes.json).toHaveBeenCalledWith({
+            error: "Unauthorized",
+            message: expect.any(ProsopoApiError),
+        });
+    });
+    it("should return 401 if key pair is missing", async () => {
+        const mockLogger = {
+            debug: vi.fn().mockImplementation(loggerOuter.debug.bind(loggerOuter)),
+            log: vi.fn().mockImplementation(loggerOuter.log.bind(loggerOuter)),
+            info: vi.fn().mockImplementation(loggerOuter.info.bind(loggerOuter)),
+            error: vi.fn().mockImplementation(loggerOuter.error.bind(loggerOuter)),
+            trace: vi.fn().mockImplementation(loggerOuter.trace.bind(loggerOuter)),
+            fatal: vi.fn().mockImplementation(loggerOuter.fatal.bind(loggerOuter)),
+            warn: vi.fn().mockImplementation(loggerOuter.warn.bind(loggerOuter)),
+        };
+        const mockReq = {
+            url: "/v1/prosopo/provider/captcha/image",
+            originalUrl: "/v1/prosopo/provider/captcha/image",
+            headers: {
+                signature: "0x1234",
+                timestamp: new Date().getTime(),
+            },
+            logger: mockLogger,
+        };
+        const mockRes = {
+            status: vi.fn().mockReturnThis(),
+            json: vi.fn(),
+        };
+        const mockNext = vi.fn();
+        const middleware = authMiddleware(undefined, undefined);
+        await middleware(mockReq, mockRes, mockNext);
+        expect(mockNext).not.toHaveBeenCalled();
+        expect(mockRes.status).toHaveBeenCalledWith(401);
+        expect(mockRes.json).toHaveBeenCalledWith({
+            error: "Unauthorized",
+            message: expect.any(ProsopoEnvError),
+        });
+    });
+});
+//# sourceMappingURL=authMiddleware.unit.test.js.map

package/dist/tests/unit/middlewares/authMiddleware.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.unit.test.js","sourceRoot":"","sources":["../../../../src/tests/unit/middlewares/authMiddleware.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAEN,eAAe,EACf,eAAe,EACf,SAAS,GACT,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAExE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEvD,MAAM,UAAU,GAAG;IAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;CAC/C,CAAC;AAEvB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAClD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IAEtC,OAAO;QAEN,GAAG,MAAM;QACT,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG;IAChB,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;CACW,CAAC;AAC5B,MAAM,OAAO,GAAG;IACf,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,MAAM,EAAE,UAAU;CAClB,CAAC;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,UAAU,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;SAC/C,CAAC;QACvB,MAAM,OAAO,GAAG;YACf,GAAG,EAAE,oCAAoC;YACzC,WAAW,EAAE,oCAAoC;YACjD,OAAO,EAAE;gBACR,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;aAC/B;YACD,MAAM,EAAE,UAAU;SACI,CAAC;QAExB,MAAM,OAAO,GAAG;YACf,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;YAChC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACU,CAAC;QAEzB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEpD,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE7C,MAAM,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,UAAU,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;SAC/C,CAAC;QACvB,MAAM,OAAO,GAAG;YACf,GAAG,EAAE,oCAAoC;YACzC,WAAW,EAAE,oCAAoC;YACjD,OAAO,EAAE;gBACR,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;aAC/B;YACD,MAAM,EAAE,UAAU;SACI,CAAC;QAExB,MAAM,OAAO,GAAG;YACf,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;YAChC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACU,CAAC;QAEzB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEpD,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE7C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACzC,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;SACpC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,UAAU,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;SAC/C,CAAC;QACvB,MAAM,OAAO,GAAG;YACf,GAAG,EAAE,oCAAoC;YACzC,WAAW,EAAE,oCAAoC;YACjD,OAAO,EAAE;gBACR,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;aAC/B;YACD,MAAM,EAAE,UAAU;SACI,CAAC;QAExB,MAAM,OAAO,GAAG;YACf,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;YAChC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACU,CAAC;QAEzB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEpD,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE7C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACzC,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;SACpC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,12 +1,12 @@
 {
 	"name": "@prosopo/api-express-router",
-	"version": "3.0.6",
+	"version": "3.0.33",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
 	"type": "module",
 	"engines": {
-		"node": "20",
-		"npm": "10.8.2"
+		"node": ">=v20.0.0",
+		"npm": ">=10.6.0"
 	},
 	"exports": {
 		".": {
@@ -20,17 +20,27 @@
 		"build": "NODE_ENV=${NODE_ENV:-development}; vite build --config vite.esm.config.ts --mode $NODE_ENV",
 		"build:tsc": "tsc --build --verbose",
 		"build:cjs": "NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV",
-		"typecheck": "tsc --build --declaration --emitDeclarationOnly",
+		"typecheck": "tsc --project tsconfig.types.json",
 		"test": "NODE_ENV=${NODE_ENV:-test}; npx vitest run --config ./vite.test.config.ts"
 	},
 	"dependencies": {
-		"@prosopo/api-route": "2.6.10",
-		"@prosopo/common": "3.1.2",
+		"@polkadot/util": "13.5.7",
+		"@prosopo/api-route": "2.6.29",
+		"@prosopo/common": "3.1.21",
+		"@prosopo/env": "3.2.21",
+		"@prosopo/locale": "3.1.21",
+		"@prosopo/types": "3.5.11",
+		"@prosopo/config": "3.1.21",
+		"dotenv": "16.4.5",
+		"express": "4.21.2",
+		"i18next": "24.1.0",
 		"uuid": "11.1.0",
-		"zod": "3.23.8",
-		"@prosopo/config": "3.1.3"
+		"zod": "3.23.8"
+	},
+	"devDependencies": {
+		"@types/node": "22.10.2",
+		"vitest": "3.2.4"
 	},
-	"devDependencies": {},
 	"author": "PROSOPO LIMITED <info@prosopo.io>",
 	"license": "Apache-2.0",
 	"bugs": {