@qwickapps/server 1.3.0 → 1.4.0

package/dist/plugins/auth/config-store.test.js

@@ -0,0 +1,299 @@
+/**
+ * Auth Config Store Tests
+ *
+ * Unit tests for PostgreSQL-backed auth configuration store.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { postgresAuthConfigStore } from './config-store.js';
+function createMockPool() {
+    const mockClient = {
+        query: vi.fn().mockResolvedValue({ rows: [], rowCount: 0 }),
+        on: vi.fn(),
+        release: vi.fn(),
+    };
+    return {
+        query: vi.fn().mockResolvedValue({ rows: [], rowCount: 0 }),
+        connect: vi.fn().mockResolvedValue(mockClient),
+        on: vi.fn(),
+    };
+}
+describe('postgresAuthConfigStore', () => {
+    let mockPool;
+    beforeEach(() => {
+        mockPool = createMockPool();
+    });
+    afterEach(() => {
+        vi.clearAllMocks();
+    });
+    describe('identifier validation', () => {
+        it('should reject invalid table names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'DROP TABLE users;--',
+            })).toThrow('Invalid table name');
+        });
+        it('should reject table names with spaces', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'my table',
+            })).toThrow('Invalid table name');
+        });
+        it('should reject table names starting with numbers', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: '123table',
+            })).toThrow('Invalid table name');
+        });
+        it('should reject table names longer than 63 characters', () => {
+            const longName = 'a'.repeat(64);
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: longName,
+            })).toThrow('Invalid table name');
+        });
+        it('should accept valid table names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'auth_config',
+            })).not.toThrow();
+        });
+        it('should accept table names with underscores', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: '_my_auth_config_table',
+            })).not.toThrow();
+        });
+        it('should reject invalid schema names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                schema: 'public; DROP TABLE users;--',
+            })).toThrow('Invalid schema name');
+        });
+        it('should reject invalid notify channel names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                notifyChannel: 'channel-with-dashes',
+            })).toThrow('Invalid notify channel');
+        });
+    });
+    describe('initialize', () => {
+        it('should create table if autoCreateTable is true', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: true,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('CREATE TABLE IF NOT EXISTS'));
+        });
+        it('should not create table if autoCreateTable is false', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).not.toHaveBeenCalledWith(expect.stringContaining('CREATE TABLE IF NOT EXISTS'));
+        });
+        it('should use custom table name', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'custom_auth_config',
+                autoCreateTable: true,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('"public"."custom_auth_config"'));
+        });
+        it('should use custom schema name', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                schema: 'myschema',
+                autoCreateTable: true,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('"myschema"."auth_config"'));
+        });
+    });
+    describe('load', () => {
+        it('should return null when no config exists', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 0 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.load();
+            expect(result).toBeNull();
+        });
+        it('should return config when it exists', async () => {
+            const mockConfig = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret' } },
+                settings: {},
+                updated_at: new Date('2025-01-15T12:00:00Z'),
+                updated_by: 'admin@example.com',
+            };
+            mockPool.query.mockResolvedValueOnce({ rows: [mockConfig], rowCount: 1 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.load();
+            expect(result).toEqual({
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret' } },
+                settings: {},
+                updatedAt: '2025-01-15T12:00:00.000Z',
+                updatedBy: 'admin@example.com',
+            });
+        });
+    });
+    describe('save', () => {
+        it('should upsert config to database', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const config = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret', realm: 'Test' } },
+                settings: {},
+                updatedAt: new Date().toISOString(),
+                updatedBy: 'admin@example.com',
+            };
+            await store.save(config);
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO'), expect.arrayContaining(['basic', expect.any(String), expect.any(String), 'admin@example.com']));
+        });
+        it('should send NOTIFY when enableNotify is true', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: true,
+            });
+            const config = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret', realm: 'Test' } },
+                settings: {},
+                updatedAt: new Date().toISOString(),
+            };
+            await store.save(config);
+            expect(mockPool.query).toHaveBeenCalledWith('NOTIFY auth_config_changed');
+        });
+        it('should not send NOTIFY when enableNotify is false', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const config = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret', realm: 'Test' } },
+                settings: {},
+                updatedAt: new Date().toISOString(),
+            };
+            await store.save(config);
+            expect(mockPool.query).not.toHaveBeenCalledWith('NOTIFY auth_config_changed');
+        });
+    });
+    describe('delete', () => {
+        it('should delete config from database', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 1 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.delete();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('DELETE FROM'));
+            expect(result).toBe(true);
+        });
+        it('should return false when no config to delete', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 0 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.delete();
+            expect(result).toBe(false);
+        });
+        it('should send NOTIFY after delete when enableNotify is true', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 1 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: true,
+            });
+            await store.delete();
+            expect(mockPool.query).toHaveBeenCalledWith('NOTIFY auth_config_changed');
+        });
+    });
+    describe('onChange', () => {
+        it('should register listener and return unsubscribe function', () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const listener = vi.fn();
+            const unsubscribe = store.onChange(listener);
+            expect(typeof unsubscribe).toBe('function');
+        });
+        it('should unsubscribe listener when called', () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const listener = vi.fn();
+            const unsubscribe = store.onChange(listener);
+            // Unsubscribe
+            unsubscribe();
+            // Listener should not be called anymore
+            // (We can't easily test this without exposing internals, but the function exists)
+            expect(unsubscribe).toBeDefined();
+        });
+    });
+    describe('lazy pool initialization', () => {
+        it('should accept a function that returns the pool', async () => {
+            const poolFn = vi.fn().mockReturnValue(mockPool);
+            const store = postgresAuthConfigStore({
+                pool: poolFn,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 0 });
+            await store.load();
+            expect(poolFn).toHaveBeenCalled();
+        });
+        it('should throw if pool is invalid', async () => {
+            const store = postgresAuthConfigStore({
+                pool: (() => ({})),
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            await expect(store.load()).rejects.toThrow('Invalid pool');
+        });
+    });
+    describe('shutdown', () => {
+        it('should release listener client and clear listeners', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            // Add a listener
+            const listener = vi.fn();
+            store.onChange(listener);
+            // Shutdown
+            await store.shutdown();
+            // Should complete without error
+            expect(true).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=config-store.test.js.map

package/dist/plugins/auth/config-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.test.js","sourceRoot":"","sources":["../../../src/plugins/auth/config-store.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAgB5D,SAAS,cAAc;IACrB,MAAM,UAAU,GAAmB;QACjC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3D,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;QACX,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;KACjB,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAC9C,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,QAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,cAAc,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,qBAAqB;aACjC,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,UAAU;aACtB,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,UAAU;aACtB,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,QAAQ;aACpB,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,aAAa;aACzB,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,uBAAuB;aACnC,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,MAAM,EAAE,6BAA6B;aACtC,CAAC,CACH,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,aAAa,EAAE,qBAAqB;aACrC,CAAC,CACH,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC7C,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,oBAAoB;gBAC/B,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,+BAA+B,CAAC,CACzD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,MAAM,EAAE,UAAU;gBAClB,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CACpD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAElC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,UAAU,GAAG;gBACjB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;gBAC5D,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC5C,UAAU,EAAE,mBAAmB;aAChC,CAAC;YAEF,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAE1E,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAElC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;gBAC5D,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,mBAAmB;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3E,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,mBAAmB;aAC/B,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,EACtC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3E,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3E,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CACvC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAErB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE7C,cAAc;YACd,WAAW,EAAE,CAAC;YAEd,wCAAwC;YACxC,kFAAkF;YAClF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAEjD,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,MAA0E;gBAChF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAEnB,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAqE;gBACtF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,iBAAiB;YACjB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEzB,WAAW;YACX,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YAEvB,gCAAgC;YAChC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/plugins/auth/env-config.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Auth Plugin Environment Configuration
+ *
+ * Factory function and utilities for configuring auth adapters via environment variables.
+ * Supports all adapters: Auth0, Supabase, Supertokens, Basic.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { Plugin } from '../../core/plugin-registry.js';
+import type { AuthAdapter, Auth0AdapterConfig, SupabaseAdapterConfig, SupertokensAdapterConfig, BasicAdapterConfig, AuthEnvPluginOptions, AuthConfigStatus, AuthAdapterType, RuntimeAuthConfig, TestProviderResponse, AuthConfigStore } from './types.js';
+import { type AdapterWrapper } from './adapter-wrapper.js';
+/**
+ * Get an environment variable, treating empty strings as undefined
+ */
+declare function getEnv(key: string): string | undefined;
+/**
+ * Parse a boolean environment variable
+ * Supports: true/false, 1/0, yes/no (case-insensitive)
+ */
+declare function getEnvBool(key: string, defaultValue: boolean): boolean;
+/**
+ * Parse a comma-separated list environment variable
+ */
+declare function getEnvList(key: string): string[] | undefined;
+/**
+ * Mask a sensitive value for display
+ */
+declare function maskValue(value: string): string;
+interface EnvParseResult<T> {
+    config: T | null;
+    errors: string[];
+}
+/**
+ * Parse Supertokens configuration from environment variables
+ */
+declare function parseSupertokensEnv(): EnvParseResult<SupertokensAdapterConfig>;
+/**
+ * Parse Auth0 configuration from environment variables
+ */
+declare function parseAuth0Env(): EnvParseResult<Auth0AdapterConfig>;
+/**
+ * Parse Supabase configuration from environment variables
+ */
+declare function parseSupabaseEnv(): EnvParseResult<SupabaseAdapterConfig>;
+/**
+ * Parse Basic Auth configuration from environment variables
+ */
+declare function parseBasicAuthEnv(): EnvParseResult<BasicAdapterConfig>;
+/**
+ * Create an auth plugin configured from environment variables.
+ *
+ * The plugin state depends on environment configuration:
+ * - **disabled**: AUTH_ADAPTER not set - no authentication middleware is applied
+ * - **enabled**: Valid configuration - adapter is active and working
+ * - **error**: Invalid configuration - plugin is disabled with error details
+ *
+ * @example
+ * ```typescript
+ * // Zero-config setup - reads everything from env vars
+ * const authPlugin = createAuthPluginFromEnv();
+ *
+ * // With overrides
+ * const authPlugin = createAuthPluginFromEnv({
+ *   excludePaths: ['/health', '/metrics'],
+ *   authRequired: true,
+ * });
+ * ```
+ *
+ * @param options - Optional overrides (env vars take precedence for adapter config)
+ * @returns A Plugin instance
+ */
+export declare function createAuthPluginFromEnv(options?: AuthEnvPluginOptions): Plugin;
+/**
+ * Get current auth plugin status
+ */
+export declare function getAuthStatus(): AuthConfigStatus;
+/**
+ * Extended options for createAuthPluginFromEnv with runtime config support
+ */
+export interface AuthEnvPluginOptionsExtended extends AuthEnvPluginOptions {
+    /** Configuration store for runtime config persistence */
+    configStore?: AuthConfigStore;
+}
+/**
+ * Create an adapter from runtime configuration
+ */
+declare function createAdapterFromConfig(adapterType: AuthAdapterType, config: RuntimeAuthConfig['config']): AuthAdapter | null;
+/**
+ * Validate adapter configuration
+ */
+declare function validateAdapterConfig(adapterType: AuthAdapterType, config: Record<string, unknown>): {
+    valid: boolean;
+    errors: string[];
+};
+/**
+ * Test a provider connection
+ */
+declare function testProviderConnection(adapterType: AuthAdapterType, config: Record<string, unknown>): Promise<TestProviderResponse>;
+/**
+ * Set the configuration store for runtime auth config persistence.
+ *
+ * This must be called during application startup to enable runtime configuration
+ * features. Without a config store, the PUT/DELETE endpoints will return 503.
+ *
+ * @param store - PostgreSQL-backed config store from `postgresAuthConfigStore()`
+ *
+ * @example
+ * ```typescript
+ * import { Pool } from 'pg';
+ * import { setAuthConfigStore, postgresAuthConfigStore } from '@qwickapps/server';
+ *
+ * const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+ * const configStore = postgresAuthConfigStore({ pool });
+ * await configStore.initialize();
+ * setAuthConfigStore(configStore);
+ * ```
+ */
+export declare function setAuthConfigStore(store: AuthConfigStore): void;
+/**
+ * Get the current adapter wrapper
+ */
+export declare function getAdapterWrapper(): AdapterWrapper | null;
+export declare const __testing: {
+    parseSupertokensEnv: typeof parseSupertokensEnv;
+    parseAuth0Env: typeof parseAuth0Env;
+    parseSupabaseEnv: typeof parseSupabaseEnv;
+    parseBasicAuthEnv: typeof parseBasicAuthEnv;
+    getEnv: typeof getEnv;
+    getEnvBool: typeof getEnvBool;
+    getEnvList: typeof getEnvList;
+    maskValue: typeof maskValue;
+    VALID_ADAPTERS: readonly ["supertokens", "auth0", "supabase", "basic"];
+    validateAdapterConfig: typeof validateAdapterConfig;
+    testProviderConnection: typeof testProviderConnection;
+    createAdapterFromConfig: typeof createAdapterFromConfig;
+};
+export {};
+//# sourceMappingURL=env-config.d.ts.map

package/dist/plugins/auth/env-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-config.d.ts","sourceRoot":"","sources":["../../../src/plugins/auth/env-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EAEV,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAEhB,eAAe,EACf,iBAAiB,EAGjB,oBAAoB,EACpB,eAAe,EAChB,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAwBjF;;GAEG;AACH,iBAAS,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/C;AAED;;;GAGG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAa/D;AAED;;GAEG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CASrD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxC;AAMD,UAAU,cAAc,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,iBAAS,mBAAmB,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAoEvE;AAED;;GAEG;AACH,iBAAS,aAAa,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAwC3D;AAED;;GAEG;AACH,iBAAS,gBAAgB,IAAI,cAAc,CAAC,qBAAqB,CAAC,CAoBjE;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAqB/D;AAYD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CA0G9E;AAMD;;GAEG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,CAEhD;AA8aD;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,yDAAyD;IACzD,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED;;GAEG;AACH,iBAAS,uBAAuB,CAC9B,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,GAClC,WAAW,GAAG,IAAI,CAwBpB;AAED;;GAEG;AACH,iBAAS,qBAAqB,CAC5B,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA4BtC;AA4BD;;GAEG;AACH,iBAAe,sBAAsB,CACnC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA2I/B;AAkHD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAE/D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,IAAI,CAEzD;AAOD,eAAO,MAAM,SAAS;;;;;;;;;;;;;CAarB,CAAC"}