@qwickapps/server 1.5.2 → 1.6.1

package/dist/plugins/api-keys/api-keys-plugin.js

@@ -0,0 +1,452 @@
+/**
+ * API Keys Plugin
+ *
+ * API key authentication and management plugin for @qwickapps/server.
+ * Provides API key generation, storage, and verification with PostgreSQL RLS.
+ *
+ * This plugin depends on the Users Plugin for user identity.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import { CreateApiKeySchema, UpdateApiKeySchema, } from './types.js';
+// Store instance for helper access
+let currentStore = null;
+/**
+ * Create the API Keys plugin
+ */
+export function createApiKeysPlugin(config) {
+    const debug = config.debug || false;
+    // Framework automatically prefixes routes with plugin slug, so use root path
+    const apiPrefix = config.api?.prefix || '/';
+    const apiEnabled = config.api?.enabled !== false;
+    function log(message, data) {
+        if (debug) {
+            console.log(`[ApiKeysPlugin] ${message}`, data || '');
+        }
+    }
+    return {
+        id: 'api-keys',
+        name: 'API Keys',
+        version: '1.0.0',
+        async onStart(_pluginConfig, registry) {
+            log('Starting API keys plugin');
+            // Check for users plugin dependency
+            if (!registry.hasPlugin('users')) {
+                throw new Error('API Keys plugin requires Users plugin to be loaded first');
+            }
+            // Initialize the store (creates tables and RLS policies if needed)
+            await config.store.initialize();
+            log('API keys store initialized');
+            // Initialize optional Phase 2 stores
+            if (config.scopeStore) {
+                await config.scopeStore.initialize();
+                log('Plugin scope store initialized');
+            }
+            if (config.usageStore) {
+                await config.usageStore.initialize();
+                log('Usage log store initialized');
+            }
+            // Store reference for helper access
+            currentStore = config.store;
+            // Register health check
+            registry.registerHealthCheck({
+                name: 'api-keys-store',
+                type: 'custom',
+                check: async () => {
+                    try {
+                        // Simple health check - store is accessible
+                        return { healthy: currentStore !== null };
+                    }
+                    catch {
+                        return { healthy: false };
+                    }
+                },
+            });
+            // Add API routes if enabled
+            if (apiEnabled) {
+                // POST /api-keys - Create a new API key
+                registry.addRoute({
+                    method: 'post',
+                    path: apiPrefix,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            // Validate request body
+                            const validation = CreateApiKeySchema.safeParse(req.body);
+                            if (!validation.success) {
+                                return res.status(400).json({
+                                    error: 'Invalid request',
+                                });
+                            }
+                            const params = {
+                                user_id: userId,
+                                ...validation.data,
+                            };
+                            // Create the API key
+                            const apiKey = await config.store.create(params);
+                            // Return the key with plaintext (ONLY time plaintext is accessible)
+                            res.status(201).json({
+                                id: apiKey.id,
+                                name: apiKey.name,
+                                key: apiKey.plaintext_key, // Client must save this - won't be shown again
+                                key_prefix: apiKey.key_prefix,
+                                key_type: apiKey.key_type,
+                                scopes: apiKey.scopes,
+                                expires_at: apiKey.expires_at,
+                                is_active: apiKey.is_active,
+                                created_at: apiKey.created_at,
+                            });
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Create API key error:', error);
+                            res.status(500).json({ error: 'Failed to create API key' });
+                        }
+                    },
+                });
+                // GET /api-keys - List current user's API keys
+                registry.addRoute({
+                    method: 'get',
+                    path: apiPrefix,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            const keys = await config.store.list(userId);
+                            // Remove sensitive fields from response
+                            const sanitized = keys.map(key => ({
+                                id: key.id,
+                                name: key.name,
+                                key_prefix: key.key_prefix,
+                                key_type: key.key_type,
+                                scopes: key.scopes,
+                                last_used_at: key.last_used_at,
+                                expires_at: key.expires_at,
+                                is_active: key.is_active,
+                                created_at: key.created_at,
+                                updated_at: key.updated_at,
+                            }));
+                            res.json({ keys: sanitized });
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] List API keys error:', error);
+                            res.status(500).json({ error: 'Failed to list API keys' });
+                        }
+                    },
+                });
+                // GET /api-keys/:id - Get a specific API key
+                registry.addRoute({
+                    method: 'get',
+                    path: `${apiPrefix}/:id`,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            const { id } = req.params;
+                            const key = await config.store.get(userId, id);
+                            if (!key) {
+                                return res.status(404).json({ error: 'API key not found' });
+                            }
+                            // Remove sensitive fields from response
+                            const sanitized = {
+                                id: key.id,
+                                name: key.name,
+                                key_prefix: key.key_prefix,
+                                key_type: key.key_type,
+                                scopes: key.scopes,
+                                last_used_at: key.last_used_at,
+                                expires_at: key.expires_at,
+                                is_active: key.is_active,
+                                created_at: key.created_at,
+                                updated_at: key.updated_at,
+                            };
+                            res.json(sanitized);
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Get API key error:', error);
+                            res.status(500).json({ error: 'Failed to get API key' });
+                        }
+                    },
+                });
+                // PUT /api-keys/:id - Update an API key
+                registry.addRoute({
+                    method: 'put',
+                    path: `${apiPrefix}/:id`,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            // Validate request body
+                            const validation = UpdateApiKeySchema.safeParse(req.body);
+                            if (!validation.success) {
+                                return res.status(400).json({
+                                    error: 'Invalid request',
+                                });
+                            }
+                            const { id } = req.params;
+                            const params = validation.data;
+                            const updated = await config.store.update(userId, id, params);
+                            if (!updated) {
+                                return res.status(404).json({ error: 'API key not found' });
+                            }
+                            // Remove sensitive fields from response
+                            const sanitized = {
+                                id: updated.id,
+                                name: updated.name,
+                                key_prefix: updated.key_prefix,
+                                key_type: updated.key_type,
+                                scopes: updated.scopes,
+                                last_used_at: updated.last_used_at,
+                                expires_at: updated.expires_at,
+                                is_active: updated.is_active,
+                                created_at: updated.created_at,
+                                updated_at: updated.updated_at,
+                            };
+                            res.json(sanitized);
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Update API key error:', error);
+                            res.status(500).json({ error: 'Failed to update API key' });
+                        }
+                    },
+                });
+                // DELETE /api-keys/:id - Delete an API key
+                registry.addRoute({
+                    method: 'delete',
+                    path: `${apiPrefix}/:id`,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            const { id } = req.params;
+                            const deleted = await config.store.delete(userId, id);
+                            if (!deleted) {
+                                return res.status(404).json({ error: 'API key not found' });
+                            }
+                            res.status(204).send();
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Delete API key error:', error);
+                            res.status(500).json({ error: 'Failed to delete API key' });
+                        }
+                    },
+                });
+                // Phase 2: GET /scopes - List all available scopes
+                if (config.scopeStore) {
+                    registry.addRoute({
+                        method: 'get',
+                        path: '/scopes',
+                        pluginId: 'api-keys',
+                        handler: async (_req, res) => {
+                            try {
+                                const scopes = await config.scopeStore.getAllScopes();
+                                // Group by plugin
+                                const grouped = scopes.reduce((acc, scope) => {
+                                    if (!acc[scope.plugin_id]) {
+                                        acc[scope.plugin_id] = [];
+                                    }
+                                    acc[scope.plugin_id].push({
+                                        name: scope.name,
+                                        description: scope.description,
+                                        category: scope.category,
+                                    });
+                                    return acc;
+                                }, {});
+                                // Convert to array format
+                                const result = Object.entries(grouped).map(([pluginId, pluginScopes]) => ({
+                                    pluginId,
+                                    scopes: pluginScopes,
+                                }));
+                                res.json({ scopes: result });
+                            }
+                            catch (error) {
+                                console.error('[ApiKeysPlugin] Get scopes error:', error);
+                                res.status(500).json({ error: 'Failed to retrieve scopes' });
+                            }
+                        },
+                    });
+                }
+                // Phase 2: GET /api-keys/:id/usage - Get usage logs for a specific key
+                if (config.usageStore) {
+                    registry.addRoute({
+                        method: 'get',
+                        path: `${apiPrefix}/:id/usage`,
+                        pluginId: 'api-keys',
+                        handler: async (req, res) => {
+                            try {
+                                const authReq = req;
+                                const userId = authReq.auth?.user?.id;
+                                if (!userId) {
+                                    return res.status(401).json({ error: 'Authentication required' });
+                                }
+                                const { id: keyId } = req.params;
+                                // Verify key belongs to user
+                                const key = await config.store.get(userId, keyId);
+                                if (!key) {
+                                    return res.status(404).json({ error: 'API key not found' });
+                                }
+                                // Parse query parameters
+                                const limit = parseInt(req.query.limit) || 100;
+                                const offset = parseInt(req.query.offset) || 0;
+                                const since = req.query.since ? new Date(req.query.since) : undefined;
+                                const until = req.query.until ? new Date(req.query.until) : undefined;
+                                const endpoint = req.query.endpoint;
+                                const method = req.query.method;
+                                const statusCode = req.query.statusCode ? parseInt(req.query.statusCode) : undefined;
+                                // Get usage logs
+                                const logs = await config.usageStore.getKeyUsage(keyId, {
+                                    limit,
+                                    offset,
+                                    since,
+                                    until,
+                                    endpoint,
+                                    method,
+                                    statusCode,
+                                });
+                                // Get stats
+                                const stats = await config.usageStore.getKeyStats(keyId, { since, until });
+                                res.json({
+                                    keyId,
+                                    keyName: key.name,
+                                    totalCalls: stats.totalCalls,
+                                    lastUsed: stats.lastUsed,
+                                    callsByStatus: stats.callsByStatus,
+                                    callsByEndpoint: stats.callsByEndpoint,
+                                    logs,
+                                });
+                            }
+                            catch (error) {
+                                console.error('[ApiKeysPlugin] Get usage error:', error);
+                                res.status(500).json({ error: 'Failed to retrieve usage logs' });
+                            }
+                        },
+                    });
+                }
+            }
+            log('API keys plugin started');
+        },
+        async onStop() {
+            log('Stopping API keys plugin');
+            if (currentStore) {
+                await currentStore.shutdown();
+            }
+            if (config.scopeStore) {
+                await config.scopeStore.shutdown();
+            }
+            if (config.usageStore) {
+                await config.usageStore.shutdown();
+            }
+            currentStore = null;
+            log('API keys plugin stopped');
+        },
+        async onPluginEvent(event) {
+            // Automatically register plugin scopes when plugins start
+            if (event.type === 'plugin:started' && config.scopeStore) {
+                const { plugin } = event;
+                if (plugin.scopes && plugin.scopes.length > 0) {
+                    try {
+                        await config.scopeStore.registerScopes(plugin.id, plugin.scopes);
+                        log(`Registered ${plugin.scopes.length} scopes for plugin: ${plugin.id}`, {
+                            scopes: plugin.scopes.map(s => s.name),
+                        });
+                    }
+                    catch (error) {
+                        console.error(`[ApiKeysPlugin] Failed to register scopes for ${plugin.id}:`, error);
+                    }
+                }
+            }
+        },
+    };
+}
+// ========================================
+// Helper Functions
+// ========================================
+/**
+ * Get the current API keys store instance
+ */
+export function getApiKeysStore() {
+    return currentStore;
+}
+/**
+ * Verify an API key and return the associated key record
+ * Returns null if key is invalid, expired, or inactive
+ */
+export async function verifyApiKey(plaintextKey) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    const key = await currentStore.verify(plaintextKey);
+    // Update last_used_at timestamp if key is valid
+    if (key) {
+        await currentStore.recordUsage(key.id).catch(err => {
+            console.error('[ApiKeysPlugin] Failed to record key usage:', err);
+        });
+    }
+    return key;
+}
+/**
+ * Create an API key for a user
+ */
+export async function createApiKey(params) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.create(params);
+}
+/**
+ * List all API keys for a user
+ */
+export async function listApiKeys(userId) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.list(userId);
+}
+/**
+ * Get a specific API key
+ */
+export async function getApiKey(userId, keyId) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.get(userId, keyId);
+}
+/**
+ * Update an API key
+ */
+export async function updateApiKey(userId, keyId, params) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.update(userId, keyId, params);
+}
+/**
+ * Delete an API key
+ */
+export async function deleteApiKey(userId, keyId) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.delete(userId, keyId);
+}
+//# sourceMappingURL=api-keys-plugin.js.map

package/dist/plugins/api-keys/api-keys-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys-plugin.js","sourceRoot":"","sources":["../../../src/plugins/api-keys/api-keys-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,mCAAmC;AACnC,IAAI,YAAY,GAAuB,IAAI,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,6EAA6E;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,CAAC;IAEjD,SAAS,GAAG,CAAC,OAAe,EAAE,IAA8B;QAC1D,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAEhB,KAAK,CAAC,OAAO,CAAC,aAA2B,EAAE,QAAwB;YACjE,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAEhC,oCAAoC;YACpC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YAED,mEAAmE;YACnE,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAElC,qCAAqC;YACrC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBACrC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBACrC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YACrC,CAAC;YAED,oCAAoC;YACpC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;YAE5B,wBAAwB;YACxB,QAAQ,CAAC,mBAAmB,CAAC;gBAC3B,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,KAAK,IAAI,EAAE;oBAChB,IAAI,CAAC;wBACH,4CAA4C;wBAC5C,OAAO,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC5C,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;oBAC5B,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YAEH,4BAA4B;YAC5B,IAAI,UAAU,EAAE,CAAC;gBACf,wCAAwC;gBACxC,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,wBAAwB;4BACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gCACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oCAC1B,KAAK,EAAE,iBAAiB;iCACzB,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,MAAM,GAAuB;gCACjC,OAAO,EAAE,MAAM;gCACf,GAAG,UAAU,CAAC,IAAI;6BACnB,CAAC;4BAEF,qBAAqB;4BACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;4BAEjD,oEAAoE;4BACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gCACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gCACb,IAAI,EAAE,MAAM,CAAC,IAAI;gCACjB,GAAG,EAAE,MAAM,CAAC,aAAa,EAAE,+CAA+C;gCAC1E,UAAU,EAAE,MAAM,CAAC,UAAU;gCAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gCACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gCACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gCAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;6BAC9B,CAAC,CAAC;wBACL,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;4BAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,+CAA+C;gBAC/C,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BAE7C,wCAAwC;4BACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gCACjC,EAAE,EAAE,GAAG,CAAC,EAAE;gCACV,IAAI,EAAE,GAAG,CAAC,IAAI;gCACd,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gCACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gCAClB,YAAY,EAAE,GAAG,CAAC,YAAY;gCAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gCACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;6BAC3B,CAAC,CAAC,CAAC;4BAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;wBAChC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;4BAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,6CAA6C;gBAC7C,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,GAAG,SAAS,MAAM;oBACxB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;4BAC1B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BAE/C,IAAI,CAAC,GAAG,EAAE,CAAC;gCACT,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;4BAC9D,CAAC;4BAED,wCAAwC;4BACxC,MAAM,SAAS,GAAG;gCAChB,EAAE,EAAE,GAAG,CAAC,EAAE;gCACV,IAAI,EAAE,GAAG,CAAC,IAAI;gCACd,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gCACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gCAClB,YAAY,EAAE,GAAG,CAAC,YAAY;gCAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gCACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;6BAC3B,CAAC;4BAEF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACtB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;4BAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;wBAC3D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,wCAAwC;gBACxC,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,GAAG,SAAS,MAAM;oBACxB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,wBAAwB;4BACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gCACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oCAC1B,KAAK,EAAE,iBAAiB;iCACzB,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;4BAC1B,MAAM,MAAM,GAAuB,UAAU,CAAC,IAAI,CAAC;4BAEnD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;4BAE9D,IAAI,CAAC,OAAO,EAAE,CAAC;gCACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;4BAC9D,CAAC;4BAED,wCAAwC;4BACxC,MAAM,SAAS,GAAG;gCAChB,EAAE,EAAE,OAAO,CAAC,EAAE;gCACd,IAAI,EAAE,OAAO,CAAC,IAAI;gCAClB,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,YAAY,EAAE,OAAO,CAAC,YAAY;gCAClC,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;gCAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;6BAC/B,CAAC;4BAEF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACtB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;4BAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,2CAA2C;gBAC3C,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,GAAG,SAAS,MAAM;oBACxB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;4BAC1B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;gCACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;4BAC9D,CAAC;4BAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBACzB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;4BAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,QAAQ,CAAC,QAAQ,CAAC;wBAChB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,UAAU;wBACpB,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;4BAC9C,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAW,CAAC,YAAY,EAAE,CAAC;gCAEvD,kBAAkB;gCAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oCAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;wCAC1B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;oCAC5B,CAAC;oCACD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;wCACxB,IAAI,EAAE,KAAK,CAAC,IAAI;wCAChB,WAAW,EAAE,KAAK,CAAC,WAAW;wCAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;qCACzB,CAAC,CAAC;oCACH,OAAO,GAAG,CAAC;gCACb,CAAC,EAAE,EAAqF,CAAC,CAAC;gCAE1F,0BAA0B;gCAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;oCACxE,QAAQ;oCACR,MAAM,EAAE,YAAY;iCACrB,CAAC,CAAC,CAAC;gCAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;4BAC/B,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;gCAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;4BAC/D,CAAC;wBACH,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,uEAAuE;gBACvE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,QAAQ,CAAC,QAAQ,CAAC;wBAChB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,GAAG,SAAS,YAAY;wBAC9B,QAAQ,EAAE,UAAU;wBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;4BAC7C,IAAI,CAAC;gCACH,MAAM,OAAO,GAAG,GAA2B,CAAC;gCAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;gCAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;oCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;gCACpE,CAAC;gCAED,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gCAEjC,6BAA6B;gCAC7B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gCAClD,IAAI,CAAC,GAAG,EAAE,CAAC;oCACT,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gCAC9D,CAAC;gCAED,yBAAyB;gCACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,GAAG,CAAC;gCACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC,IAAI,CAAC,CAAC;gCACzD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gCAChF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gCAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAA8B,CAAC;gCAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;gCACtD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gCAE/F,iBAAiB;gCACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAW,CAAC,WAAW,CAAC,KAAK,EAAE;oCACvD,KAAK;oCACL,MAAM;oCACN,KAAK;oCACL,KAAK;oCACL,QAAQ;oCACR,MAAM;oCACN,UAAU;iCACX,CAAC,CAAC;gCAEH,YAAY;gCACZ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,UAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gCAE5E,GAAG,CAAC,IAAI,CAAC;oCACP,KAAK;oCACL,OAAO,EAAE,GAAG,CAAC,IAAI;oCACjB,UAAU,EAAE,KAAK,CAAC,UAAU;oCAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oCACxB,aAAa,EAAE,KAAK,CAAC,aAAa;oCAClC,eAAe,EAAE,KAAK,CAAC,eAAe;oCACtC,IAAI;iCACL,CAAC,CAAC;4BACL,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gCACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;4BACnE,CAAC;wBACH,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,MAAM;YACV,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAChC,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC;YAChC,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACrC,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACrC,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,0DAA0D;YAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACzD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;gBAEzB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;wBACjE,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,MAAM,uBAAuB,MAAM,CAAC,EAAE,EAAE,EAAE;4BACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;yBACvC,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,iDAAiD,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,mBAAmB;AACnB,2CAA2C;AAE3C;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAEpD,gDAAgD;IAChD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACjD,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA0B;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,KAAa,EACb,MAA0B;IAE1B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC"}

package/dist/plugins/api-keys/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * API Keys Plugin Index
+ *
+ * API key authentication and management plugin with PostgreSQL RLS.
+ * Depends on the Users Plugin for user identity.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export { createApiKeysPlugin, getApiKeysStore, verifyApiKey, createApiKey, listApiKeys, getApiKey, updateApiKey, deleteApiKey, } from './api-keys-plugin.js';
+export type { ApiKeysPluginConfig, ApiKeyStore, ApiKey, ApiKeyWithPlaintext, ApiKeyScope, ApiKeyType, CreateApiKeyParams, UpdateApiKeyParams, PostgresApiKeyStoreConfig, ApiKeysApiConfig, } from './types.js';
+export { ApiKeyScopeSchema, ApiKeyTypeSchema, CreateApiKeySchema, UpdateApiKeySchema, ApiKeySchema, } from './types.js';
+export { postgresApiKeyStore } from './stores/index.js';
+export { bearerTokenAuth } from './middleware/index.js';
+export { ApiKeysStatusWidget } from './ApiKeysStatusWidget.js';
+export type { ApiKeysStatusWidgetProps } from './ApiKeysStatusWidget.js';
+export { ApiKeysManagementPage } from './ApiKeysManagementPage.js';
+export type { ApiKeysManagementPageProps } from './ApiKeysManagementPage.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/api-keys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/api-keys/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,GACb,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/plugins/api-keys/index.js

@@ -0,0 +1,20 @@
+/**
+ * API Keys Plugin Index
+ *
+ * API key authentication and management plugin with PostgreSQL RLS.
+ * Depends on the Users Plugin for user identity.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+// Main plugin
+export { createApiKeysPlugin, getApiKeysStore, verifyApiKey, createApiKey, listApiKeys, getApiKey, updateApiKey, deleteApiKey, } from './api-keys-plugin.js';
+// Zod schemas
+export { ApiKeyScopeSchema, ApiKeyTypeSchema, CreateApiKeySchema, UpdateApiKeySchema, ApiKeySchema, } from './types.js';
+// Stores
+export { postgresApiKeyStore } from './stores/index.js';
+// Middleware
+export { bearerTokenAuth } from './middleware/index.js';
+// UI Components
+export { ApiKeysStatusWidget } from './ApiKeysStatusWidget.js';
+export { ApiKeysManagementPage } from './ApiKeysManagementPage.js';
+//# sourceMappingURL=index.js.map

package/dist/plugins/api-keys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/api-keys/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc;AACd,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,sBAAsB,CAAC;AAgB9B,cAAc;AACd,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,SAAS;AACT,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,aAAa;AACb,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,gBAAgB;AAChB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/plugins/api-keys/middleware/bearer-token-auth.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Bearer Token Authentication Middleware
+ *
+ * Middleware for authenticating API requests using Bearer tokens (API keys).
+ * Verifies the token, checks expiration and active status, and attaches
+ * the authenticated key info to the request.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { Request, Response, NextFunction } from 'express';
+import type { ApiKeyScope } from '../types.js';
+/**
+ * Extended Express Request with API key authentication info
+ */
+export interface ApiKeyAuthenticatedRequest extends Request {
+    apiKey?: {
+        id: string;
+        user_id: string;
+        scopes: ApiKeyScope[];
+        key_type: 'm2m' | 'pat';
+    };
+}
+/**
+ * Options for bearer token authentication middleware
+ */
+export interface BearerTokenAuthOptions {
+    /** Required scopes (all must be present) */
+    requiredScopes?: ApiKeyScope[];
+    /** Allow only specific key types */
+    allowedKeyTypes?: ('m2m' | 'pat')[];
+    /** Custom error handler */
+    onUnauthorized?: (req: Request, res: Response, reason: string) => void;
+}
+/**
+ * Bearer Token Authentication Middleware
+ *
+ * Validates API keys sent as Bearer tokens in the Authorization header.
+ * Attaches authenticated key info to the request for downstream handlers.
+ *
+ * @param options Configuration options
+ * @returns Express middleware function
+ *
+ * @example
+ * ```ts
+ * import { bearerTokenAuth } from '@qwickapps/server';
+ *
+ * // Require authentication
+ * app.get('/api/data', bearerTokenAuth(), (req, res) => {
+ *   const { apiKey } = req as ApiKeyAuthenticatedRequest;
+ *   res.json({ user_id: apiKey?.user_id });
+ * });
+ *
+ * // Require specific scopes
+ * app.post('/api/data', bearerTokenAuth({
+ *   requiredScopes: ['write'],
+ * }), (req, res) => {
+ *   // Handler code
+ * });
+ *
+ * // Allow only M2M keys
+ * app.post('/api/admin', bearerTokenAuth({
+ *   allowedKeyTypes: ['m2m'],
+ *   requiredScopes: ['admin'],
+ * }), (req, res) => {
+ *   // Handler code
+ * });
+ * ```
+ */
+export declare function bearerTokenAuth(options?: BearerTokenAuthOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Helper type guard for API key authenticated requests
+ */
+export declare function isApiKeyAuthenticated(req: Request): req is ApiKeyAuthenticatedRequest;
+//# sourceMappingURL=bearer-token-auth.d.ts.map

package/dist/plugins/api-keys/middleware/bearer-token-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-token-auth.d.ts","sourceRoot":"","sources":["../../../../src/plugins/api-keys/middleware/bearer-token-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAU,WAAW,EAAE,MAAM,aAAa,CAAC;AAIvD;;GAEG;AACH,MAAM,WAAW,0BAA2B,SAAQ,OAAO;IACzD,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,EAAE,CAAC;QACtB,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAC;KACzB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;IAC/B,oCAAoC;IACpC,eAAe,CAAC,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC;IACpC,2BAA2B;IAC3B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACxE;AA8FD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,IAOpD,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAqE9E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,0BAA0B,CAErF"}