@valentine-efagene/qshelter-common 2.0.129 → 2.0.132

package/dist/src/config/config.service.js

@@ -39,13 +39,22 @@ export class ConfigService {
             return cached;
         const pathPrefix = `/qshelter/${stage}/`;
         try {
-            const command = new GetParametersByPathCommand({
-                Path: pathPrefix,
-                Recursive: true,
-                WithDecryption: false,
-            });
-            const response = await this.ssmClient.send(command);
-            const params = response.Parameters || [];
+            // Paginate through all SSM parameters
+            const params = [];
+            let nextToken;
+            do {
+                const command = new GetParametersByPathCommand({
+                    Path: pathPrefix,
+                    Recursive: true,
+                    WithDecryption: false,
+                    NextToken: nextToken,
+                });
+                const response = await this.ssmClient.send(command);
+                if (response.Parameters) {
+                    params.push(...response.Parameters);
+                }
+                nextToken = response.NextToken;
+            } while (nextToken);
             const config = {
                 vpcId: this.getParamValue(params, `${pathPrefix}vpc-id`),
                 dbSecurityGroupId: this.getParamValue(params, `${pathPrefix}db-security-group-id`),

package/dist/src/middleware/auth-context.d.ts

@@ -23,8 +23,9 @@ export interface AuthContext {
  * Extracts auth context from API Gateway authorizer or JWT token.
  *
  * Priority:
- * 1. Production: requestContext.authorizer (set by API Gateway Lambda Authorizer)
- * 2. Fallback: Decode JWT from Authorization header (LocalStack/dev/tests)
+ * 1. HTTP API v2 simple response: requestContext.authorizer.lambda (enableSimpleResponses=true)
+ * 2. REST API / HTTP API: requestContext.authorizer (enableSimpleResponses=false)
+ * 3. Fallback: Decode JWT from Authorization header (LocalStack/dev/tests)
  *
  * In production, the Lambda Authorizer validates the JWT and injects context.
  * In LocalStack (no authorizer), we decode the JWT directly since it contains

package/dist/src/middleware/auth-context.js

@@ -19,8 +19,9 @@ function decodeJwtPayload(token) {
  * Extracts auth context from API Gateway authorizer or JWT token.
  *
  * Priority:
- * 1. Production: requestContext.authorizer (set by API Gateway Lambda Authorizer)
- * 2. Fallback: Decode JWT from Authorization header (LocalStack/dev/tests)
+ * 1. HTTP API v2 simple response: requestContext.authorizer.lambda (enableSimpleResponses=true)
+ * 2. REST API / HTTP API: requestContext.authorizer (enableSimpleResponses=false)
+ * 3. Fallback: Decode JWT from Authorization header (LocalStack/dev/tests)
  *
  * In production, the Lambda Authorizer validates the JWT and injects context.
  * In LocalStack (no authorizer), we decode the JWT directly since it contains
@@ -31,8 +32,18 @@ function decodeJwtPayload(token) {
  */
 export function extractAuthContext(req) {
     const lambdaReq = req;
-    // Production: API Gateway Lambda integration populates requestContext
     const authorizer = lambdaReq.requestContext?.authorizer;
+    // HTTP API v2 with enableSimpleResponses=true: context is under authorizer.lambda
+    const lambdaContext = authorizer?.lambda;
+    if (lambdaContext?.userId && lambdaContext?.tenantId) {
+        return {
+            userId: lambdaContext.userId,
+            tenantId: lambdaContext.tenantId,
+            email: lambdaContext.email,
+            roles: lambdaContext.roles ? JSON.parse(lambdaContext.roles) : [],
+        };
+    }
+    // REST API / HTTP API with enableSimpleResponses=false: context is directly on authorizer
     if (authorizer?.userId && authorizer?.tenantId) {
         return {
             userId: authorizer.userId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valentine-efagene/qshelter-common",
-  "version": "2.0.129",
+  "version": "2.0.132",
   "description": "Shared database schemas and utilities for QShelter services",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",