@vereign/core 1.4.0 → 1.5.0

package/dist/index.js

@@ -136,10 +136,11 @@ var CHMED16AController = class {
   constructor(logger) {
     this.process = (req, res, next) => __async(this, null, function* () {
       const { chmed, lang } = req.body;
+      const token = req.token;
       const start = Date.now();
       try {
         this.logger.info("Processing started");
-        const json = yield this.parseChmedData(chmed, lang);
+        const json = yield this.parseChmedData(chmed, token, lang);
         yield this.generatePdfResponse(json, res);
         this.logger.info(`Total request time: ${Date.now() - start} ms`);
       } catch (error) {
@@ -150,11 +151,12 @@ var CHMED16AController = class {
     this.sds = new import_chmed_parser.SDS("https://sds-test.hin.ch", logger);
     this.parser = new import_chmed_parser.CHMEDParser(logger);
   }
-  parseChmedData(chmed, lang) {
+  parseChmedData(chmed, token, lang) {
     return __async(this, null, function* () {
       try {
         const parseStart = Date.now();
-        const json = yield this.parser.parse(chmed, this.sds, lang);
+        this.logger.debug(`before parsing ${chmed}, ${token}, ${lang}`);
+        const json = yield this.parser.parse(chmed, this.sds, token, lang);
         this.logger.info(`Parsing took ${Date.now() - parseStart} ms`);
         return json;
       } catch (error) {
@@ -265,6 +267,37 @@ var validateBody = (logger) => {
     }
   };
 };
+var validateBearerToken = (logger) => {
+  return (req, res, next) => {
+    let token = null;
+    const headerKey = "Bearer";
+    if (req.headers.authorization) {
+      const parts = req.headers.authorization.split(" ");
+      if (parts.length === 2 && parts[0] === headerKey) {
+        token = parts[1];
+      }
+    }
+    logger.debug("debug token here", { token });
+    if (!token) {
+      logger.warn("Missing or invalid Authorization header", {
+        ip: req.ip,
+        userAgent: req.get("User-Agent")
+      });
+      return res.status(401).json(
+        new AppError(401, "Bearer token required", "UNAUTHORIZED", [
+          {
+            path: "authorization",
+            message: "Authorization header with Bearer token is required",
+            code: "missing_token"
+          }
+        ]).toJSON()
+      );
+    }
+    req.token = token;
+    logger.debug("Bearer token found and attached to request");
+    next();
+  };
+};
 
 // src/chmed16/router.ts
 var CHMED16ARouter = class {
@@ -273,6 +306,7 @@ var CHMED16ARouter = class {
     const controller = new CHMED16AController(logger);
     router.post(
       "/chmed",
+      validateBearerToken(logger),
       validateBody(logger),
       controller.process.bind(controller)
     );

package/dist/index.mjs

@@ -105,10 +105,11 @@ var CHMED16AController = class {
   constructor(logger) {
     this.process = (req, res, next) => __async(this, null, function* () {
       const { chmed, lang } = req.body;
+      const token = req.token;
       const start = Date.now();
       try {
         this.logger.info("Processing started");
-        const json = yield this.parseChmedData(chmed, lang);
+        const json = yield this.parseChmedData(chmed, token, lang);
         yield this.generatePdfResponse(json, res);
         this.logger.info(`Total request time: ${Date.now() - start} ms`);
       } catch (error) {
@@ -119,11 +120,12 @@ var CHMED16AController = class {
     this.sds = new SDS("https://sds-test.hin.ch", logger);
     this.parser = new CHMEDParser(logger);
   }
-  parseChmedData(chmed, lang) {
+  parseChmedData(chmed, token, lang) {
     return __async(this, null, function* () {
       try {
         const parseStart = Date.now();
-        const json = yield this.parser.parse(chmed, this.sds, lang);
+        this.logger.debug(`before parsing ${chmed}, ${token}, ${lang}`);
+        const json = yield this.parser.parse(chmed, this.sds, token, lang);
         this.logger.info(`Parsing took ${Date.now() - parseStart} ms`);
         return json;
       } catch (error) {
@@ -234,6 +236,37 @@ var validateBody = (logger) => {
     }
   };
 };
+var validateBearerToken = (logger) => {
+  return (req, res, next) => {
+    let token = null;
+    const headerKey = "Bearer";
+    if (req.headers.authorization) {
+      const parts = req.headers.authorization.split(" ");
+      if (parts.length === 2 && parts[0] === headerKey) {
+        token = parts[1];
+      }
+    }
+    logger.debug("debug token here", { token });
+    if (!token) {
+      logger.warn("Missing or invalid Authorization header", {
+        ip: req.ip,
+        userAgent: req.get("User-Agent")
+      });
+      return res.status(401).json(
+        new AppError(401, "Bearer token required", "UNAUTHORIZED", [
+          {
+            path: "authorization",
+            message: "Authorization header with Bearer token is required",
+            code: "missing_token"
+          }
+        ]).toJSON()
+      );
+    }
+    req.token = token;
+    logger.debug("Bearer token found and attached to request");
+    next();
+  };
+};
 
 // src/chmed16/router.ts
 var CHMED16ARouter = class {
@@ -242,6 +275,7 @@ var CHMED16ARouter = class {
     const controller = new CHMED16AController(logger);
     router.post(
       "/chmed",
+      validateBearerToken(logger),
       validateBody(logger),
       controller.process.bind(controller)
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vereign/core",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "core api library for e prescription project",
   "repository": {
     "type": "git",
@@ -60,8 +60,8 @@
     "zod-openapi": "^5.3.1"
   },
   "dependencies": {
-    "@vereign/chmed-parser": "^1.6.0",
-    "@vereign/pdf-generator": "^1.4.0",
+    "@vereign/chmed-parser": "^1.7.3",
+    "@vereign/pdf-generator": "^1.5.0",
     "express": "^5.1.0",
     "pdfkit": "^0.17.1",
     "winston": "^3.17.0",