@yosr-ai/template-spring 0.0.0-stage → 0.2.5

package/CHANGELOG.md

@@ -0,0 +1,14 @@
+# @yosr-ai/template-spring
+
+## 0.2.5
+
+### Patch Changes
+
+- 63badc9: Add the ASP.NET Core API template (`--template dotnet`, ADR 0026): .NET 10 LTS, minimal API, xUnit + WebApplicationFactory, locked NuGet restore with committed `packages.lock.json` and `global.json`, notes API, database none/Postgres (EF Core + Npgsql), API-key auth, multi-stage non-root Docker. Engine gains `engines.dotnet` / package manager `dotnet` (and the same shape for later `engines.java` / `maven`). Joins the Yosr Seed fixed group.
+- 11f252b: Add Spring Boot template-spring (ADR 0027): Java 25, Maven locked resolve, optional JPA Postgres.
+
+## 0.2.4
+
+### Minor Changes
+
+- First npm package of the Spring Boot API template (`--template spring`, ADR 0027): Java 25, Spring Boot 4.1.2, Maven + Spotless, JUnit 5 + MockMvc, locked Maven resolve, notes API, database none/Postgres (Spring Data JPA), API-key auth, Docker (multi-stage non-root). Awaits CLI wire-up and Changesets fixed group.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wael Zohny / Yosr AI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,15 @@
-# Temporary Holding Version
+# @yosr-ai/template-spring
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Yosr Seed template for an API-only Spring Boot service on Java 25 (ADR 0027). Create with:
+
+```bash
+npx create-yosr-seed@latest my-api --template spring
+```
+
+Published MIT. Exact-pinned by the `yosr-seed` CLI.
+
+## Bugs and feedback
+
+Email **wzohny@gmail.com**. The source repository is private, so there is no public issue tracker.
+
+Site: [seed.yosr.ai](https://seed.yosr.ai)

package/features/auth-api-key/files/src/main/java/com/yosr/app/core/ApiKeyFilter.java

@@ -0,0 +1,52 @@
+package com.yosr.app.core;
+
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.util.Map;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.http.MediaType;
+import org.springframework.stereotype.Component;
+import org.springframework.web.filter.OncePerRequestFilter;
+import tools.jackson.databind.ObjectMapper;
+
+@Component
+public class ApiKeyFilter extends OncePerRequestFilter {
+
+  public static final String HEADER_NAME = "X-API-Key";
+
+  private final String apiKey;
+  private final ObjectMapper json;
+
+  public ApiKeyFilter(@Value("${app.api-key:}") String apiKey, ObjectMapper json) {
+    this.apiKey = apiKey;
+    this.json = json;
+  }
+
+  @Override
+  protected boolean shouldNotFilter(HttpServletRequest request) {
+    return "/health".equals(request.getRequestURI());
+  }
+
+  @Override
+  protected void doFilterInternal(
+      HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
+      throws ServletException, IOException {
+    if (apiKey == null || apiKey.isBlank()) {
+      response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
+      response.setContentType(MediaType.APPLICATION_JSON_VALUE);
+      json.writeValue(response.getOutputStream(), Map.of("detail", "API_KEY is not configured."));
+      return;
+    }
+    String provided = request.getHeader(HEADER_NAME);
+    if (provided == null || !apiKey.equals(provided)) {
+      response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+      response.setContentType(MediaType.APPLICATION_JSON_VALUE);
+      json.writeValue(response.getOutputStream(), Map.of("detail", "Invalid or missing API key."));
+      return;
+    }
+    filterChain.doFilter(request, response);
+  }
+}

package/features/auth-api-key/files/src/test/java/com/yosr/app/ApiKeyTest.java

@@ -0,0 +1,45 @@
+package com.yosr.app;
+
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+import com.yosr.app.core.ApiKeyFilter;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.test.context.TestPropertySource;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.test.web.servlet.setup.MockMvcBuilders;
+import org.springframework.web.context.WebApplicationContext;
+
+@SpringBootTest
+@TestPropertySource(properties = "app.api-key=test-api-key")
+class ApiKeyTest {
+
+  @Autowired private WebApplicationContext context;
+
+  private MockMvc mockMvc;
+
+  @BeforeEach
+  void setup() {
+    mockMvc = MockMvcBuilders.webAppContextSetup(context).build();
+  }
+
+  @Test
+  void missingApiKeyIsUnauthorized() throws Exception {
+    mockMvc.perform(get("/notes")).andExpect(status().isUnauthorized());
+  }
+
+  @Test
+  void healthStaysOpen() throws Exception {
+    mockMvc.perform(get("/health")).andExpect(status().isOk());
+  }
+
+  @Test
+  void validApiKeyWorks() throws Exception {
+    mockMvc
+        .perform(get("/notes").header(ApiKeyFilter.HEADER_NAME, "test-api-key"))
+        .andExpect(status().isOk());
+  }
+}

package/features/auth-api-key/snippets/application-api-key.yaml

@@ -0,0 +1 @@
+  api-key: ${API_KEY:}