bro-framework 2.3.0 → 2.3.1

package/README.md

@@ -20,7 +20,7 @@
 
 ---
 
-> "NestJS wants four decorators, three modules, and an existential crisis just to handle a GET request. Express makes you write the same 40 lines of CORS, JSON parsing, and auth middleware for every project. bro.js gives you file routing, auto-validation, JWT auth, WebSockets, and live docs out of the box. Be honest: you just want to return an object."
+> Skip the boilerplate. bro.js gives you file-based routing, automatic Zod validation, JWT auth, and WebSockets right out of the box. Just write your business logic, return an object, and let the framework handle the rest.
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bro-framework",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "The No-BS Backend Framework for Node.js",
   "repository": {
     "type": "git",

package/src/server.js

@@ -106,21 +106,18 @@ export async function createServer(globalConfig, routesDir, db) {
           }
         };
 
-        if (routeConfig.auth) {
-          const authHeader = req.headers.authorization;
-          if (!authHeader || !authHeader.startsWith('Bearer ')) {
-            return res.status(401).json({ error: 'Unauthorized', details: 'Missing or invalid Bearer token' });
-          }
-          
-          const token = authHeader.split(' ')[1];
-          const authResult = verifyJwt(token, globalConfig.jwtSecret);
-          
-          if (!authResult.valid) {
-            return res.status(401).json({ error: 'Unauthorized', details: authResult.error });
-          }
-          
-          ctx.user = authResult.payload;
+        const authHeader = req.headers.authorization;
+        if ((!authHeader || !authHeader.startsWith('Bearer ')) && routeConfig.auth) {
+          return res.status(401).json({ error: 'Unauthorized', details: 'Missing or invalid Bearer token' });
+        }
+        
+        const token = authHeader?.split(' ')[1] ?? '';
+        const authResult = verifyJwt(token, globalConfig.jwtSecret);
+        
+        if (!authResult.valid && routeConfig.auth) {
+          return res.status(401).json({ error: 'Unauthorized', details: authResult.error });
         }
+        ctx.user = authResult?.payload ?? null;
 
         if (paramsSchema) {
           const result = paramsSchema.safeParse(req.params);