go-duck-cli 1.3.25 → 1.3.31

package/generators/ai_docs.js

@@ -5,6 +5,9 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     const aiDocsDir = path.join(outputDir, 'docs', 'ai');
     await fs.ensureDir(aiDocsDir);
 
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+
     // 1. ARCHITECTURE.md
     const appName = config.name || 'go-duck-app';
     const hasMongo = config.datasource?.mongodb?.enabled;
@@ -32,7 +35,7 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     archContent += `- **Active**: ${storageActive ? 'Yes' : 'No'}\n`;
     if (storageActive) {
         archContent += `- **Enabled Nodes**: ${Object.keys(config.storage).filter(k => config.storage[k]?.enabled).join(', ')}\n`;
-        archContent += `- **Endpoints**: \n  - Upload: \`POST /api/storage/upload?provider=\`\n  - Exact Retrieve: \`GET /api/storage/download/*key?provider=\`\n  - Cross-Scan Locate: \`GET /api/storage/scan/*key\`\n`;
+        archContent += `- **Endpoints**: \n  - Upload: \`POST ${apiPrefix}/storage/upload?provider=\`\n  - Exact Retrieve: \`GET ${apiPrefix}/storage/download/*key?provider=\`\n  - Cross-Scan Locate: \`GET ${apiPrefix}/storage/scan/*key\`\n`;
     }
     const bootstrapActive = config.storage?.bootstrap?.enabled;
     if (bootstrapActive) {
@@ -53,25 +56,25 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
 
     // 2. ENDPOINTS.md
     let endpointsContent = `# REST & gRPC API Surface\n\n`;
-    endpointsContent += `## Base Path: \`/api\`\n\n`;
+    endpointsContent += `## Base Path: \`${apiPrefix}\`\n\n`;
     endpointsContent += `### Standard Entity Endpoints\n`;
     for (const entity of entities) {
         const routeName = entity.name.toLowerCase() + 's';
         endpointsContent += `\n#### ${entity.name}\n`;
-        endpointsContent += `- \`GET /api/${routeName}\` (Pagination & dynamic sorting, e.g. \`?page=1&size=10&eager=true&sort=id,asc\`)\n`;
-        endpointsContent += `- \`GET /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`POST /api/${routeName}\`\n`;
-        endpointsContent += `- \`PUT /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`DELETE /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`POST /api/${routeName}/bulk\` (Bulk Create/Update)\n`;
+        endpointsContent += `- \`GET ${apiPrefix}/${routeName}\` (Pagination & dynamic sorting, e.g. \`?page=1&size=10&eager=true&sort=id,asc\`)\n`;
+        endpointsContent += `- \`GET ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`POST ${apiPrefix}/${routeName}\`\n`;
+        endpointsContent += `- \`PUT ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`DELETE ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`POST ${apiPrefix}/${routeName}/bulk\` (Bulk Create/Update)\n`;
         if (entity.isSearchable) {
-            endpointsContent += `- \`GET /api/search/${routeName}?q={query}\` (Elasticsearch)\n`;
+            endpointsContent += `- \`GET ${apiPrefix}/search/${routeName}?q={query}\` (Elasticsearch)\n`;
         }
     }
 
     endpointsContent += `\n## Infrastructure & Management APIs (SuperAdmin Protected)\n`;
-    endpointsContent += `- \`GET /api/admin/audit\` (Fetches Global Delta logs from the Centralized Audit Engine)\n`;
-    endpointsContent += `- \`POST /api/admin/metering/limit\` (Set SaaS Quota limits)\n`;
+    endpointsContent += `- \`GET ${apiPrefix}/admin/audit\` (Fetches Global Delta logs from the Centralized Audit Engine)\n`;
+    endpointsContent += `- \`POST ${apiPrefix}/admin/metering/limit\` (Set SaaS Quota limits)\n`;
     endpointsContent += `- \`POST /management/tenant/assign\` (Dynamically initialize new Tenant DBs)\n`;
 
     endpointsContent += `\n## Open APIs (No JWT required)\n`;

package/generators/postman.js

@@ -4,6 +4,9 @@ import chalk from 'chalk';
 
 export const generatePostmanCollection = async (config, entities, outputDir, openEntities = []) => {
     const docsDir = path.join(outputDir, 'docs');
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+    const apiPathArr = apiPrefix.split('/').filter(p => p !== '');
     await fs.ensureDir(docsDir);
 
     const collection = {
@@ -140,11 +143,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/admin/audit",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/admin/audit`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "admin", "audit"]
+                        path: [...apiPathArr, "admin", "audit"]
                     }
                 }
             },
@@ -157,11 +160,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/metering/usage",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/metering/usage`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "metering", "usage"]
+                        path: [...apiPathArr, "metering", "usage"]
                     }
                 }
             }
@@ -390,7 +393,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
                 }
             });
             publicItems.push({
@@ -398,7 +401,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`, "1"] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`, "1"] }
                 }
             });
         }
@@ -409,7 +412,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                     method: "POST",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" }, { key: "Content-Type", value: "application/json" } ],
                     body: { mode: "raw", raw: generateDummyJson(entity.fields) },
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`] }
                 }
             });
         }
@@ -425,7 +428,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
                 }
             },
             {
@@ -434,7 +437,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                     method: "POST",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" }, { key: "Content-Type", value: "application/json" } ],
                     body: { mode: "raw", raw: generateDummyJson(entity.fields) },
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`] }
                 }
             },
             {
@@ -442,7 +445,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`, "1"] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`, "1"] }
                 }
             },
             {
@@ -450,7 +453,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/rpc/${name}?id=gt.0`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", "rpc", name], query: [ { key: "id", value: "gt.0" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/rpc/${name}?id=gt.0`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, "rpc", name], query: [ { key: "id", value: "gt.0" } ] }
                 }
             }
         ];
@@ -461,7 +464,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/search/${name}?q=Sample`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", "search", name], query: [ { key: "q", value: "Sample" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/search/${name}?q=Sample`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, "search", name], query: [ { key: "q", value: "Sample" } ] }
                 }
             });
         }
@@ -513,11 +516,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         ]
                     },
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/upload?provider=sftp",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/upload?provider=sftp`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "upload"],
+                        path: [...apiPathArr, "storage", "upload"],
                         query: [{ key: "provider", value: "sftp" }]
                     }
                 }
@@ -531,11 +534,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/download/farm/animals/photo.jpg?provider=sftp",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/download/farm/animals/photo.jpg?provider=sftp`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "download", "farm", "animals", "photo.jpg"],
+                        path: [...apiPathArr, "storage", "download", "farm", "animals", "photo.jpg"],
                         query: [{ key: "provider", value: "sftp" }]
                     }
                 }
@@ -549,11 +552,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/scan/farm/animals/photo.jpg",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/scan/farm/animals/photo.jpg`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "scan", "farm", "animals", "photo.jpg"]
+                        path: [...apiPathArr, "storage", "scan", "farm", "animals", "photo.jpg"]
                     }
                 }
             }

package/generators/swagger.js

@@ -6,6 +6,9 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
     const docsDir = path.join(outputDir, 'docs');
     await fs.ensureDir(docsDir);
 
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+
     const swagger = {
         openapi: '3.0.0',
         info: {
@@ -201,14 +204,14 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
         };
 
         // 1a. Secured Paths
-        addEntityOperations('/api', false);
+        addEntityOperations(apiPrefix, false);
 
         // 1b. Public Paths (if marked as open)
-        addEntityOperations('/open/api', true);
+        addEntityOperations('/open' + apiPrefix, true);
     }
 
     // 2. Add System Paths
-    swagger.paths['/api/rpc/{table}'] = {
+    swagger.paths[`${apiPrefix}/rpc/{table}`] = {
         get: {
             tags: ['Search Engine'],
             summary: 'Generic PostgREST RPC Engine',
@@ -240,7 +243,7 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
         }
     };
 
-    swagger.paths['/api/admin/audit'] = {
+    swagger.paths[`${apiPrefix}/admin/audit`] = {
         get: {
             tags: ['Observability'],
             summary: 'Fetch Audit Trail',
@@ -281,7 +284,7 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
     };
 
     if (config.elasticsearch?.enabled) {
-        swagger.paths['/api/search/{entity}'] = {
+        swagger.paths[`${apiPrefix}/search/{entity}`] = {
             get: {
                 tags: ['Search Engine'],
                 summary: 'Elasticsearch Global Search',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "go-duck-cli",
-  "version": "1.3.25",
+  "version": "1.3.31",
   "description": "The Ultimate Evolutionary Go Microservice Scaffolder.",
   "main": "index.js",
   "type": "module",

package/templates/go/router.go.hbs

@@ -5,6 +5,7 @@ import (
     "fmt"
     "log"
     "net/http"
+    "strings"
     "time"
 
     "github.com/gin-gonic/gin"
@@ -164,39 +165,228 @@ func SetupRouter(appConfig *config.Config) *gin.Engine {
     // Swagger Docs & UI
     r.StaticFile("/swagger.json", "./docs/swagger.json")
     r.GET("/swagger", func(c *gin.Context) {
-        c.Data(http.StatusOK, "text/html; charset=utf-8", []byte(`<!DOCTYPE html>
+        swaggerHTML := `<!DOCTYPE html>
 <html lang="en">
 <head>
   <meta charset="UTF-8">
-  <title>Swagger UI</title>
+  <title>Swagger UI (Secured)</title>
   <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui.css" />
+  <script src="https://cdn.jsdelivr.net/npm/keycloak-js@24.0.4/dist/keycloak.min.js"></script>
   <style>
     html { box-sizing: border-box; overflow: -moz-scrollbars-vertical; overflow-y: scroll; }
     *, *:before, *:after { box-sizing: inherit; }
-    body { margin:0; background: #fafafa; }
+    body { margin:0; background: #fafafa; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; }
+    
+    .top-nav {
+      background: rgba(255, 255, 255, 0.8);
+      backdrop-filter: blur(10px);
+      -webkit-backdrop-filter: blur(10px);
+      border-bottom: 1px solid rgba(0, 0, 0, 0.1);
+      padding: 12px 24px;
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      position: sticky;
+      top: 0;
+      z-index: 1000;
+      box-shadow: 0 4px 6px -1px rgba(0,0,0,0.05);
+    }
+
+    .nav-brand {
+      font-weight: 700;
+      font-size: 1.2rem;
+      color: #333;
+      display: flex;
+      align-items: center;
+      gap: 10px;
+    }
+
+    .nav-controls {
+      display: flex;
+      align-items: center;
+      gap: 16px;
+    }
+
+    .tenant-input {
+      padding: 8px 12px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-size: 0.9rem;
+      outline: none;
+      transition: border-color 0.2s;
+    }
+    
+    .tenant-input:focus {
+      border-color: #4a90e2;
+    }
+
+    .btn {
+      padding: 8px 16px;
+      border-radius: 6px;
+      border: none;
+      font-weight: 600;
+      cursor: pointer;
+      transition: all 0.2s;
+      font-size: 0.9rem;
+    }
+
+    .btn-login {
+      background: #4a90e2;
+      color: white;
+    }
+
+    .btn-login:hover {
+      background: #357abd;
+    }
+
+    .btn-logout {
+      background: #e74c3c;
+      color: white;
+      display: none;
+    }
+
+    .btn-logout:hover {
+      background: #c0392b;
+    }
+
+    .status-indicator {
+      display: flex;
+      align-items: center;
+      gap: 6px;
+      font-size: 0.85rem;
+      color: #666;
+    }
+
+    .dot {
+      width: 8px;
+      height: 8px;
+      border-radius: 50%;
+      background: #ccc;
+    }
+
+    .dot.active {
+      background: #2ecc71;
+      box-shadow: 0 0 8px #2ecc71;
+    }
   </style>
 </head>
 <body>
+  <div class="top-nav">
+    <div class="nav-brand">
+      <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 2L2 7l10 5 10-5-10-5zM2 17l10 5 10-5M2 12l10 5 10-5"/></svg>
+      GO-DUCK API Explorer
+    </div>
+    <div class="nav-controls">
+      <div class="status-indicator">
+        <div class="dot" id="auth-dot"></div>
+        <span id="auth-status">Unauthenticated</span>
+      </div>
+      <input type="text" id="tenant-input" class="tenant-input" placeholder="X-Tenant-ID" value="tenant_1" title="Multi-tenant DB Target" />
+      <button id="login-btn" class="btn btn-login">Login with Keycloak</button>
+      <button id="logout-btn" class="btn btn-logout">Logout</button>
+    </div>
+  </div>
+
   <div id="swagger-ui"></div>
+  
   <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-bundle.js"></script>
   <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-standalone-preset.js"></script>
   <script>
+    const KEYCLOAK_URL = 'KEYCLOAK_URL_PLACEHOLDER';
+    const KEYCLOAK_REALM = 'KEYCLOAK_REALM_PLACEHOLDER';
+    const KEYCLOAK_CLIENT = 'KEYCLOAK_CLIENT_PLACEHOLDER';
+
+    let keycloak = null;
+
+    function updateUI(authenticated) {
+      if (authenticated) {
+        document.getElementById('login-btn').style.display = 'none';
+        document.getElementById('logout-btn').style.display = 'block';
+        document.getElementById('auth-dot').classList.add('active');
+        document.getElementById('auth-status').innerText = 'Authenticated (' + (keycloak.tokenParsed?.preferred_username || 'User') + ')';
+      } else {
+        document.getElementById('login-btn').style.display = 'block';
+        document.getElementById('logout-btn').style.display = 'none';
+        document.getElementById('auth-dot').classList.remove('active');
+        document.getElementById('auth-status').innerText = 'Unauthenticated';
+      }
+    }
+
     window.onload = function() {
-      const ui = SwaggerUIBundle({
-        url: "/swagger.json",
-        dom_id: '#swagger-ui',
-        deepLinking: true,
-        presets: [
-          SwaggerUIBundle.presets.apis,
-          SwaggerUIStandalonePreset
-        ],
-        layout: "StandaloneLayout"
+      // Initialize Keycloak
+      keycloak = new Keycloak({
+        url: KEYCLOAK_URL,
+        realm: KEYCLOAK_REALM,
+        clientId: KEYCLOAK_CLIENT
+      });
+
+      keycloak.init({ onLoad: 'check-sso', checkLoginIframe: false }).then(authenticated => {
+        updateUI(authenticated);
+
+        document.getElementById('login-btn').onclick = () => keycloak.login();
+        document.getElementById('logout-btn').onclick = () => keycloak.logout();
+
+        if (authenticated) {
+          // Auto-refresh token logic
+          setInterval(() => {
+            keycloak.updateToken(70).then(refreshed => {
+              if (refreshed) {
+                console.log('Token refreshed automatically');
+              }
+            }).catch(() => {
+              console.error('Failed to refresh token');
+              updateUI(false);
+            });
+          }, 60000); // Check every minute
+        }
+
+        // Initialize Swagger UI with Interceptor
+        window.ui = SwaggerUIBundle({
+          url: "/swagger.json",
+          dom_id: '#swagger-ui',
+          deepLinking: true,
+          presets: [
+            SwaggerUIBundle.presets.apis,
+            SwaggerUIStandalonePreset
+          ],
+          layout: "StandaloneLayout",
+          requestInterceptor: (req) => {
+            if (keycloak && keycloak.token) {
+              req.headers['Authorization'] = 'Bearer ' + keycloak.token;
+            }
+            const tenantId = document.getElementById('tenant-input').value;
+            if (tenantId) {
+              req.headers['X-Tenant-ID'] = tenantId;
+            }
+            return req;
+          }
+        });
+      }).catch(err => {
+        console.error("Keycloak initialization failed", err);
+        document.getElementById('auth-status').innerText = 'Keycloak init failed';
+        
+        // Still load swagger without auth interceptor
+        window.ui = SwaggerUIBundle({
+          url: "/swagger.json",
+          dom_id: '#swagger-ui',
+          deepLinking: true,
+          presets: [
+            SwaggerUIBundle.presets.apis,
+            SwaggerUIStandalonePreset
+          ],
+          layout: "StandaloneLayout"
+        });
       });
-      window.ui = ui;
     };
   </script>
 </body>
-</html>`))
+</html>`
+
+        htmlStr := strings.ReplaceAll(swaggerHTML, "KEYCLOAK_URL_PLACEHOLDER", appConfig.GoDuck.Security.KeycloakHost)
+        htmlStr = strings.ReplaceAll(htmlStr, "KEYCLOAK_REALM_PLACEHOLDER", appConfig.GoDuck.Security.KeycloakRealm)
+        htmlStr = strings.ReplaceAll(htmlStr, "KEYCLOAK_CLIENT_PLACEHOLDER", appConfig.GoDuck.Security.KeycloakAppClientID)
+
+        c.Data(http.StatusOK, "text/html; charset=utf-8", []byte(htmlStr))
     })
 
     // Management APIs (Run-time DB onboarding)