go-duck-cli 1.3.25 → 1.3.35

package/README.md

@@ -59,8 +59,9 @@ GO-DUCK has officially reached the **410% Achievement Status**, evolving from a
 | **Silo Discovery & Privacy Proxy** | 🚀 **ELITE (+10%)** | Silo discovery API with physical DB name masking. |
 | **Universal Storage Mesh** | 🚀 **ELITE (+25%)** | Dynamic Hot-Swapping Registry and Distributed Cross-Scan API retrieval. |
 | **WSO2 API Gateway Integration** | 🚀 **ELITE (+15%)** | Automated OpenAPI registration & proxy mapping. |
+| **API Gateway Standards & Swagger UI** | 🚀 **ELITE (+10%)** | Keycloak SSO, Glassmorphism UI, JHipster `/v3/api-docs` compliance. |
 | **Full-Spectrum GDL Evolution** | 🚀 **ELITE (+15%)** | Native DROP/ALTER migrations with dead-code purging. |
-| **TOTAL ACHIEVEMENT STATUS** | 🏆 **410%** | **ELITE STATUS CONFIRMED.** 👑 |
+| **TOTAL ACHIEVEMENT STATUS** | 🏆 **420%** | **ELITE STATUS CONFIRMED.** 👑 |
 
 ### ✨ Primary Features (The 410% Core)
 
@@ -75,6 +76,8 @@ GO-DUCK has officially reached the **410% Achievement Status**, evolving from a
 *   **Distributed Saga Consistency**: Integrated **Transactional Outbox** pattern and background workers in every silo to guarantee eventual consistency across the federation.
 *   **Zero-Trust Identity Registry**: Decoupled mapping layer ensuring physical database names and internal IDs never leak to the client.
 *   **Universal Storage Mesh**: Dynamic Multi-Provider Registry allowing hot-swapping at runtime via `?provider=` queries, alongside Distributed Cross-Scan endpoints to auto-locate files across AWS, GCS, SFTP, and GitHub lakes.
+*   **Enterprise API Gateway Compatibility**: Natively exposes the Swagger/OpenAPI JSON specification at `/v3/api-docs` to ensure drop-in compatibility with **JHipster**, **WSO2 API Manager**, and Spring Boot ecosystems.
+*   **Next-Gen Swagger UI**: A fully glassmorphism-styled Swagger UI with seamless Keycloak SSO integration. Features automatic JWT token refresh, dynamic `X-Tenant-ID` header injection, and CLI metadata branding.
 *   **Spring-style Elasticsearch Search**: Real-time sync for entities marked with `@Searchable`, supporting native `query_string` syntax (wildcards like `*`, booleans, ranges, and fuzzy matching).
 *   **SaaS Quota Engine**: Redis-backed API bandwidth tracking with dynamic, hierarchical limits (User vs. Role mapping).
 *   **Resilience Layer**: Sony/Gobreaker Integration + Zero-Trust Distributed Redis Rate Limiter.

package/generators/ai_docs.js

@@ -5,6 +5,9 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     const aiDocsDir = path.join(outputDir, 'docs', 'ai');
     await fs.ensureDir(aiDocsDir);
 
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+
     // 1. ARCHITECTURE.md
     const appName = config.name || 'go-duck-app';
     const hasMongo = config.datasource?.mongodb?.enabled;
@@ -32,7 +35,7 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     archContent += `- **Active**: ${storageActive ? 'Yes' : 'No'}\n`;
     if (storageActive) {
         archContent += `- **Enabled Nodes**: ${Object.keys(config.storage).filter(k => config.storage[k]?.enabled).join(', ')}\n`;
-        archContent += `- **Endpoints**: \n  - Upload: \`POST /api/storage/upload?provider=\`\n  - Exact Retrieve: \`GET /api/storage/download/*key?provider=\`\n  - Cross-Scan Locate: \`GET /api/storage/scan/*key\`\n`;
+        archContent += `- **Endpoints**: \n  - Upload: \`POST ${apiPrefix}/storage/upload?provider=\`\n  - Exact Retrieve: \`GET ${apiPrefix}/storage/download/*key?provider=\`\n  - Cross-Scan Locate: \`GET ${apiPrefix}/storage/scan/*key\`\n`;
     }
     const bootstrapActive = config.storage?.bootstrap?.enabled;
     if (bootstrapActive) {
@@ -53,25 +56,25 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
 
     // 2. ENDPOINTS.md
     let endpointsContent = `# REST & gRPC API Surface\n\n`;
-    endpointsContent += `## Base Path: \`/api\`\n\n`;
+    endpointsContent += `## Base Path: \`${apiPrefix}\`\n\n`;
     endpointsContent += `### Standard Entity Endpoints\n`;
     for (const entity of entities) {
         const routeName = entity.name.toLowerCase() + 's';
         endpointsContent += `\n#### ${entity.name}\n`;
-        endpointsContent += `- \`GET /api/${routeName}\` (Pagination & dynamic sorting, e.g. \`?page=1&size=10&eager=true&sort=id,asc\`)\n`;
-        endpointsContent += `- \`GET /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`POST /api/${routeName}\`\n`;
-        endpointsContent += `- \`PUT /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`DELETE /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`POST /api/${routeName}/bulk\` (Bulk Create/Update)\n`;
+        endpointsContent += `- \`GET ${apiPrefix}/${routeName}\` (Pagination & dynamic sorting, e.g. \`?page=1&size=10&eager=true&sort=id,asc\`)\n`;
+        endpointsContent += `- \`GET ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`POST ${apiPrefix}/${routeName}\`\n`;
+        endpointsContent += `- \`PUT ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`DELETE ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`POST ${apiPrefix}/${routeName}/bulk\` (Bulk Create/Update)\n`;
         if (entity.isSearchable) {
-            endpointsContent += `- \`GET /api/search/${routeName}?q={query}\` (Elasticsearch)\n`;
+            endpointsContent += `- \`GET ${apiPrefix}/search/${routeName}?q={query}\` (Elasticsearch)\n`;
         }
     }
 
     endpointsContent += `\n## Infrastructure & Management APIs (SuperAdmin Protected)\n`;
-    endpointsContent += `- \`GET /api/admin/audit\` (Fetches Global Delta logs from the Centralized Audit Engine)\n`;
-    endpointsContent += `- \`POST /api/admin/metering/limit\` (Set SaaS Quota limits)\n`;
+    endpointsContent += `- \`GET ${apiPrefix}/admin/audit\` (Fetches Global Delta logs from the Centralized Audit Engine)\n`;
+    endpointsContent += `- \`POST ${apiPrefix}/admin/metering/limit\` (Set SaaS Quota limits)\n`;
     endpointsContent += `- \`POST /management/tenant/assign\` (Dynamically initialize new Tenant DBs)\n`;
 
     endpointsContent += `\n## Open APIs (No JWT required)\n`;

package/generators/postman.js

@@ -4,6 +4,9 @@ import chalk from 'chalk';
 
 export const generatePostmanCollection = async (config, entities, outputDir, openEntities = []) => {
     const docsDir = path.join(outputDir, 'docs');
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+    const apiPathArr = apiPrefix.split('/').filter(p => p !== '');
     await fs.ensureDir(docsDir);
 
     const collection = {
@@ -140,11 +143,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/admin/audit",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/admin/audit`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "admin", "audit"]
+                        path: [...apiPathArr, "admin", "audit"]
                     }
                 }
             },
@@ -157,11 +160,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/metering/usage",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/metering/usage`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "metering", "usage"]
+                        path: [...apiPathArr, "metering", "usage"]
                     }
                 }
             }
@@ -390,7 +393,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
                 }
             });
             publicItems.push({
@@ -398,7 +401,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`, "1"] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`, "1"] }
                 }
             });
         }
@@ -409,7 +412,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                     method: "POST",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" }, { key: "Content-Type", value: "application/json" } ],
                     body: { mode: "raw", raw: generateDummyJson(entity.fields) },
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`] }
                 }
             });
         }
@@ -425,7 +428,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
                 }
             },
             {
@@ -434,7 +437,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                     method: "POST",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" }, { key: "Content-Type", value: "application/json" } ],
                     body: { mode: "raw", raw: generateDummyJson(entity.fields) },
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`] }
                 }
             },
             {
@@ -442,7 +445,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`, "1"] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`, "1"] }
                 }
             },
             {
@@ -450,7 +453,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/rpc/${name}?id=gt.0`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", "rpc", name], query: [ { key: "id", value: "gt.0" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/rpc/${name}?id=gt.0`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, "rpc", name], query: [ { key: "id", value: "gt.0" } ] }
                 }
             }
         ];
@@ -461,7 +464,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/search/${name}?q=Sample`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", "search", name], query: [ { key: "q", value: "Sample" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/search/${name}?q=Sample`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, "search", name], query: [ { key: "q", value: "Sample" } ] }
                 }
             });
         }
@@ -513,11 +516,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         ]
                     },
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/upload?provider=sftp",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/upload?provider=sftp`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "upload"],
+                        path: [...apiPathArr, "storage", "upload"],
                         query: [{ key: "provider", value: "sftp" }]
                     }
                 }
@@ -531,11 +534,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/download/farm/animals/photo.jpg?provider=sftp",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/download/farm/animals/photo.jpg?provider=sftp`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "download", "farm", "animals", "photo.jpg"],
+                        path: [...apiPathArr, "storage", "download", "farm", "animals", "photo.jpg"],
                         query: [{ key: "provider", value: "sftp" }]
                     }
                 }
@@ -549,11 +552,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/scan/farm/animals/photo.jpg",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/scan/farm/animals/photo.jpg`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "scan", "farm", "animals", "photo.jpg"]
+                        path: [...apiPathArr, "storage", "scan", "farm", "animals", "photo.jpg"]
                     }
                 }
             }

package/generators/router.js

@@ -19,10 +19,17 @@ export const generateRouterCode = async (outputDir, config, entities, openEntiti
     const templateSource = await fs.readFile(templatePath, 'utf8');
     const template = Handlebars.compile(templateSource);
 
+    const packageJsonPath = path.resolve(__dirname, '../package.json');
+    const packageJson = await fs.readJson(packageJsonPath);
+    const cliVersion = packageJson.version;
+    const generatedDate = new Date().toISOString();
+
     const content = template({
         app_name: config.name,
         entities,
-        openEntities
+        openEntities,
+        cli_version: cliVersion,
+        generated_date: generatedDate
     });
 
     await fs.writeFile(path.join(routerDir, 'router.go'), content);

package/generators/swagger.js

@@ -6,6 +6,9 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
     const docsDir = path.join(outputDir, 'docs');
     await fs.ensureDir(docsDir);
 
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+
     const swagger = {
         openapi: '3.0.0',
         info: {
@@ -201,14 +204,14 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
         };
 
         // 1a. Secured Paths
-        addEntityOperations('/api', false);
+        addEntityOperations(apiPrefix, false);
 
         // 1b. Public Paths (if marked as open)
-        addEntityOperations('/open/api', true);
+        addEntityOperations('/open' + apiPrefix, true);
     }
 
     // 2. Add System Paths
-    swagger.paths['/api/rpc/{table}'] = {
+    swagger.paths[`${apiPrefix}/rpc/{table}`] = {
         get: {
             tags: ['Search Engine'],
             summary: 'Generic PostgREST RPC Engine',
@@ -240,7 +243,7 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
         }
     };
 
-    swagger.paths['/api/admin/audit'] = {
+    swagger.paths[`${apiPrefix}/admin/audit`] = {
         get: {
             tags: ['Observability'],
             summary: 'Fetch Audit Trail',
@@ -281,7 +284,7 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
     };
 
     if (config.elasticsearch?.enabled) {
-        swagger.paths['/api/search/{entity}'] = {
+        swagger.paths[`${apiPrefix}/search/{entity}`] = {
             get: {
                 tags: ['Search Engine'],
                 summary: 'Elasticsearch Global Search',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "go-duck-cli",
-  "version": "1.3.25",
+  "version": "1.3.35",
   "description": "The Ultimate Evolutionary Go Microservice Scaffolder.",
   "main": "index.js",
   "type": "module",

package/templates/docs/pages/index.hbs

@@ -16,7 +16,7 @@
                     <span class="animate-ping absolute inline-flex h-full w-full rounded-full bg-emerald-400 opacity-75"></span>
                     <span class="relative inline-flex rounded-full h-3 w-3 bg-emerald-500"></span>
                 </span>
-                <p class="text-[11px] font-black text-indigo-900 uppercase tracking-[0.25em]">The 395% Elite Milestone Surpassed</p>
+                <p class="text-[11px] font-black text-indigo-900 uppercase tracking-[0.25em]">The 420% Elite Milestone Surpassed</p>
             </div>
             
             <!-- Heroic Logo Anchor (Enhanced) -->
@@ -121,6 +121,16 @@
                     </div>
                 </div>
 
+                <div class="lg:col-span-12 bg-white p-10 rounded-[2.5rem] border border-amber-100 shadow-sm hover:shadow-2xl transition-all group relative overflow-hidden cursor-crosshair bg-gradient-to-br from-white to-amber-50/30">
+                    <p class="text-[9px] font-bold text-amber-600 uppercase tracking-widest mb-4">Elite Extension (+10%)</p>
+                    <h4 class="text-2xl font-black text-slate-900 mb-3 tracking-tight italic">API Gateway Standards & Swagger UI</h4>
+                    <p class="text-slate-600 leading-relaxed mb-8">Natively exposes OpenAPI JSON at the JHipster-standard <code>/v3/api-docs</code> endpoint. Features a completely re-engineered, glassmorphism Swagger UI deeply integrated with Keycloak SSO and automatic token refreshing.</p>
+                    <div class="flex gap-3">
+                        <span class="px-4 py-1.5 bg-amber-100 text-amber-700 text-[9px] font-black rounded-lg">JHIPSTER COMPATIBLE</span>
+                        <span class="px-4 py-1.5 bg-amber-100 text-amber-700 text-[9px] font-black rounded-lg">KEYCLOAK SSO UI</span>
+                    </div>
+                </div>
+
                 <div class="lg:col-span-12 bg-white p-10 rounded-[2.5rem] border border-fuchsia-100 shadow-sm hover:shadow-2xl transition-all group relative overflow-hidden cursor-crosshair bg-gradient-to-br from-white to-fuchsia-50/30">
                     <p class="text-[9px] font-bold text-fuchsia-600 uppercase tracking-widest mb-4">Elite Extension (+12%)</p>
                     <h4 class="text-2xl font-black text-slate-900 mb-3 tracking-tight italic">K8s Network Isolation & NodePorts</h4>
@@ -436,7 +446,7 @@
                 </div>
 
             <div class="mt-24 text-slate-500 font-mono text-[10px] uppercase tracking-[0.6em] font-black relative z-10">
-                GO-DUCK &bull; THE 395% ELITE MILESTONE &bull; SOVEREIGN CODE ORCHESTRATION
+                GO-DUCK &bull; THE 420% ELITE MILESTONE &bull; SOVEREIGN CODE ORCHESTRATION
             </div>
         </div>
     </section>

package/templates/docs/pages/integrations.hbs

@@ -86,8 +86,13 @@ class ApiProvider {
     <h2 class="text-2xl font-bold text-gray-800 mb-4 border-b pb-2">3. WSO2 API Manager Integration</h2>
     <p class="mb-4">GO-DUCK generated APIs can automatically register themselves with a <strong>WSO2 API Manager</strong> instance on startup. This uses the WSO2 Publisher REST API to import your dynamically generated OpenAPI 3.0 specs.</p>
     
+    <div class="bg-indigo-50 border-l-4 border-indigo-500 p-4 mb-6 rounded-r">
+        <h4 class="font-bold text-indigo-900 mb-1">Standard API Gateway Discovery</h4>
+        <p class="text-sm text-indigo-800">For external gateways (Kong, Apigee) and ecosystems like <strong>JHipster</strong> and <strong>Spring Boot</strong>, your microservice natively exposes its OpenAPI JSON at the standard <code>/v3/api-docs</code> endpoint. Legacy systems can still use <code>/swagger.json</code>.</p>
+    </div>
+
     <div class="bg-blue-50 border-l-4 border-blue-500 p-4 mb-6 rounded-r">
-        <p class="text-blue-900"><strong>Configuration:</strong> Enable this by adding the <code>wso2</code> block to your <code>config.yaml</code>.</p>
+        <p class="text-blue-900"><strong>WSO2 Configuration:</strong> Enable this by adding the <code>wso2</code> block to your <code>config.yaml</code>.</p>
     </div>
 
     <pre><code class="language-yaml">go-duck:

package/templates/go/router.go.hbs

@@ -5,6 +5,7 @@ import (
     "fmt"
     "log"
     "net/http"
+    "strings"
     "time"
 
     "github.com/gin-gonic/gin"
@@ -162,41 +163,238 @@ func SetupRouter(appConfig *config.Config) *gin.Engine {
     })
 
     // Swagger Docs & UI
-    r.StaticFile("/swagger.json", "./docs/swagger.json")
+    // Expose standard OpenAPI endpoints (JHipster / Spring / WSO2 compatibility)
+    r.StaticFile("/v3/api-docs", "./docs/swagger.json")
+    r.StaticFile("/swagger.json", "./docs/swagger.json") // Legacy fallback
+    r.StaticFile("/logo.png", "./docs/web/logo.png")
     r.GET("/swagger", func(c *gin.Context) {
-        c.Data(http.StatusOK, "text/html; charset=utf-8", []byte(`<!DOCTYPE html>
+        swaggerHTML := `<!DOCTYPE html>
 <html lang="en">
 <head>
   <meta charset="UTF-8">
-  <title>Swagger UI</title>
+  <title>Swagger UI (Secured)</title>
   <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui.css" />
+  <script src="https://cdn.jsdelivr.net/npm/keycloak-js@24.0.4/dist/keycloak.min.js"></script>
   <style>
     html { box-sizing: border-box; overflow: -moz-scrollbars-vertical; overflow-y: scroll; }
     *, *:before, *:after { box-sizing: inherit; }
-    body { margin:0; background: #fafafa; }
+    body { margin:0; background: #fafafa; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; }
+    
+    .top-nav {
+      background: rgba(255, 255, 255, 0.8);
+      backdrop-filter: blur(10px);
+      -webkit-backdrop-filter: blur(10px);
+      border-bottom: 1px solid rgba(0, 0, 0, 0.1);
+      padding: 12px 24px;
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      position: sticky;
+      top: 0;
+      z-index: 1000;
+      box-shadow: 0 4px 6px -1px rgba(0,0,0,0.05);
+    }
+
+    .nav-brand {
+      font-weight: 700;
+      font-size: 1.2rem;
+      color: #333;
+      display: flex;
+      align-items: center;
+      gap: 10px;
+    }
+
+    .nav-controls {
+      display: flex;
+      align-items: center;
+      gap: 16px;
+    }
+
+    .tenant-input {
+      padding: 8px 12px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-size: 0.9rem;
+      outline: none;
+      transition: border-color 0.2s;
+    }
+    
+    .tenant-input:focus {
+      border-color: #4a90e2;
+    }
+
+    .btn {
+      padding: 8px 16px;
+      border-radius: 6px;
+      border: none;
+      font-weight: 600;
+      cursor: pointer;
+      transition: all 0.2s;
+      font-size: 0.9rem;
+    }
+
+    .btn-login {
+      background: #4a90e2;
+      color: white;
+    }
+
+    .btn-login:hover {
+      background: #357abd;
+    }
+
+    .btn-logout {
+      background: #e74c3c;
+      color: white;
+      display: none;
+    }
+
+    .btn-logout:hover {
+      background: #c0392b;
+    }
+
+    .status-indicator {
+      display: flex;
+      align-items: center;
+      gap: 6px;
+      font-size: 0.85rem;
+      color: #666;
+    }
+
+    .dot {
+      width: 8px;
+      height: 8px;
+      border-radius: 50%;
+      background: #ccc;
+    }
+
+    .dot.active {
+      background: #2ecc71;
+      box-shadow: 0 0 8px #2ecc71;
+    }
   </style>
 </head>
 <body>
+  <div class="top-nav">
+    <div class="nav-brand">
+      <img src="/logo.png" alt="GO-DUCK Logo" style="height: 32px; width: auto;" />
+      <div style="display: flex; flex-direction: column; line-height: 1.2;">
+        <span>{{app_name}} API Explorer</span>
+        <span style="font-size: 0.65em; font-weight: normal; color: #94a3b8;">
+          GO-DUCK v{{cli_version}} • Generated: {{generated_date}}
+        </span>
+      </div>
+    </div>
+    <div class="nav-controls">
+      <div class="status-indicator">
+        <div class="dot" id="auth-dot"></div>
+        <span id="auth-status">Unauthenticated</span>
+      </div>
+      <input type="text" id="tenant-input" class="tenant-input" placeholder="X-Tenant-ID" value="tenant_1" title="Multi-tenant DB Target" />
+      <button id="login-btn" class="btn btn-login">Login with Keycloak</button>
+      <button id="logout-btn" class="btn btn-logout">Logout</button>
+    </div>
+  </div>
+
   <div id="swagger-ui"></div>
+  
   <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-bundle.js"></script>
   <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-standalone-preset.js"></script>
   <script>
+    const KEYCLOAK_URL = 'KEYCLOAK_URL_PLACEHOLDER';
+    const KEYCLOAK_REALM = 'KEYCLOAK_REALM_PLACEHOLDER';
+    const KEYCLOAK_CLIENT = 'KEYCLOAK_CLIENT_PLACEHOLDER';
+
+    let keycloak = null;
+
+    function updateUI(authenticated) {
+      if (authenticated) {
+        document.getElementById('login-btn').style.display = 'none';
+        document.getElementById('logout-btn').style.display = 'block';
+        document.getElementById('auth-dot').classList.add('active');
+        document.getElementById('auth-status').innerText = 'Authenticated (' + (keycloak.tokenParsed?.preferred_username || 'User') + ')';
+      } else {
+        document.getElementById('login-btn').style.display = 'block';
+        document.getElementById('logout-btn').style.display = 'none';
+        document.getElementById('auth-dot').classList.remove('active');
+        document.getElementById('auth-status').innerText = 'Unauthenticated';
+      }
+    }
+
     window.onload = function() {
-      const ui = SwaggerUIBundle({
-        url: "/swagger.json",
-        dom_id: '#swagger-ui',
-        deepLinking: true,
-        presets: [
-          SwaggerUIBundle.presets.apis,
-          SwaggerUIStandalonePreset
-        ],
-        layout: "StandaloneLayout"
+      // Initialize Keycloak
+      keycloak = new Keycloak({
+        url: KEYCLOAK_URL,
+        realm: KEYCLOAK_REALM,
+        clientId: KEYCLOAK_CLIENT
+      });
+
+      keycloak.init({ onLoad: 'check-sso', checkLoginIframe: false }).then(authenticated => {
+        updateUI(authenticated);
+
+        document.getElementById('login-btn').onclick = () => keycloak.login();
+        document.getElementById('logout-btn').onclick = () => keycloak.logout();
+
+        if (authenticated) {
+          // Auto-refresh token logic
+          setInterval(() => {
+            keycloak.updateToken(70).then(refreshed => {
+              if (refreshed) {
+                console.log('Token refreshed automatically');
+              }
+            }).catch(() => {
+              console.error('Failed to refresh token');
+              updateUI(false);
+            });
+          }, 60000); // Check every minute
+        }
+
+        // 4. Initialize Swagger UI
+        const ui = SwaggerUIBundle({
+          url: "/v3/api-docs",
+          dom_id: '#swagger-ui',
+          deepLinking: true,
+          presets: [
+            SwaggerUIBundle.presets.apis,
+            SwaggerUIStandalonePreset
+          ],
+          layout: "StandaloneLayout",
+          requestInterceptor: (req) => {
+            if (keycloak && keycloak.token) {
+              req.headers['Authorization'] = 'Bearer ' + keycloak.token;
+            }
+            const tenantId = document.getElementById('tenant-input').value;
+            if (tenantId) {
+              req.headers['X-Tenant-ID'] = tenantId;
+            }
+            return req;
+          }
+        });
+      }).catch(err => {
+        console.error("Keycloak initialization failed", err);
+        document.getElementById('auth-status').innerText = 'Keycloak init failed';
+        
+        // Still load swagger without auth interceptor
+        window.ui = SwaggerUIBundle({
+          url: "/v3/api-docs",
+          dom_id: '#swagger-ui',
+          deepLinking: true,
+          presets: [
+            SwaggerUIBundle.presets.apis,
+            SwaggerUIStandalonePreset
+          ],
+          layout: "StandaloneLayout"
+        });
       });
-      window.ui = ui;
     };
   </script>
 </body>
-</html>`))
+</html>`
+
+        htmlStr := strings.ReplaceAll(swaggerHTML, "KEYCLOAK_URL_PLACEHOLDER", appConfig.GoDuck.Security.KeycloakHost)
+        htmlStr = strings.ReplaceAll(htmlStr, "KEYCLOAK_REALM_PLACEHOLDER", appConfig.GoDuck.Security.KeycloakRealm)
+        htmlStr = strings.ReplaceAll(htmlStr, "KEYCLOAK_CLIENT_PLACEHOLDER", appConfig.GoDuck.Security.KeycloakAppClientID)
+
+        c.Data(http.StatusOK, "text/html; charset=utf-8", []byte(htmlStr))
     })
 
     // Management APIs (Run-time DB onboarding)