14 Commits

Author SHA1 Message Date
ramvignesh-b fcaaa1d03c docs: add container registry instructions to README
CI / build (push) Successful in 24s
Publish Docker Image / Publish Docker Image (push) Failing after 20s
2026-05-21 14:07:49 +05:30
ramvignesh-b 77e992e14d feat: add GitHub Actions workflow to publish Docker image to GHCR
CI / build (push) Successful in 1m42s
Publish Docker Image / Publish Docker Image (push) Failing after 3m3s
2026-05-21 13:52:21 +05:30
ramvignesh-b a5a0616941 fix: define internal APP_PORT in docker-compose
CI / build (push) Successful in 6m25s
2026-05-13 02:01:06 +05:30
ramvignesh-b 75136ee6bd chore: add .worktrees to gitignore 2026-05-13 02:00:21 +05:30
ramvignesh-b 417104605f refactor: fix lint and formatting
CI / build (push) Successful in 23s
2026-05-12 11:06:15 +05:30
ramvignesh-b 0bcf13800e docs: update screenshot
CI / build (push) Failing after 13m24s
2026-05-12 11:02:52 +05:30
ramvignesh-b dbc9328bf5 docs: update README
CI / build (push) Failing after 23s
2026-05-12 10:54:03 +05:30
ramvignesh-b ed23999c50 feat: add tooltips to auth provider config fields 2026-05-12 10:26:01 +05:30
ramvignesh-b 30c9e9e308 style: update accent bar styling for sections 2026-05-12 10:10:30 +05:30
ramvignesh-b 748d308672 style: update button styles for registry
CI / build (push) Failing after 22s
2026-05-12 10:01:35 +05:30
ramvignesh-b 3e33ee4d61 style: update ui styles for expiry
CI / build (push) Failing after 27s
2026-05-12 09:30:26 +05:30
ramvignesh-b 074d48f536 feat: track and display access token expiration timestamps in dashboard and API responses
CI / build (push) Failing after 23s
2026-05-12 09:15:29 +05:30
ramvignesh-b eb11011017 feat: add favicon, manifest, and static asset serving support to auth server
CI / build (push) Successful in 24s
2026-05-12 05:48:06 +05:30
me 04267593fb docs: update api reference with versioning (#6)
CI / build (push) Successful in 24s
Co-authored-by: ramvignesh-b <ramvignesh-b@github.com>
Reviewed-on: #6
2026-05-12 00:17:08 +00:00
28 changed files with 744 additions and 323 deletions
Binary file not shown.

Before

Width:  |  Height:  |  Size: 110 KiB

After

Width:  |  Height:  |  Size: 286 KiB

+53
View File
@@ -0,0 +1,53 @@
name: Publish Docker Image
on:
push:
branches:
- main
tags:
- 'v*'
jobs:
publish:
name: Publish Docker Image
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Log in to the Container registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Extract metadata (tags, labels) for Docker
id: meta
uses: docker/metadata-action@v5
with:
images: ghcr.io/${{ github.repository }}
tags: |
type=ref,event=branch
type=ref,event=tag
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=sha,prefix=
type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
- name: Build and push Docker image
uses: docker/build-push-action@v6
with:
context: .
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
+3
View File
@@ -19,3 +19,6 @@ docs/
# OS # OS
.DS_Store .DS_Store
Thumbs.db Thumbs.db
# Worktrees
.worktrees/
+89 -37
View File
@@ -1,82 +1,134 @@
# toknd — Auth Broker # toknd — The Minimal Token Broker
![Dashboard Screenshot](.docs/screenshot.png) ![Dashboard Screenshot](.docs/screenshot.png)
**toknd** is a minimal, centralized authentication and token broker. Built with **Bun**, **Hono**, and **Redis**, it serves as a middleware layer that manages OAuth2 providers, token persistence, and automatic refreshes, allowing your applications to focus on their core logic. Building integrations is fun until you have to manage the tokens. Suddenly, you're writing cron jobs to handle refresh cycles, dealing with expired sessions in the middle of background tasks, and copying OAuth secrets manually across multiple microservices.
If you are building AI agents that need to take actions in the real world, the absolute last thing you want is your LLM trying to debug an OAuth redirect flow.
**toknd** is a minimal, centralized authentication and auth token broker and middleware. Built with **Bun**, **Hono**, and **Redis**, it acts as a secure "wallet" that sits between your applications and the external APIs they need to access.
You just need to authenticate once. toknd manages the lifecycle of the tokens forever.
---
## Why does this exist?
There are massive enterprise identity brokers (like Auth0 or Dex), and then there are reverse proxies (like oauth2-proxy). **toknd** is built to bridge the gap while remaining minimal and open-source. It provides the lightweight, developer-friendly infrastructure of a proxy, but with the specific "Token Vault" capabilities required for modern AI and microservice architectures—without the bloat, vendor lock-in, or SaaS costs.
## Use-Cases
- **The Ultimate AI Agent Wallet:** Equip your autonomous agents with a secure keychain. When your agent needs to hit a service backed by oauth, like GitHub or Notion API, it just asks toknd for a token. It gets a short-lived Bearer token instantly, keeping your permanent secrets completely isolated from dynamic AI environments.
- **Set It and Forget It:** toknd handles automated background refreshes. Your data ingestion pipelines, RAG syncs, and headless integration workers will never stall out due to a `401 Unauthorized` error again.
- **Microservice Centralization:** Stop implementing OAuth in every new service. Centralize your credentials so your microservices only need one internal API key to request valid access tokens for any configured provider.
- **Secure Secret Isolation:** OAuth client IDs, secrets, and long-lived refresh tokens stay locked inside toknd's Redis vault, drastically reducing your attack surface. All you need to do is secure the store.
## Features ## Features
- Centralized management for multiple OAuth2 providers (Google, Trakt, GitHub, etc.). - **Drop-in Infrastructure:** Deploys in seconds via Docker (or Podman) Compose or just a simple Bun script.
- Automatic token refreshes. - **Centralized Provider Management:** Native support for managing multiple OAuth2 providers (Google, GitHub, Trakt, etc.).
- Secure and isolated API access via API key authentication. - **API Key Security:** Isolated and secure access to the broker via master API keys. Each instance can use its own key for isolation.
- Web-based dashboard for configuration management. - **Web Dashboard:** Built-in clean ad modern UI for managing provider configurations and viewing live token statuses.
- Docker Compose support for simplified deployment. - **Blisteringly Fast:** Powered by Bun and Redis for ultra-low latency token retrieval.
- High performance and low-latency powered by Bun and Redis.
## Tech Stack ## Tech Stack
- **Runtime**: [Bun](https://bun.sh/) - **Runtime**: [Bun](https://bun.sh/)
- **Web Framework**: [Hono](https://hono.dev/) - **Web Framework**: [Hono](https://hono.dev/)
- **Data Store**: Redis - **Data Store**: [Redis](https://redis.io/)
- **Styling**: Tailwind CSS & DaisyUI - **Styling**: [Tailwind CSS](https://tailwindcss.com/) & [DaisyUI](https://daisyui.com/)
- **Schema & Validation**: Zod - **Schema & Validation**: [Zod](https://zod.dev/)
- **Docs**: [Scalar](https://github.com/scalar/scalar)
---
## Getting Started ## Getting Started
toknd can be deployed either as a containerized service or self-hosted directly on your hardware. toknd is designed to be too easy to set-up. You can deploy it as a containerized service or host it directly on bare metal.
### 1. Environment Setup ### 1. Environment Setup
Clone the repository and create your environment file: Clone the repository and set up your environment:
```bash ```bash
git clone https://git.ramvignesh.dev/toknd_auth.git
cd toknd
cp .env.example .env cp .env.example .env
``` ```
Define a strong `API_KEY` and ensure `REDIS_URL` points to a valid Redis instance. Open `.env`, define your own strong `API_KEY`, and map the ports (optional)
### 2. Choose Deployment Method ### 2. Choose Deployment Method
#### Option A: Containerized (Recommended) #### Option A: Docker Compose (Recommended)
This is the easiest way to get up and running, as it bundles the application and a Redis instance together. The easiest way to get up and running. This spins up both toknd and a dedicated Redis instance.
- **Development (with Hot-Reload)**: You can run toknd by building the container locally or by pulling the pre-built image from the **GitHub Container Registry (GHCR)**.
```bash
podman compose up --build ##### Using Pre-built Image (GHCR)
Instead of building locally, you can pull the pre-built image. Update the `app` service in `docker-compose.yml` to pull the image:
```yaml
services:
app:
image: ghcr.io/ramvignesh-b/toknd:latest
# build: . # Comment or remove this line
``` ```
- **Production**:
Then start the services:
```bash
docker compose up -d
(or)
podman compose up -d
```
##### Building from Source
If you prefer to build the image locally:
```bash ```bash
docker compose up -d --build docker compose up -d --build
(or)
podman compose up -d --build
``` ```
#### Option B: Self-Hosting (Bare Metal)
Ideal for lightweight deployments or custom environments where you already have Bun and Redis.
#### Option B: Bare Metal
If you already have Bun and Redis running in your environment.
1. **Install Dependencies**: 1. **Install Dependencies**:
```bash ```bash
bun install bun install
``` ```
2. **Start the Server**: 2. **Start the Server**:
- **Development**: `bun run dev` (with hot-reload)
- **Production**: `bun run start` - **Production**: `bun run start`
*Note: Ensure your Redis server is running and accessible via the `REDIS_URL` in your `.env`.* - **Development**: `bun run dev`
*Note: Make sure your Redis server is running and accessible via the `HOST` and `PORT` in your `.env`.*
--- ---
## API Reference ## Usage & API Reference
toknd provides a built-in **Scalar API Reference** that allows you to explore and test all endpoints directly from your browser. toknd provides a built-in **Scalar API Reference** so you can explore and test endpoints right from your browser.
- **Interactive UI**: [http://localhost:3000/api](http://localhost:3000/api) (or `/docs`) - **Interactive UI**: [http://localhost:3000/api](http://localhost:3000/api) (or `/docs`)
- **OpenAPI Spec (JSON)**: [http://localhost:3000/doc](http://localhost:3000/doc) - **OpenAPI Spec**: [http://localhost:3000/doc](http://localhost:3000/doc)
All protected endpoints require a Bearer token in the `Authorization` header: ### The Golden Rule
`Authorization: Bearer <your_master_api_key>` All protected endpoints require your master API key in the Authorization header:
```http
Authorization: Bearer <your_master_api_key>
```
### Core Concepts ### The Dashboard
- **Token Brokerage**: Automated access token retrieval and background refreshes for all configured providers. REST API too complicated to use? No problem!
- **Provider Management**: Register and manage OAuth2 providers via the Dashboard or the configuration API. You absolutely don't have to manage everything via curl. Access the web dashboard to configure providers, trigger manual refreshes, and monitor token health:
**`http://localhost:3000/app`**
## Dashboard *(Authenticate using your Master API Key).*
Access the **toknd** dashboard at:
`http://localhost:3000/app`
The dashboard allows you to manage provider configurations, view live token statuses, and manually trigger refreshes. Authenticate using your **Master API Key**.
--- ---
## Contributing
This is an open-source passion project built to solve a real headache in modern application architecture. Pull requests, issues, and feature requests (especially for new built-in OAuth providers!) are highly encouraged.
## License
MIT
+1
View File
@@ -8,6 +8,7 @@ services:
- REDIS_HOST=redis - REDIS_HOST=redis
- REDIS_PORT=6379 - REDIS_PORT=6379
- API_KEY=${API_KEY} - API_KEY=${API_KEY}
- APP_PORT=3000
depends_on: depends_on:
- redis - redis
Binary file not shown.

After

Width:  |  Height:  |  Size: 21 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 77 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 19 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 745 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 2.0 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 15 KiB

+19
View File
@@ -0,0 +1,19 @@
{
"name": "toknd_auth_broker",
"short_name": "toknd",
"icons": [
{
"src": "/android-chrome-192x192.png",
"sizes": "192x192",
"type": "image/png"
},
{
"src": "/android-chrome-512x512.png",
"sizes": "512x512",
"type": "image/png"
}
],
"theme_color": "#bdff00",
"background_color": "#000",
"display": "standalone"
}
+6
View File
@@ -0,0 +1,6 @@
import { API_VERSION, APP_VERSION } from "./version";
export { API_VERSION, APP_VERSION };
export const API_PREFIX = `/api/${API_VERSION}`;
export const AUTH_PREFIX = `/${API_VERSION}/auth`;
export const DOCS_PREFIX = `/docs/${API_VERSION}`;
+9
View File
@@ -40,4 +40,13 @@ export class ConfigManager {
return result; return result;
} }
async deleteProviderConfig(provider: string): Promise<void> {
await this.redis.del(`config:${provider}`);
// Also clean up tokens
const tokenKeys = await this.redis.keys(`provider:${provider}:*`);
if (tokenKeys.length > 0) {
await this.redis.del(...tokenKeys);
}
}
} }
+4
View File
@@ -40,5 +40,9 @@ export class TokenManager {
); );
await this.redis.set(`provider:${providerName}:refresh_token`, tokens.refreshToken); await this.redis.set(`provider:${providerName}:refresh_token`, tokens.refreshToken);
await this.redis.set(`provider:${providerName}:last_updated`, new Date().toISOString()); await this.redis.set(`provider:${providerName}:last_updated`, new Date().toISOString());
await this.redis.set(
`provider:${providerName}:expires_at`,
new Date(Date.now() + tokens.expiresIn * 1000).toISOString(),
);
} }
} }
+13 -19
View File
@@ -4,7 +4,9 @@ import { serveStatic } from "hono/bun";
import { logger } from "hono/logger"; import { logger } from "hono/logger";
import { prettyJSON } from "hono/pretty-json"; import { prettyJSON } from "hono/pretty-json";
import { config } from "./config"; import { config } from "./config";
import { API_PREFIX, AUTH_PREFIX, DOCS_PREFIX } from "./constants";
import { redis } from "./core/RedisClient"; import { redis } from "./core/RedisClient";
import { openApiSpec, securityScheme } from "./openapi";
import { apiRoutes } from "./routes/api"; import { apiRoutes } from "./routes/api";
import { authRoutes } from "./routes/auth"; import { authRoutes } from "./routes/auth";
import { configRoutes } from "./routes/config"; import { configRoutes } from "./routes/config";
@@ -13,39 +15,31 @@ import { dashboardRoutes } from "./routes/dashboard";
const app = new OpenAPIHono({ strict: false }); const app = new OpenAPIHono({ strict: false });
// OpenAPI specs // OpenAPI specs
app.doc("/doc", { app.doc(`${DOCS_PREFIX}/openapi.json`, openApiSpec);
openapi: "3.0.0", app.openAPIRegistry.registerComponent("securitySchemes", "API_KEY", securityScheme);
info: {
version: "1.0.0",
title: "toknd — Auth Broker API",
description: "Centralized token management and OAuth2 broker service.",
},
});
app.openAPIRegistry.registerComponent("securitySchemes", "API_KEY", {
type: "http",
scheme: "bearer",
});
// Scalar API Reference // Scalar API Reference
app.get( app.get(
"/api", DOCS_PREFIX,
Scalar({ Scalar({
theme: "solarized", theme: "solarized",
url: "/doc", url: `${DOCS_PREFIX}/openapi.json`,
}), }),
); );
app.get("/docs", (c) => c.redirect("/api")); app.get("/docs", (c) => c.redirect(DOCS_PREFIX));
app.get("/api", (c) => c.redirect(DOCS_PREFIX));
app.use("*", logger()); app.use("*", logger());
app.use("*", prettyJSON()); app.use("*", prettyJSON());
app.get("/", (c) => c.redirect("/app")); app.get("/", (c) => c.redirect("/app"));
app.get("/favicon.ico", serveStatic({ path: "./public/favicon.ico" }));
app.use("/static/*", serveStatic({ root: "./public" }));
app.get("/app/dashboard.js", serveStatic({ path: "./src/views/dashboard.js" })); app.get("/app/dashboard.js", serveStatic({ path: "./src/views/dashboard.js" }));
app.route("/auth", authRoutes); app.route(AUTH_PREFIX, authRoutes);
app.route("/api/config", configRoutes); app.route(`${API_PREFIX}/config`, configRoutes);
app.route("/api", apiRoutes); app.route(API_PREFIX, apiRoutes);
app.route("/app", dashboardRoutes); app.route("/app", dashboardRoutes);
app.notFound((c) => { app.notFound((c) => {
+31
View File
@@ -0,0 +1,31 @@
import { API_VERSION, APP_VERSION } from "./constants";
export const openApiSpec = {
openapi: "3.0.0",
info: {
version: `${API_VERSION}.${APP_VERSION}`,
title: "toknd Auth Broker API",
description:
"A high-performance OAuth2 broker and token management service. Designed to centralize provider configurations and automate token lifecycle management across distributed systems.",
},
tags: [
{
name: "Tokens",
description: "Endpoint operations for accessing and force-refreshing active provider tokens.",
},
{
name: "Management",
description: "Administrative operations for provider lifecycle and configuration.",
},
{
name: "Auth (Internal)",
description: "System-level OAuth2 handshake and callback processing.",
},
],
security: [{ API_KEY: [] }],
};
export const securityScheme = {
type: "http",
scheme: "bearer",
} as const;
+15 -2
View File
@@ -15,6 +15,10 @@ const StatusResponseSchema = z
accessToken: z.string().nullable(), accessToken: z.string().nullable(),
refreshToken: z.string().nullable(), refreshToken: z.string().nullable(),
lastUpdated: z.string().nullable(), lastUpdated: z.string().nullable(),
expiresAt: z.string().nullable().openapi({
example: "2026-05-12T10:00:00.000Z",
description: "ISO timestamp of when the access token expires",
}),
}), }),
) )
.openapi("StatusResponse"); .openapi("StatusResponse");
@@ -32,6 +36,10 @@ const RefreshResponseSchema = z
accessToken: z.string().nullable(), accessToken: z.string().nullable(),
refreshToken: z.string().nullable(), refreshToken: z.string().nullable(),
lastUpdated: z.string().nullable(), lastUpdated: z.string().nullable(),
expiresAt: z.string().nullable().openapi({
example: "2026-05-12T10:00:00.000Z",
description: "ISO timestamp of when the access token expires",
}),
}), }),
}) })
.openapi("RefreshResponse"); .openapi("RefreshResponse");
@@ -47,6 +55,7 @@ const statusRoute = createRoute({
method: "get", method: "get",
path: "/status", path: "/status",
security: [{ API_KEY: [] }], security: [{ API_KEY: [] }],
tags: ["Tokens"],
responses: { responses: {
200: { 200: {
content: { "application/json": { schema: StatusResponseSchema } }, content: { "application/json": { schema: StatusResponseSchema } },
@@ -59,6 +68,7 @@ const tokenRoute = createRoute({
method: "get", method: "get",
path: "/token/{provider}", path: "/token/{provider}",
security: [{ API_KEY: [] }], security: [{ API_KEY: [] }],
tags: ["Tokens"],
request: { request: {
params: z.object({ params: z.object({
provider: z.string().openapi({ example: "trakt" }), provider: z.string().openapi({ example: "trakt" }),
@@ -80,6 +90,7 @@ const refreshRoute = createRoute({
method: "post", method: "post",
path: "/refresh/{provider}", path: "/refresh/{provider}",
security: [{ API_KEY: [] }], security: [{ API_KEY: [] }],
tags: ["Tokens"],
request: { request: {
params: z.object({ params: z.object({
provider: z.string().openapi({ example: "trakt" }), provider: z.string().openapi({ example: "trakt" }),
@@ -109,7 +120,8 @@ apiRoutes.openapi(statusRoute, async (c) => {
const accessToken = await redis.get(`provider:${provider}:access_token`); const accessToken = await redis.get(`provider:${provider}:access_token`);
const refreshToken = await redis.get(`provider:${provider}:refresh_token`); const refreshToken = await redis.get(`provider:${provider}:refresh_token`);
const lastUpdated = await redis.get(`provider:${provider}:last_updated`); const lastUpdated = await redis.get(`provider:${provider}:last_updated`);
status[provider] = { accessToken, refreshToken, lastUpdated }; const expiresAt = await redis.get(`provider:${provider}:expires_at`);
status[provider] = { accessToken, refreshToken, lastUpdated, expiresAt };
} }
return c.json(status, 200); return c.json(status, 200);
@@ -150,11 +162,12 @@ apiRoutes.openapi(refreshRoute, async (c) => {
const accessToken = await redis.get(`provider:${providerName}:access_token`); const accessToken = await redis.get(`provider:${providerName}:access_token`);
const refreshToken = await redis.get(`provider:${providerName}:refresh_token`); const refreshToken = await redis.get(`provider:${providerName}:refresh_token`);
const lastUpdated = await redis.get(`provider:${providerName}:last_updated`); const lastUpdated = await redis.get(`provider:${providerName}:last_updated`);
const expiresAt = await redis.get(`provider:${providerName}:expires_at`);
return c.json( return c.json(
{ {
success: true, success: true,
status: { accessToken, refreshToken, lastUpdated }, status: { accessToken, refreshToken, lastUpdated, expiresAt },
}, },
200, 200,
); );
+4
View File
@@ -17,6 +17,8 @@ const AuthErrorResponse = z
const loginRoute = createRoute({ const loginRoute = createRoute({
method: "get", method: "get",
path: "/{provider}/login", path: "/{provider}/login",
tags: ["Auth (Internal)"],
summary: "Start OAuth2 flow (Managed by System)",
request: { request: {
params: z.object({ params: z.object({
provider: z.string().openapi({ example: "trakt" }), provider: z.string().openapi({ example: "trakt" }),
@@ -36,6 +38,8 @@ const loginRoute = createRoute({
const callbackRoute = createRoute({ const callbackRoute = createRoute({
method: "get", method: "get",
path: "/callback", path: "/callback",
tags: ["Auth (Internal)"],
summary: "OAuth2 callback handler (Managed by System)",
request: { request: {
query: z.object({ query: z.object({
state: z state: z
+28
View File
@@ -38,6 +38,7 @@ const listConfigRoute = createRoute({
method: "get", method: "get",
path: "/", path: "/",
security: [{ API_KEY: [] }], security: [{ API_KEY: [] }],
tags: ["Management"],
responses: { responses: {
200: { 200: {
content: { "application/json": { schema: AllProvidersResponse } }, content: { "application/json": { schema: AllProvidersResponse } },
@@ -50,6 +51,7 @@ const setConfigRoute = createRoute({
method: "post", method: "post",
path: "/{provider}", path: "/{provider}",
security: [{ API_KEY: [] }], security: [{ API_KEY: [] }],
tags: ["Management"],
request: { request: {
params: z.object({ params: z.object({
provider: z.string().openapi({ example: "trakt" }), provider: z.string().openapi({ example: "trakt" }),
@@ -70,6 +72,24 @@ const setConfigRoute = createRoute({
}, },
}); });
const deleteConfigRoute = createRoute({
method: "delete",
path: "/{provider}",
security: [{ API_KEY: [] }],
tags: ["Management"],
request: {
params: z.object({
provider: z.string().openapi({ example: "trakt" }),
}),
},
responses: {
200: {
content: { "application/json": { schema: SuccessMessage } },
description: "Delete a provider configuration and its tokens",
},
},
});
// Implementations // Implementations
configRoutes.use("*", authMiddleware); configRoutes.use("*", authMiddleware);
@@ -88,4 +108,12 @@ configRoutes.openapi(setConfigRoute, async (c) => {
return c.json({ message: `Config for ${provider} saved successfully` }, 200); return c.json({ message: `Config for ${provider} saved successfully` }, 200);
}); });
configRoutes.openapi(deleteConfigRoute, async (c) => {
const provider = c.req.valid("param").provider;
const configManager = new ConfigManager(redis);
await configManager.deleteProviderConfig(provider);
return c.json({ message: `Config for ${provider} deleted successfully` }, 200);
});
export { configRoutes }; export { configRoutes };
+142 -27
View File
@@ -4,6 +4,7 @@ import { deleteCookie, getCookie, setCookie } from "hono/cookie";
import { html } from "hono/html"; import { html } from "hono/html";
import type { Child } from "hono/jsx"; import type { Child } from "hono/jsx";
import { config } from "../config"; import { config } from "../config";
import { API_PREFIX, API_VERSION, APP_VERSION, AUTH_PREFIX, DOCS_PREFIX } from "../constants";
const dashboardRoutes = new Hono({ strict: false }); const dashboardRoutes = new Hono({ strict: false });
@@ -15,6 +16,7 @@ export const Layout = (props: { title: string; children: Child; isUnlocked?: boo
<meta charset="UTF-8" /> <meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>{props.title}</title> <title>{props.title}</title>
<link rel="icon" type="image/png" href="/favicon.ico" />
<link href="https://cdn.jsdelivr.net/npm/daisyui@5" rel="stylesheet" type="text/css" /> <link href="https://cdn.jsdelivr.net/npm/daisyui@5" rel="stylesheet" type="text/css" />
<script src="https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4"></script> <script src="https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4"></script>
<link <link
@@ -34,12 +36,22 @@ export const Layout = (props: { title: string; children: Child; isUnlocked?: boo
.font-mono { .font-mono {
font-family: "DM Mono", monospace; font-family: "DM Mono", monospace;
} }
.text-xxs {
font-size: 10px;
}
`} `}
</style> </style>
</head> </head>
<body <body
class="bg-base-200/50 min-h-screen font-['DM_Sans',sans-serif] antialiased text-base-content tracking-tight" class="bg-base-200/50 min-h-screen font-['DM_Sans',sans-serif] antialiased text-base-content tracking-tight"
x-data={`dashboard({ initialIsUnlocked: ${props.isUnlocked || false} })`} x-data={`dashboard({
initialIsUnlocked: ${props.isUnlocked || false},
apiVersion: '${API_VERSION}',
appVersion: '${APP_VERSION}',
apiPrefix: '${API_PREFIX}',
authPrefix: '${AUTH_PREFIX}',
docsPrefix: '${DOCS_PREFIX}'
})`}
> >
{props.children} {props.children}
<script src="/app/dashboard.js"></script> <script src="/app/dashboard.js"></script>
@@ -52,7 +64,7 @@ export const Layout = (props: { title: string; children: Child; isUnlocked?: boo
export const Dashboard = (props: { isUnlocked: boolean }) => ( export const Dashboard = (props: { isUnlocked: boolean }) => (
<Layout title="toknd — Auth Broker Dashboard" isUnlocked={props.isUnlocked}> <Layout title="toknd — Auth Broker Dashboard" isUnlocked={props.isUnlocked}>
<div class="navbar bg-base-100 shadow-sm px-4 md:px-8 border-b border-base-300"> <div class="navbar bg-base-100 shadow-sm px-4 md:px-8 border-b border-base-300">
<div class="flex-1"> <div class="flex-1 flex items-center gap-6">
<div class="flex items-center gap-2"> <div class="flex items-center gap-2">
<div class="w-8 h-8 bg-primary rounded-lg flex items-center justify-center text-primary-content font-semibold text-lg"> <div class="w-8 h-8 bg-primary rounded-lg flex items-center justify-center text-primary-content font-semibold text-lg">
<i class="ph-duotone ph-fingerprint"></i> <i class="ph-duotone ph-fingerprint"></i>
@@ -61,8 +73,26 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
toknd <span class="text-xs font-normal opacity-50 ml-1">auth broker</span> toknd <span class="text-xs font-normal opacity-50 ml-1">auth broker</span>
</div> </div>
</div> </div>
<nav class="hidden md:flex items-center gap-1">
<a
href={DOCS_PREFIX}
target="_blank"
class="btn btn-ghost btn-sm text-base-content/60 hover:text-primary gap-2 px-3"
rel="noopener"
>
<i class="ph-duotone ph-book-open text-lg"></i>
<span class="font-bold uppercase tracking-widest text-xs">
API Reference{" "}
<sup class="text-xxs opacity-50 ml-0.5">
{API_VERSION}.{APP_VERSION}
</sup>
</span>
</a>
</nav>
</div> </div>
<div class="flex-none hidden sm:flex"> <div class="flex-none hidden sm:flex">
<template x-if="!isUnlocked">
<div class="join border border-base-200/50 bg-base-200/50 rounded-xl overflow-hidden focus-within:border-primary transition-colors"> <div class="join border border-base-200/50 bg-base-200/50 rounded-xl overflow-hidden focus-within:border-primary transition-colors">
<div class="join-item flex items-center px-4 bg-base-200"> <div class="join-item flex items-center px-4 bg-base-200">
<i class="ph-duotone ph-key text-secondary text-lg"></i> <i class="ph-duotone ph-key text-secondary text-lg"></i>
@@ -93,17 +123,25 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
> >
<i class="ph-duotone ph-lock-key-open text-lg" x-show="!loading"></i> <i class="ph-duotone ph-lock-key-open text-lg" x-show="!loading"></i>
<span class="loading loading-spinner loading-xs" x-show="loading"></span> <span class="loading loading-spinner loading-xs" x-show="loading"></span>
<span class="ml-1 hidden md:inline" x-text="loading ? 'Unlocking...' : 'Unlock'"></span> <span
</button> class="ml-1 hidden md:inline"
<button x-text="loading ? 'Unlocking...' : 'Unlock'"
x-show="isUnlocked" ></span>
x-on:click="logout()"
type="button"
class="btn btn-ghost btn-sm join-item text-error hover:bg-error/10"
>
<i class="ph-bold ph-power text-lg"></i>
</button> </button>
</div> </div>
</template>
<template x-if="isUnlocked">
<button
x-on:click="logout()"
type="button"
class="btn btn-ghost btn-sm text-error hover:bg-error/10 gap-2 px-4"
x-bind:disabled="loading"
>
<i class="ph-bold ph-power text-lg"></i>
<span class="font-bold uppercase tracking-wider text-xs">Logout</span>
</button>
</template>
</div> </div>
</div> </div>
@@ -112,7 +150,8 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<div class="card bg-base-100 shadow-xl border border-base-300 lg:col-span-4 self-start"> <div class="card bg-base-100 shadow-xl border border-base-300 lg:col-span-4 self-start">
<div class="card-body p-6"> <div class="card-body p-6">
<div class="flex items-center gap-2 mb-4"> <div class="flex items-center gap-2 mb-4">
<div class="w-2 h-6 bg-primary rounded-full"></div> <i class="ph-duotone ph-shield-plus text-2xl text-primary mb-1"></i>
<div class="w-1 h-6 bg-primary/50 rounded-full"></div>
<h2 class="card-title text-xl font-semibold">Configure Provider</h2> <h2 class="card-title text-xl font-semibold">Configure Provider</h2>
</div> </div>
@@ -121,7 +160,10 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<label htmlFor="providerName" class="label py-1"> <label htmlFor="providerName" class="label py-1">
<span class="label-text flex items-center gap-2"> <span class="label-text flex items-center gap-2">
Provider ID Provider ID
<span class="tooltip tooltip-top" data-tip="Internal name for this service."> <span
class="tooltip tooltip-top before:text-left"
data-tip="Internal name for this service. This will define your login URL (e.g. /auth/trakt/login)."
>
<i class="ph ph-info opacity-50 cursor-help"></i> <i class="ph ph-info opacity-50 cursor-help"></i>
</span> </span>
</span> </span>
@@ -142,7 +184,15 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<div class="form-control"> <div class="form-control">
<label htmlFor="clientId" class="label py-1"> <label htmlFor="clientId" class="label py-1">
<span class="label-text">Client ID</span> <span class="label-text flex items-center gap-2">
Client ID
<span
class="tooltip tooltip-top before:text-left"
data-tip="Found in the 'API' or 'Developer' section of the provider. Sometimes called 'App ID' or 'Consumer Key'."
>
<i class="ph ph-info opacity-50 cursor-help text-xs"></i>
</span>
</span>
</label> </label>
<input <input
type="text" type="text"
@@ -155,7 +205,15 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
</div> </div>
<div class="form-control" x-data="{ show: false }"> <div class="form-control" x-data="{ show: false }">
<label htmlFor="clientSecret" class="label py-1"> <label htmlFor="clientSecret" class="label py-1">
<span class="label-text">Client Secret</span> <span class="label-text flex items-center gap-2">
Client Secret
<span
class="tooltip tooltip-top before:text-left"
data-tip="Found next to the Client ID. This is your private key—never share it or put it in client-side code."
>
<i class="ph ph-info opacity-50 cursor-help text-xs"></i>
</span>
</span>
</label> </label>
<div class="relative"> <div class="relative">
<input <input
@@ -180,7 +238,15 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<div class="form-control"> <div class="form-control">
<label htmlFor="authUrl" class="label py-1"> <label htmlFor="authUrl" class="label py-1">
<span class="label-text">Auth URL</span> <span class="label-text flex items-center gap-2">
Auth URL
<span
class="tooltip tooltip-top before:text-left"
data-tip="The page where users click 'Authorize'. Usually found in OAuth2 docs under 'Endpoints' or 'Authorize'."
>
<i class="ph ph-info opacity-50 cursor-help text-xs"></i>
</span>
</span>
</label> </label>
<input <input
type="url" type="url"
@@ -193,7 +259,15 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
</div> </div>
<div class="form-control"> <div class="form-control">
<label htmlFor="tokenUrl" class="label py-1"> <label htmlFor="tokenUrl" class="label py-1">
<span class="label-text">Token URL</span> <span class="label-text flex items-center gap-2">
Token URL
<span
class="tooltip tooltip-top before:text-left"
data-tip="The background API used to trade the code for a token. Usually ends in '/token' or '/access_token'."
>
<i class="ph ph-info opacity-50 cursor-help text-xs"></i>
</span>
</span>
</label> </label>
<input <input
type="url" type="url"
@@ -206,7 +280,15 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
</div> </div>
<div class="form-control"> <div class="form-control">
<label htmlFor="redirectUri" class="label py-1"> <label htmlFor="redirectUri" class="label py-1">
<span class="label-text">Redirect URI</span> <span class="label-text flex items-center gap-2">
Redirect URI
<span
class="tooltip tooltip-top before:text-left"
data-tip="The provider will redirect the code to this URI. Copy this URL and paste it into the 'Redirect URI' or 'Callback URL' field in your OAuth provider's settings."
>
<i class="ph ph-info opacity-50 cursor-help text-xs"></i>
</span>
</span>
</label> </label>
<div class="relative group"> <div class="relative group">
<input <input
@@ -232,7 +314,15 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
</div> </div>
<div class="form-control"> <div class="form-control">
<label htmlFor="scope" class="label py-1"> <label htmlFor="scope" class="label py-1">
<span class="label-text">Scope</span> <span class="label-text flex items-center gap-2">
Scope
<span
class="tooltip tooltip-top before:text-left"
data-tip="Determines what data you're allowed to access. Multiple scopes are usually space-separated."
>
<i class="ph ph-info opacity-50 cursor-help text-xs"></i>
</span>
</span>
</label> </label>
<input <input
type="text" type="text"
@@ -261,13 +351,14 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<div class="card-body p-0"> <div class="card-body p-0">
<div class="p-6 pb-4 flex justify-between items-center bg-base-100"> <div class="p-6 pb-4 flex justify-between items-center bg-base-100">
<div class="flex items-center gap-2"> <div class="flex items-center gap-2">
<div class="w-2 h-6 bg-primary rounded-full"></div> <i class="ph-duotone ph-shipping-container text-2xl text-primary"></i>
<div class="w-1 h-6 bg-primary/50 rounded-full"></div>
<h2 class="card-title text-xl font-semibold">Provider Registry</h2> <h2 class="card-title text-xl font-semibold">Provider Registry</h2>
</div> </div>
<button <button
type="button" type="button"
x-on:click="fetchProviders()" x-on:click="fetchProviders()"
class="btn btn-sm btn-base" class="btn btn-sm btn-neutral"
x-bind:disabled="!isUnlocked || loading" x-bind:disabled="!isUnlocked || loading"
> >
<i x-bind:class="loading ? 'ph ph-arrows-clockwise animate-spin mr-1' : 'ph ph-arrows-clockwise mr-1'"></i> <i x-bind:class="loading ? 'ph ph-arrows-clockwise animate-spin mr-1' : 'ph ph-arrows-clockwise mr-1'"></i>
@@ -308,10 +399,20 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<div class="card bg-base-200/50 border border-base-300 shadow-sm hover:shadow-md transition-all group"> <div class="card bg-base-200/50 border border-base-300 shadow-sm hover:shadow-md transition-all group">
<div class="card-body p-5"> <div class="card-body p-5">
<div class="flex flex-col mb-4"> <div class="flex flex-col mb-4">
<div class="flex justify-between items-start">
<span <span
x-text="provider.name" x-text="provider.name"
class="text-lg font-black text-base-content/90 uppercase" class="text-lg font-black text-base-content/90 uppercase"
></span> ></span>
<button
type="button"
x-on:click="deleteProvider(provider.name)"
class="btn btn-error btn-xs mt-1 opacity-0 group-hover:opacity-40 transition-all duration-300"
title="Delete Provider"
>
<i class="ph-bold ph-trash text-lg"></i>
</button>
</div>
<span <span
x-text="provider.config.clientId" x-text="provider.config.clientId"
x-bind:title="provider.config.clientId" x-bind:title="provider.config.clientId"
@@ -400,19 +501,33 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
</div> </div>
<div class="divider my-3 opacity-10"></div> <div class="divider my-3 opacity-10"></div>
<div class="flex justify-between items-center mb-4"> <div x-show="provider.status.accessToken" class="grid grid-cols-2 gap-4 mb-5">
<span class="text-xs font-semibold opacity-30 uppercase">Last Updated</span> <div class="p-1 flex flex-col gap-0.5">
<span class="text-xxs font-bold opacity-20 uppercase tracking-wide">
Last Updated
</span>
<span <span
x-text="formatTime(provider.status.lastUpdated)" x-text="formatTime(provider.status.lastUpdated)"
class="text-xs font-medium opacity-60" class="text-xs text-secondary/75 font-bold font-mono tracking-wider opacity-60"
></span> ></span>
</div> </div>
<div class="p-1 flex flex-col gap-0.5 items-end text-right">
<span class="text-xxs font-bold opacity-20 uppercase tracking-widest">
Expires In
</span>
<span
x-text="formatExpiry(provider.status.expiresAt)"
x-bind:class="isExpired(provider.status.expiresAt) ? 'text-error' : 'text-primary'"
class="text-xs font-bold font-mono tracking-wide"
></span>
</div>
</div>
<div class="flex flex-col gap-2"> <div class="flex flex-col gap-2">
<div class="grid grid-cols-2 gap-2"> <div class="grid grid-cols-2 gap-2">
<button <button
type="button" type="button"
x-on:click="window.open('/auth/' + provider.name + '/login', '_blank')" x-on:click={`window.open('${AUTH_PREFIX}/' + provider.name + '/login', '_blank')`}
class="btn btn-primary btn-sm" class="btn btn-primary btn-sm"
> >
<i class="ph-bold ph-link"></i> Connect <i class="ph-bold ph-link"></i> Connect
@@ -420,7 +535,7 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<button <button
type="button" type="button"
x-on:click="editProvider(provider)" x-on:click="editProvider(provider)"
class="btn btn-secondary btn-sm" class="btn btn-neutral btn-sm"
> >
<i class="ph-bold ph-pencil-simple"></i> Edit <i class="ph-bold ph-pencil-simple"></i> Edit
</button> </button>
@@ -428,7 +543,7 @@ export const Dashboard = (props: { isUnlocked: boolean }) => (
<button <button
type="button" type="button"
x-on:click="forceRefresh(provider.name)" x-on:click="forceRefresh(provider.name)"
class="btn btn-base w-full" class="btn btn-secondary w-full"
x-bind:disabled="loading || !provider.status.accessToken" x-bind:disabled="loading || !provider.status.accessToken"
> >
<i class="ph-bold ph-arrows-clockwise text-base mr-1"></i> <i class="ph-bold ph-arrows-clockwise text-base mr-1"></i>
+2
View File
@@ -0,0 +1,2 @@
export const API_VERSION = "v1";
export const APP_VERSION = "1.0";
+81 -11
View File
@@ -1,4 +1,12 @@
document.addEventListener("alpine:init", () => { document.addEventListener("alpine:init", () => {
const formatDate = (date) => {
return date.toLocaleDateString("en-US", {
month: "short",
day: "2-digit",
year: "numeric",
});
};
const formatTime = (timestamp) => { const formatTime = (timestamp) => {
if (!timestamp) return "Never"; if (!timestamp) return "Never";
const date = new Date(timestamp); const date = new Date(timestamp);
@@ -7,12 +15,31 @@ document.addEventListener("alpine:init", () => {
if (diff < 60) return "Just now"; if (diff < 60) return "Just now";
if (diff < 3600) return `${Math.floor(diff / 60)}m ago`; if (diff < 3600) return `${Math.floor(diff / 60)}m ago`;
if (diff < 86400) return `${Math.floor(diff / 3600)}h ago`; if (diff < 86400) return `${Math.floor(diff / 3600)}h ago`;
return date.toLocaleDateString(); return formatDate(date);
}; };
window.Alpine.data("dashboard", ({ initialIsUnlocked }) => ({ const formatExpiry = (timestamp) => {
if (!timestamp) return "Expired";
const date = new Date(timestamp);
const diff = Math.floor((date - Date.now()) / 1000);
if (diff <= 0) return "Expired";
if (diff < 60) return `${diff}s`;
if (diff < 3600) return `${Math.floor(diff / 60)}m`;
if (diff < 86400) return `${Math.floor(diff / 3600)}h`;
return `${formatDate(date)}`;
};
window.Alpine.data(
"dashboard",
({ initialIsUnlocked, apiPrefix, authPrefix, docsPrefix, apiVersion, appVersion }) => ({
apiKey: "", apiKey: "",
isUnlocked: initialIsUnlocked, isUnlocked: initialIsUnlocked,
apiPrefix,
authPrefix,
docsPrefix,
apiVersion,
appVersion,
loading: false, loading: false,
providers: [], providers: [],
form: { form: {
@@ -76,8 +103,8 @@ document.addEventListener("alpine:init", () => {
this.loading = true; this.loading = true;
try { try {
const [configRes, statusRes] = await Promise.all([ const [configRes, statusRes] = await Promise.all([
fetch("/api/config"), fetch(`${this.apiPrefix}/config`),
fetch("/api/status"), fetch(`${this.apiPrefix}/status`),
]); ]);
if (configRes.status === 401 || statusRes.status === 401) { if (configRes.status === 401 || statusRes.status === 401) {
@@ -99,7 +126,12 @@ document.addEventListener("alpine:init", () => {
return Object.entries(config).map(([name, cfg]) => ({ return Object.entries(config).map(([name, cfg]) => ({
name, name,
config: cfg, config: cfg,
status: status[name] || { accessToken: null, refreshToken: null, lastUpdated: null }, status: status[name] || {
accessToken: null,
refreshToken: null,
lastUpdated: null,
expiresAt: null,
},
})); }));
}, },
@@ -112,7 +144,7 @@ document.addEventListener("alpine:init", () => {
async saveConfig() { async saveConfig() {
this.loading = true; this.loading = true;
try { try {
const res = await fetch(`/api/config/${this.form.providerName}`, { const res = await fetch(`${this.apiPrefix}/config/${this.form.providerName}`, {
method: "POST", method: "POST",
headers: { "Content-Type": "application/json" }, headers: { "Content-Type": "application/json" },
body: JSON.stringify(this.form), body: JSON.stringify(this.form),
@@ -146,13 +178,12 @@ document.addEventListener("alpine:init", () => {
async forceRefresh(name) { async forceRefresh(name) {
this.loading = true; this.loading = true;
try { try {
const res = await fetch(`/api/refresh/${name}`, { const res = await fetch(`${this.apiPrefix}/refresh/${name}`, {
method: "POST", method: "POST",
}); });
if (res.status === 401) { if (res.status === 401) {
this.isUnlocked = false; return this.handleSessionExpired();
throw new Error("Session expired");
} }
if (!res.ok) throw new Error("Refresh failed"); if (!res.ok) throw new Error("Refresh failed");
@@ -166,6 +197,35 @@ document.addEventListener("alpine:init", () => {
} }
}, },
async deleteProvider(name) {
if (
!confirm(
`Are you sure you want to delete ${name}? This will also remove all associated tokens.`,
)
)
return;
this.loading = true;
try {
const res = await fetch(`${this.apiPrefix}/config/${name}`, {
method: "DELETE",
});
if (res.status === 401) {
return this.handleSessionExpired();
}
if (!res.ok) throw new Error("Delete failed");
this.showNotification(`Deleted ${name}`);
await this.fetchProviders();
} catch (err) {
this.showNotification(err.message, "error");
} finally {
this.loading = false;
}
},
editProvider(provider) { editProvider(provider) {
this.form = { this.form = {
providerName: provider.name, providerName: provider.name,
@@ -179,7 +239,7 @@ document.addEventListener("alpine:init", () => {
}, },
getRedirectUri() { getRedirectUri() {
return `${window.location.origin}/auth/${this.form.providerName || "{provider}"}/callback`; return `${window.location.origin}${this.authPrefix}/${this.form.providerName || "{provider}"}/callback`;
}, },
copyToClipboard(text) { copyToClipboard(text) {
@@ -199,5 +259,15 @@ document.addEventListener("alpine:init", () => {
formatTime(timestamp) { formatTime(timestamp) {
return formatTime(timestamp); return formatTime(timestamp);
}, },
}));
formatExpiry(timestamp) {
return formatExpiry(timestamp);
},
isExpired(timestamp) {
if (!timestamp) return true;
return new Date(timestamp) < new Date();
},
}),
);
}); });
+9 -15
View File
@@ -1,16 +1,10 @@
// @ts-nocheck // @ts-nocheck
import { afterEach, describe, expect, it, mock, spyOn } from "bun:test"; import { describe, expect, it, spyOn } from "bun:test";
import { API_PREFIX } from "../../src/constants";
import { redis } from "../../src/core/RedisClient"; import { redis } from "../../src/core/RedisClient";
import { app } from "../../src/index"; import { app } from "../../src/index";
describe("API Integration", () => { describe("API Integration", () => {
afterEach(() => {
mock.restore();
redis.get.mockImplementation(() => Promise.resolve(null));
redis.set.mockImplementation(() => Promise.resolve());
redis.keys.mockImplementation(() => Promise.resolve([]));
});
const mockTraktConfig = JSON.stringify({ const mockTraktConfig = JSON.stringify({
clientId: "trakt-client-id", clientId: "trakt-client-id",
clientSecret: "trakt-client-secret", clientSecret: "trakt-client-secret",
@@ -20,7 +14,7 @@ describe("API Integration", () => {
}); });
it("should return 401 if API Key is missing", async () => { it("should return 401 if API Key is missing", async () => {
const res = await app.request("/api/status"); const res = await app.request(`${API_PREFIX}/status`);
expect(res.status).toBe(401); expect(res.status).toBe(401);
const body = await res.json(); const body = await res.json();
@@ -55,7 +49,7 @@ describe("API Integration", () => {
return Promise.resolve(null); return Promise.resolve(null);
}); });
const res = await app.request("/api/status", { const res = await app.request(`${API_PREFIX}/status`, {
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
}, },
@@ -75,7 +69,7 @@ describe("API Integration", () => {
return Promise.resolve(null); return Promise.resolve(null);
}); });
const res = await app.request("/api/status", { const res = await app.request(`${API_PREFIX}/status`, {
headers: { headers: {
Cookie: "toknd_api_key=test-api-key", Cookie: "toknd_api_key=test-api-key",
}, },
@@ -87,7 +81,7 @@ describe("API Integration", () => {
}); });
it("should return 404 for unknown provider token", async () => { it("should return 404 for unknown provider token", async () => {
const res = await app.request("/api/token/unconfigured-provider", { const res = await app.request(`${API_PREFIX}/token/unconfigured-provider`, {
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
}, },
@@ -103,7 +97,7 @@ describe("API Integration", () => {
return Promise.resolve(null); return Promise.resolve(null);
}); });
const res = await app.request("/api/token/trakt", { const res = await app.request(`${API_PREFIX}/token/trakt`, {
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
}, },
@@ -120,7 +114,7 @@ describe("API Integration", () => {
return Promise.resolve(null); return Promise.resolve(null);
}); });
const res = await app.request("/api/token/trakt", { const res = await app.request(`${API_PREFIX}/token/trakt`, {
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
}, },
@@ -150,7 +144,7 @@ describe("API Integration", () => {
}), }),
); );
const res = await app.request("/api/refresh/trakt", { const res = await app.request(`${API_PREFIX}/refresh/trakt`, {
method: "POST", method: "POST",
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
+6 -10
View File
@@ -1,14 +1,10 @@
// @ts-nocheck // @ts-nocheck
import { afterEach, describe, expect, it, mock, spyOn } from "bun:test"; import { describe, expect, it, spyOn } from "bun:test";
import { AUTH_PREFIX } from "../../src/constants";
import { redis } from "../../src/core/RedisClient"; import { redis } from "../../src/core/RedisClient";
import { app } from "../../src/index"; import { app } from "../../src/index";
describe("Auth Integration", () => { describe("Auth Integration", () => {
afterEach(() => {
mock.restore();
redis.get.mockImplementation(() => Promise.resolve(null));
});
const mockProviderConfig = JSON.stringify({ const mockProviderConfig = JSON.stringify({
clientId: "trakt-client-id", clientId: "trakt-client-id",
clientSecret: "trakt-client-secret", clientSecret: "trakt-client-secret",
@@ -23,7 +19,7 @@ describe("Auth Integration", () => {
return Promise.resolve(null); return Promise.resolve(null);
}); });
const res = await app.request("/auth/trakt/login"); const res = await app.request(`${AUTH_PREFIX}/trakt/login`);
expect(res.status).toBe(302); expect(res.status).toBe(302);
expect(res.headers.get("Location")).toContain("trakt.tv/oauth/authorize"); expect(res.headers.get("Location")).toContain("trakt.tv/oauth/authorize");
@@ -48,7 +44,7 @@ describe("Auth Integration", () => {
}), }),
); );
const res = await app.request("/auth/callback?state=trakt&code=temporary-auth-code"); const res = await app.request(`${AUTH_PREFIX}/callback?state=trakt&code=temporary-auth-code`);
expect(res.status).toBe(302); expect(res.status).toBe(302);
expect(res.headers.get("Location")).toBe("/app/success?provider=trakt"); expect(res.headers.get("Location")).toBe("/app/success?provider=trakt");
@@ -57,13 +53,13 @@ describe("Auth Integration", () => {
}); });
it("should return 404 if provider not configured during login", async () => { it("should return 404 if provider not configured during login", async () => {
const res = await app.request("/auth/unknown-provider/login"); const res = await app.request(`${AUTH_PREFIX}/unknown-provider/login`);
expect(res.status).toBe(404); expect(res.status).toBe(404);
}); });
it("should return 400 if callback is missing state or code", async () => { it("should return 400 if callback is missing state or code", async () => {
const res = await app.request("/auth/callback?code=some-code"); const res = await app.request(`${AUTH_PREFIX}/callback?code=some-code`);
expect(res.status).toBe(400); expect(res.status).toBe(400);
}); });
+17 -11
View File
@@ -1,16 +1,10 @@
// @ts-nocheck // @ts-nocheck
import { afterEach, describe, expect, it, mock } from "bun:test"; import { describe, expect, it } from "bun:test";
import { API_PREFIX } from "../../src/constants";
import { redis } from "../../src/core/RedisClient"; import { redis } from "../../src/core/RedisClient";
import { app } from "../../src/index"; import { app } from "../../src/index";
describe("Config Integration", () => { describe("Config Integration", () => {
afterEach(() => {
mock.restore();
redis.get.mockImplementation(() => Promise.resolve(null));
redis.set.mockImplementation(() => Promise.resolve());
redis.keys.mockImplementation(() => Promise.resolve([]));
});
it("should list all configured providers", async () => { it("should list all configured providers", async () => {
redis.keys.mockReturnValue(Promise.resolve(["config:trakt"])); redis.keys.mockReturnValue(Promise.resolve(["config:trakt"]));
redis.get.mockImplementation(() => redis.get.mockImplementation(() =>
@@ -25,7 +19,7 @@ describe("Config Integration", () => {
), ),
); );
const res = await app.request("/api/config", { const res = await app.request(`${API_PREFIX}/config`, {
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
}, },
@@ -46,7 +40,7 @@ describe("Config Integration", () => {
scope: "user:email", scope: "user:email",
}; };
const res = await app.request("/api/config/github", { const res = await app.request(`${API_PREFIX}/config/github`, {
method: "POST", method: "POST",
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
@@ -67,7 +61,7 @@ describe("Config Integration", () => {
clientId: "missing-other-required-fields", clientId: "missing-other-required-fields",
}; };
const res = await app.request("/api/config/invalid", { const res = await app.request(`${API_PREFIX}/config/invalid`, {
method: "POST", method: "POST",
headers: { headers: {
Authorization: "Bearer test-api-key", Authorization: "Bearer test-api-key",
@@ -78,4 +72,16 @@ describe("Config Integration", () => {
expect(res.status).toBe(400); expect(res.status).toBe(400);
}); });
it("should delete a provider configuration", async () => {
const res = await app.request(`${API_PREFIX}/config/trakt`, {
method: "DELETE",
headers: {
Authorization: "Bearer test-api-key",
},
});
expect(res.status).toBe(200);
expect(redis.del).toHaveBeenCalled();
});
}); });
+2 -1
View File
@@ -1,5 +1,6 @@
// @ts-nocheck // @ts-nocheck
import { describe, expect, it } from "bun:test"; import { describe, expect, it } from "bun:test";
import { API_PREFIX } from "../../src/constants";
import { redis } from "../../src/core/RedisClient"; import { redis } from "../../src/core/RedisClient";
import { app } from "../../src/index"; import { app } from "../../src/index";
@@ -26,7 +27,7 @@ describe("Dashboard & Common Integration", () => {
throw new Error("Redis Crash"); throw new Error("Redis Crash");
}); });
const res = await app.request("/api/status", { const res = await app.request(`${API_PREFIX}/status`, {
headers: { Authorization: "Bearer test-api-key" }, headers: { Authorization: "Bearer test-api-key" },
}); });
+23 -3
View File
@@ -1,18 +1,38 @@
import { mock } from "bun:test"; // @ts-nocheck
// Global test setup to stub environment variables
process.env.API_KEY = "test-api-key"; process.env.API_KEY = "test-api-key";
process.env.REDIS_HOST = "localhost"; process.env.REDIS_HOST = "localhost";
process.env.REDIS_PORT = "6379"; process.env.REDIS_PORT = "6379";
process.env.APP_PORT = "3000"; process.env.APP_PORT = "3000";
import { afterEach, mock } from "bun:test";
// Global config mock
mock.module("../src/config", () => ({
config: {
API_KEY: "test-api-key",
REDIS_HOST: "localhost",
REDIS_PORT: 6379,
APP_PORT: "3000",
},
}));
// Global Redis mock // Global Redis mock
mock.module("../src/core/RedisClient", () => ({ mock.module("../src/core/RedisClient", () => ({
redis: { redis: {
status: "ready", status: "ready",
get: mock(() => Promise.resolve(null)), get: mock(() => Promise.resolve(null)),
set: mock(() => Promise.resolve()), set: mock(() => Promise.resolve()),
del: mock(() => Promise.resolve(1)),
keys: mock(() => Promise.resolve([])), keys: mock(() => Promise.resolve([])),
on: mock(() => {}), on: mock(() => {}),
}, },
})); }));
afterEach(async () => {
const { redis } = await import("../src/core/RedisClient");
mock.restore();
redis.get.mockImplementation(() => Promise.resolve(null));
redis.set.mockImplementation(() => Promise.resolve());
redis.del.mockImplementation(() => Promise.resolve(1));
redis.keys.mockImplementation(() => Promise.resolve([]));
});