50 Time-Saving AI Developer Tools

// Generated via The KeySafe Prompt Protocol
// Node.js/TypeScript example: bearer auth + least-privilege scope check.
// Assumption: upstream passes Authorization: Bearer .

import type { Request, Response, NextFunction } from "express";

type EnvMap = { API_KEY: string; REQUIRED_SCOPES: string };

const env: EnvMap = {
  API_KEY: process.env.SERVICE_API_KEY || "", // env var wiring; no hardcoded secrets
  REQUIRED_SCOPES: process.env.REQUIRED_SCOPES || "",
};

function requireEnv(name: keyof EnvMap) {
  if (!env[name]) throw new Error(`Missing required env var: ${name}`);
}

requireEnv("API_KEY");
requireEnv("REQUIRED_SCOPES");

const requiredScopes = env.REQUIRED_SCOPES.split(",").map(s => s.trim()).filter(Boolean);

export function authMiddleware(req: Request, res: Response, next: NextFunction) {
  // Redact auth header in logs by default (log_redaction = true)
  const auth = req.header("authorization") || "";
  const token = auth.startsWith("Bearer ") ? auth.slice("Bearer ".length) : "";

  if (!token) {
    return res.status(401).json({
      error: { code: "AUTH_MISSING", message: "Authorization header is required." },
    });
  }

  // Scope check stub: replace with your verifier (JWT verify, introspection, etc.)
  // Least-privilege: validate only requiredScopes.
  const tokenScopes = ["read:users"]; // placeholder for verifier output

  const hasScopes = requiredScopes.every(s => tokenScopes.includes(s));
  if (!hasScopes) {
    return res.status(403).json({
      error: { code: "AUTH_SCOPE_DENIED", message: "Insufficient scope." },
    });
  }

  return next();
}

{
  "auth": {
    "scheme": "bearer",
    "env_var_map": { "API_KEY": "SERVICE_API_KEY", "REQUIRED_SCOPES": "REQUIRED_SCOPES" },
    "least_privilege": { "required_scopes": ["read:users"] }
  },
  "code": {
    "files": [
      { "path": "src/auth.ts", "language": "typescript", "content": "..." }
    ]
  },
  "docs": {
    "api_reference": {
      "auth_header": "Authorization: Bearer ",
      "errors": {
        "401": { "error": { "code": "AUTH_MISSING", "message": "Authorization header is required." } },
        "403": { "error": { "code": "AUTH_SCOPE_DENIED", "message": "Insufficient scope." } }
      }
    },
    "developer_guide": {
      "env_vars": ["SERVICE_API_KEY", "REQUIRED_SCOPES"],
      "rotation_notice_days": 30
    }
  }
}