mirror of
https://github.com/Memo-2023/mana-monorepo.git
synced 2026-05-18 01:29:40 +02:00
61ee1ae269
Rewrite the central authentication service from NestJS to Hono + Bun.
Uses Better Auth's native fetch-based handler — no Express conversion.
Key architecture changes:
- Better Auth handler mounted directly on Hono (app.all('/api/auth/*'))
- No NestJS DI, modules, guards, decorators — plain TypeScript
- JWT validation via jose (same as extracted services)
- Email via nodemailer (simplified, German templates)
- ~1,400 LOC vs ~11,500 LOC in NestJS (88% reduction)
Service structure:
- auth/better-auth.config.ts — copied from mana-core-auth (framework-agnostic)
- auth/stores.ts — in-memory stores for email redirect URLs
- email/send.ts — nodemailer email functions
- middleware/ — JWT auth, service auth, error handler (shared pattern)
- db/schema/ — copied from mana-core-auth (Drizzle, framework-agnostic)
Port: 3001 (same as mana-core-auth — drop-in replacement)
Database: mana_auth (same DB, same schemas)
Better Auth plugins: Organization, JWT (EdDSA), OIDC Provider,
Two-Factor (TOTP), Magic Link
Note: This is the initial version. Guilds, API keys, Me (GDPR),
security (lockout/audit), and admin endpoints will be added
incrementally. The old mana-core-auth remains until fully replaced.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
26 lines
715 B
TypeScript
26 lines
715 B
TypeScript
/**
|
|
* Service-to-Service Authentication Middleware
|
|
*
|
|
* Validates X-Service-Key header for backend-to-backend calls.
|
|
* Used by /internal/* routes.
|
|
*/
|
|
|
|
import type { MiddlewareHandler } from 'hono';
|
|
import { UnauthorizedError } from '../lib/errors';
|
|
|
|
/**
|
|
* Middleware that validates X-Service-Key header.
|
|
* Sets c.set('appId', ...) from X-App-Id header.
|
|
*/
|
|
export function serviceAuth(serviceKey: string): MiddlewareHandler {
|
|
return async (c, next) => {
|
|
const key = c.req.header('X-Service-Key');
|
|
if (!key || key !== serviceKey) {
|
|
throw new UnauthorizedError('Invalid or missing service key');
|
|
}
|
|
|
|
const appId = c.req.header('X-App-Id') || 'unknown';
|
|
c.set('appId', appId);
|
|
await next();
|
|
};
|
|
}
|