Add multi-scheme authentication support#33

Open

moutonjeremy wants to merge 26 commits intomainfrom

Commits on Feb 7, 2026

feat: Add mock authentication services and corresponding tests
moutonjeremy
committed
feat: Implement authentication validators for Basic Auth, API Key, and AWS SigV4
moutonjeremy
committed
feat: Enhance validateAuthorization to support multiple security schemes and maintain backward compatibility
moutonjeremy
committed
feat: Implement authentication methods for Basic Auth, API Key, and AWS SigV4
moutonjeremy
committed
feat: Implement SmartAuthMiddleware and MultiSchemeAuthMiddleware for enhanced authentication handling
moutonjeremy
committed
feat: Update parseInput to pass configuration to validateAuthorization
moutonjeremy
committed
feat: Enhance error handling with AuthError and ScopeError types; validate security requirements for empty cases
moutonjeremy
committed
fix: Update authentication tests to expect 401 status code instead of 400
moutonjeremy
committed
fix: Enhance error handling in validateAuthorization to return AuthError with appropriate status codes
moutonjeremy
committed
fix: Improve authentication error handling in MultiSchemeAuthMiddleware to provide detailed error messages and appropriate status codes
moutonjeremy
committed
fix: Enhance error handling in Method to differentiate between authentication and authorization errors
moutonjeremy
committed
fix: Update validateResourceAccess to return AuthError with appropriate status codes for authorization failures
moutonjeremy
committed
test: Add unit test for parseAWSSigV4Header to handle missing SignedHeaders
moutonjeremy
committed
fix: Enhance AWS SigV4 header validation to check for missing SignedHeaders and improve security requirement sorting
moutonjeremy
committed
fix: Improve error handling in MultiSchemeAuthMiddleware to return server configuration error for missing security schemes
moutonjeremy
committed
feat: Add MockBearerAndAPIKeyAuthService and tests for AND-semantics in security requirements
moutonjeremy
committed
fix: Update error handling in authentication validation functions to return AuthError with status codes
moutonjeremy
committed
fix: Propagate typed errors in validateAuthorization without re-wrapping
moutonjeremy
committed
fix: Improve error handling in authentication middlewares to return appropriate status codes and messages
moutonjeremy
committed
fix: Enhance validateAuthorization to short-circuit on server configuration errors
moutonjeremy
committed
fix: Short-circuit on server configuration errors in MultiSchemeAuthMiddleware
moutonjeremy
committed
fix: Add error label for authorization failure in MultiSchemeAuthMiddleware
moutonjeremy
committed
test: Add tests for unsupported API Key location and per-route security requirements
moutonjeremy
committed
fix: Return AuthError for unsupported API Key location in validateAPIKey
moutonjeremy
committed
fix: Implement per-route security requirements fallback in parseInput
moutonjeremy
committed
fix: Add specific error label for authorization failure in classifyAuthError
moutonjeremy
committed