express-auth-middle

import express from 'express'; import authMiddleWare from 'express-auth-middle'; const app = express(); const PORT = process.env.PORT || 3000; // Dummy configuration for demonstration. In production, use environment variables. const config = { xAuthorisationKey: process.env.X_AUTH_KEY || 'your_secret_x_auth_key', basicAuthUname: process.env.BASIC_AUTH_USERNAME || 'admin', basicAuthPword: process.env.BASIC_AUTH_PASSWORD || 'password123' }; /** * Injects routes and authentication middleware into the Express app. * This example applies the middleware globally to all subsequent routes. */ app.use(authMiddleWare({ methods: ['x-auth', 'basic-auth'], // Enable both X-Auth and Basic Auth credentials: { xAuthorisationKey: config.xAuthorisationKey, basicAuthUname: config.basicAuthUname, basicAuthPword: config.basicAuthPword }, challenge: 'Protected Area' // Prompts client for credentials if none are provided })); // Example protected route app.get('/api/protected', (req, res) => { res.send('Welcome to the protected area!'); }); // Catch-all for unhandled routes app.use((req, res) => { res.status(404).send('Not Found'); }); app.listen(PORT, () => { console.log(`Server running on http://localhost:${PORT}`); console.log('Test with curl:'); console.log(` curl -H "X-Auth: ${config.xAuthorisationKey}" http://localhost:${PORT}/api/protected`); console.log(` curl -H "Authorization: Basic ${Buffer.from(`${config.basicAuthUname}:${config.basicAuthPword}`).toString('base64')}" http://localhost:${PORT}/api/protected`); });