http-auth-utils

import { parseWWWAuthenticateHeader, parseAuthorizationHeader, buildWWWAuthenticateHeader, buildAuthorizationHeader } from 'http-auth-utils'; import { BASIC } from 'http-auth-utils/mechanisms/basic'; import { BEARER } from 'http-auth-utils/mechanisms/bearer'; // --- Server-side example: Parsing an incoming Authorization header const incomingAuthHeader = 'Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c'; const authDetails = parseAuthorizationHeader(incomingAuthHeader); if (authDetails.type === 'Bearer' && authDetails.data.token) { console.log('Parsed Bearer token:', authDetails.data.token); // In a real application, you would validate the token here. } else { console.log('Authentication header not recognized or malformed.'); } // --- Server-side example: Building a WWW-Authenticate challenge const challengeHeader = buildWWWAuthenticateHeader(BASIC, { realm: 'Restricted Area' }); console.log('WWW-Authenticate header for Basic:', challengeHeader); // Example usage for a server response: res.setHeader('WWW-Authenticate', challengeHeader); // --- Client-side example: Building an Authorization header const username = process.env.AUTH_USERNAME ?? 'testuser'; const password = process.env.AUTH_PASSWORD ?? 'testpass'; const basicAuthHeader = buildAuthorizationHeader(BASIC, { username, password }); console.log('Authorization header for Basic:', basicAuthHeader); // Example usage for a client request: fetch('/api/data', { headers: { Authorization: basicAuthHeader } }); // --- Parsing a WWW-Authenticate header (e.g., from a server's 401 response) const wwwAuthenticateResponse = 'Basic realm="Test API", charset="UTF-8"'; const parsedChallenge = parseWWWAuthenticateHeader(wwwAuthenticateResponse); console.log('Parsed WWW-Authenticate challenge:', parsedChallenge);