Add multi-scheme authentication support#33

Merged

moutonjeremy merged 27 commits intomainfrom

chore-auth

Feb 10, 2026

Commits on Feb 7, 2026

feat: Add mock authentication services and corresponding tests
moutonjeremy
committed
feat: Implement authentication validators for Basic Auth, API Key, and AWS SigV4
moutonjeremy
committed
feat: Enhance validateAuthorization to support multiple security schemes and maintain backward compatibility
moutonjeremy
committed
feat: Implement authentication methods for Basic Auth, API Key, and AWS SigV4
moutonjeremy
committed
feat: Implement SmartAuthMiddleware and MultiSchemeAuthMiddleware for enhanced authentication handling
moutonjeremy
committed
feat: Update parseInput to pass configuration to validateAuthorization
moutonjeremy
committed
feat: Enhance error handling with AuthError and ScopeError types; validate security requirements for empty cases
moutonjeremy
committed
fix: Update authentication tests to expect 401 status code instead of 400
moutonjeremy
committed
fix: Enhance error handling in validateAuthorization to return AuthError with appropriate status codes
moutonjeremy
committed
fix: Improve authentication error handling in MultiSchemeAuthMiddleware to provide detailed error messages and appropriate status codes
moutonjeremy
committed
fix: Enhance error handling in Method to differentiate between authentication and authorization errors
moutonjeremy
committed
fix: Update validateResourceAccess to return AuthError with appropriate status codes for authorization failures
moutonjeremy
committed
test: Add unit test for parseAWSSigV4Header to handle missing SignedHeaders
moutonjeremy
committed
fix: Enhance AWS SigV4 header validation to check for missing SignedHeaders and improve security requirement sorting
moutonjeremy
committed
fix: Improve error handling in MultiSchemeAuthMiddleware to return server configuration error for missing security schemes
moutonjeremy
committed
feat: Add MockBearerAndAPIKeyAuthService and tests for AND-semantics in security requirements
moutonjeremy
committed
fix: Update error handling in authentication validation functions to return AuthError with status codes
moutonjeremy
committed
fix: Propagate typed errors in validateAuthorization without re-wrapping
moutonjeremy
committed
fix: Improve error handling in authentication middlewares to return appropriate status codes and messages
moutonjeremy
committed
fix: Enhance validateAuthorization to short-circuit on server configuration errors
moutonjeremy
committed
fix: Short-circuit on server configuration errors in MultiSchemeAuthMiddleware
moutonjeremy
committed
fix: Add error label for authorization failure in MultiSchemeAuthMiddleware
moutonjeremy
committed
test: Add tests for unsupported API Key location and per-route security requirements
moutonjeremy
committed
fix: Return AuthError for unsupported API Key location in validateAPIKey
moutonjeremy
committed
fix: Implement per-route security requirements fallback in parseInput
moutonjeremy
committed
fix: Add specific error label for authorization failure in classifyAuthError
moutonjeremy
committed

Commits on Feb 10, 2026

Update auth.go

moutonjeremy
and
Copilot
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add multi-scheme authentication support#33

Add multi-scheme authentication support#33
moutonjeremy merged 27 commits intomainfrom
chore-auth

Commits on Feb 7, 2026

feat: Add mock authentication services and corresponding tests

feat: Implement authentication validators for Basic Auth, API Key, and AWS SigV4

feat: Enhance validateAuthorization to support multiple security schemes and maintain backward compatibility

feat: Implement authentication methods for Basic Auth, API Key, and AWS SigV4

feat: Implement SmartAuthMiddleware and MultiSchemeAuthMiddleware for enhanced authentication handling

feat: Update parseInput to pass configuration to validateAuthorization

feat: Enhance error handling with AuthError and ScopeError types; validate security requirements for empty cases

fix: Update authentication tests to expect 401 status code instead of 400

fix: Enhance error handling in validateAuthorization to return AuthError with appropriate status codes

fix: Improve authentication error handling in MultiSchemeAuthMiddleware to provide detailed error messages and appropriate status codes

fix: Enhance error handling in Method to differentiate between authentication and authorization errors

fix: Update validateResourceAccess to return AuthError with appropriate status codes for authorization failures

test: Add unit test for parseAWSSigV4Header to handle missing SignedHeaders

fix: Enhance AWS SigV4 header validation to check for missing SignedHeaders and improve security requirement sorting

fix: Improve error handling in MultiSchemeAuthMiddleware to return server configuration error for missing security schemes

feat: Add MockBearerAndAPIKeyAuthService and tests for AND-semantics in security requirements

fix: Update error handling in authentication validation functions to return AuthError with status codes

fix: Propagate typed errors in validateAuthorization without re-wrapping

fix: Improve error handling in authentication middlewares to return appropriate status codes and messages

fix: Enhance validateAuthorization to short-circuit on server configuration errors

fix: Short-circuit on server configuration errors in MultiSchemeAuthMiddleware

fix: Add error label for authorization failure in MultiSchemeAuthMiddleware

test: Add tests for unsupported API Key location and per-route security requirements

fix: Return AuthError for unsupported API Key location in validateAPIKey

fix: Implement per-route security requirements fallback in parseInput

fix: Add specific error label for authorization failure in classifyAuthError

Commits on Feb 10, 2026

Update auth.go