Effect

import { createServer } from "node:http";
import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
import { createTheAuth } from "@glinr/theauth";
import { createTheAuthHandler, requireAgent } from "@glinr/theauth/http";
import { Effect, Layer } from "effect";
import { HttpEffect, HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/http";

const theauth = await createTheAuth({
  database: { provider: "sqlite-native", url: "theauth.db" },
  agents: { enabled: true, maxPerUser: 10, defaultPermissions: [], auditAll: true },
});

const handler = createTheAuthHandler(theauth, {
  basePath: "/api/theauth",
  // Who may call the management routes. Return { id } to allow, null for a 401.
  authenticate: async (request) => {
    const user = await theauth.auth.resolveUser(request);
    return user ? { id: user.id } : null;
  },
});

// "/api/theauth/*" also matches "/api/theauth" itself, so one route is enough.
const TheAuthRoutes = HttpRouter.add("*", "/api/theauth/*", HttpEffect.fromWebHandler(handler));

const Docs = HttpRouter.add(
  "GET",
  "/docs",
  Effect.gen(function* () {
    const request = yield* HttpServerRequest.toWeb(yield* HttpServerRequest.HttpServerRequest);
    const result = yield* Effect.promise(() =>
      requireAgent(theauth, request, { action: "read", resource: "docs" }),
    );
    if (!result.ok) return HttpServerResponse.fromWeb(result.response); // 401 or 403
    return yield* HttpServerResponse.json({ agentId: result.agent.id });
  }),
);

const Server = HttpRouter.serve(Layer.mergeAll(TheAuthRoutes, Docs)).pipe(
  Layer.provide(NodeHttpServer.layer(createServer, { port: 3000 })),
);

Layer.launch(Server).pipe(NodeRuntime.runMain);

import { createServer } from "node:http";
import {
  HttpApp,
  HttpRouter,
  HttpServer,
  HttpServerRequest,
  HttpServerResponse,
} from "@effect/platform";
import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
import { createTheAuth } from "@glinr/theauth";
import { createTheAuthHandler, requireAgent } from "@glinr/theauth/http";
import { Effect, Layer } from "effect";

const theauth = await createTheAuth({
  database: { provider: "sqlite-native", url: "theauth.db" },
  agents: { enabled: true, maxPerUser: 10, defaultPermissions: [], auditAll: true },
});

const handler = createTheAuthHandler(theauth, {
  basePath: "/api/theauth",
  authenticate: async (request) => {
    const user = await theauth.auth.resolveUser(request);
    return user ? { id: user.id } : null;
  },
});

const router = HttpRouter.empty.pipe(
  HttpRouter.all("/api/theauth/*", HttpApp.fromWebHandler(handler)),
  HttpRouter.get(
    "/docs",
    Effect.gen(function* () {
      const request = yield* HttpServerRequest.toWeb(yield* HttpServerRequest.HttpServerRequest);
      const result = yield* Effect.promise(() =>
        requireAgent(theauth, request, { action: "read", resource: "docs" }),
      );
      if (!result.ok) return HttpServerResponse.fromWeb(result.response);
      return yield* HttpServerResponse.json({ agentId: result.agent.id });
    }),
  ),
);

const Server = router.pipe(
  HttpServer.serve(),
  Layer.provide(NodeHttpServer.layer(createServer, { port: 3000 })),
);

NodeRuntime.runMain(Layer.launch(Server));