Addons Scanner Utilities

import express, { Request, Response, NextFunction } from 'express';
import { AppError, makeJWT, downloadFile } from 'addons-scanner-utils';
import safeCompare from 'safe-compare'; // from peer dependency

const app = express();
const port = 3000;

// A placeholder for a secret key for HMAC-SHA256 or JWT signing
const JWT_SECRET = process.env.JWT_SECRET ?? 'super_secret_jwt_key_please_change';
const STATIC_AUTH_TOKEN = process.env.STATIC_AUTH_TOKEN ?? 'my-secure-token-123_please_change';

// Middleware to simulate an authentication check (e.g., Bearer token)
function authMiddleware(req: Request, res: Response, next: NextFunction) {
  const authHeader = req.headers.authorization;
  if (!authHeader || !authHeader.startsWith('Bearer ')) {
    return next(new AppError('Unauthorized: Bearer token missing or malformed', 401));
  }
  const token = authHeader.split(' ')[1];
  // In a real application, validate JWT or compare with a stored secret securely.
  // Using safeCompare for demonstration with a static token.
  if (!safeCompare(token, STATIC_AUTH_TOKEN)) {
    return next(new AppError('Unauthorized: Invalid token', 401));
  }
  next();
}

app.get('/', (req: Request, res: Response) => {
  res.send('Addons Scanner Utils Example API');
});

app.get('/protected', authMiddleware, (req: Request, res: Response) => {
  res.json({ message: 'Access granted to protected resource.' });
});

app.get('/jwt', (req: Request, res: Response, next: NextFunction) => {
  try {
    const issuer = 'your-service';
    const expiresInMinutes = 5;
    // In a production environment, ensure JWT_SECRET is a strong, securely stored key.
    const jwtToken = makeJWT(issuer, JWT_SECRET, expiresInMinutes);
    res.json({ jwt: jwtToken, message: `JWT created for ${issuer}, valid for ${expiresInMinutes} minutes.` });
  } catch (error) {
    next(new AppError('Failed to create JWT', 500, error as Error));
  }
});

app.get('/download-example', async (req: Request, res: Response, next: NextFunction) => {
  const fileUrl = 'https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png'; // Example URL
  const destinationPath = '/tmp/downloaded-image.png'; // Ensure /tmp is writable or change path

  try {
    await downloadFile(fileUrl, destinationPath);
    res.json({ message: `File downloaded successfully to ${destinationPath}` });
  } catch (error) {
    next(new AppError('Failed to download file', 500, error as Error));
  }
});

// Error handling middleware
app.use((err: Error, req: Request, res: Response, next: NextFunction) => {
  if (err instanceof AppError) {
    console.error(`AppError: ${err.message}`, err.originalError);
    res.status(err.statusCode).json({
      error: err.name,
      message: err.message
    });
  } else {
    console.error('Unhandled error:', err);
    res.status(500).json({
      error: 'InternalServerError',
      message: 'An unexpected error occurred.'
    });
  }
});

app.listen(port, () => {
  console.log(`Server listening at http://localhost:${port}`);
});