Add core server Controller base, auth hook, and buildServer

src/core/server/Controller.ts

@@ -0,0 +1,5 @@
+import type { FastifyInstance } from 'fastify';
+
+export abstract class Controller {
+  abstract register(app: FastifyInstance): void;
+}

src/core/server/authHook.ts

@@ -0,0 +1,19 @@
+import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
+
+export function registerAuthHook(
+  app: FastifyInstance,
+  secretKey: string,
+  exemptPaths: string[] = ['/health']
+): void {
+  app.addHook('onRequest', async (request: FastifyRequest, reply: FastifyReply) => {
+    const path = request.url.split('?')[0];
+    if (!secretKey || exemptPaths.includes(path)) {
+      return;
+    }
+    const header = request.headers.authorization ?? '';
+    const token = header.startsWith('Bearer ') ? header.slice('Bearer '.length) : undefined;
+    if (token !== secretKey) {
+      reply.code(401).send({ error: 'unauthorized' });
+    }
+  });
+}

src/core/server/buildServer.ts

@@ -0,0 +1,17 @@
+import Fastify, { type FastifyInstance } from 'fastify';
+import type { Controller } from './Controller';
+import { registerAuthHook } from './authHook';
+
+export interface BuildServerOptions {
+  secretKey: string;
+  controllers: Controller[];
+}
+
+export function buildServer(options: BuildServerOptions): FastifyInstance {
+  const app = Fastify({ logger: false });
+  registerAuthHook(app, options.secretKey);
+  for (const controller of options.controllers) {
+    controller.register(app);
+  }
+  return app;
+}