feat(api): fix spec indentation

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 47
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/imagekit-inc%2Fimagekit-1422f7513f230162270b197061e5768c2e0c803b94b8cd03a5e72544ac75a27f.yml
-openapi_spec_hash: 41175e752e6f6ce900b36aecba687fa7
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/imagekit-inc%2Fimagekit-f4cd00365ba96133e0675eae3d5d3c6ac13874789e2ce69a84310ab64a4f87dd.yml
+openapi_spec_hash: dce632cfbb5464a98c0f5d8eb9573d68
 config_hash: 17e408231b0b01676298010c7405f483

README.md

@@ -337,7 +337,10 @@ Generate authentication parameters for secure client-side file uploads:
 
 ```ts
 // Generate authentication parameters for client-side uploads
-const authParams = client.helper.getAuthenticationParameters();
+const authParams = client.helper.getAuthenticationParameters({
+  privateKey: process.env['IMAGEKIT_PRIVATE_KEY'], // This is the default and can be omitted
+  password: process.env['OPTIONAL_IMAGEKIT_IGNORES_THIS'], // This is the default and can be omitted
+});
 console.log(authParams);
 // Result: { token: 'uuid-token', expire: timestamp, signature: 'hmac-signature' }
 
@@ -430,7 +433,6 @@ You can use the `maxRetries` option to configure or disable this:
 ```js
 // Configure the default for all requests:
 const client = new ImageKit({
-  privateKey: 'My Private Key',
   maxRetries: 0, // default is 2
 });
 
@@ -448,7 +450,6 @@ Requests time out after 1 minute by default. You can configure this with a `time
 ```ts
 // Configure the default for all requests:
 const client = new ImageKit({
-  privateKey: 'My Private Key',
   timeout: 20 * 1000, // 20 seconds (default is 1 minute)
 });
 

packages/mcp-server/README.md

@@ -80,13 +80,24 @@ and repeatably.
 
 Launching the client with `--transport=http` launches the server as a remote server using Streamable HTTP transport. The `--port` setting can choose the port it will run on, and the `--socket` setting allows it to run on a Unix socket.
 
+Authorization can be provided via the `Authorization` header using the Basic scheme.
+
+Additionally, authorization can be provided via the following headers:
+| Header | Equivalent client option | Security scheme |
+| ---------------------------------- | ------------------------ | --------------- |
+| `x-imagekit-private-key` | `privateKey` | basicAuth |
+| `x-optional-imagekit-ignores-this` | `password` | basicAuth |
+
 A configuration JSON for this server might look like this, assuming the server is hosted at `http://localhost:3000`:
 
 ```json
 {
   "mcpServers": {
     "imagekit_nodejs_api": {
-      "url": "http://localhost:3000"
+      "url": "http://localhost:3000",
+      "headers": {
+        "Authorization": "Basic <auth value>"
+      }
     }
   }
 }

packages/mcp-server/src/auth.ts

@@ -5,7 +5,34 @@ import { ClientOptions } from '@imagekit/nodejs';
 import { McpOptions } from './options';
 
 export const parseClientAuthHeaders = (req: IncomingMessage, required?: boolean): Partial<ClientOptions> => {
-  return {};
+  if (req.headers.authorization) {
+    const scheme = req.headers.authorization.split(' ')[0]!;
+    const value = req.headers.authorization.slice(scheme.length + 1);
+    switch (scheme) {
+      case 'Basic':
+        const rawValue = Buffer.from(value, 'base64').toString();
+        return {
+          privateKey: rawValue.slice(0, rawValue.search(':')),
+          password: rawValue.slice(rawValue.search(':') + 1),
+        };
+      default:
+        throw new Error(
+          'Unsupported authorization scheme. Expected the "Authorization" header to be a supported scheme (Basic).',
+        );
+    }
+  } else if (required) {
+    throw new Error('Missing required Authorization header; see WWW-Authenticate header for details.');
+  }
+
+  const privateKey =
+    Array.isArray(req.headers['x-imagekit-private-key']) ?
+      req.headers['x-imagekit-private-key'][0]
+    : req.headers['x-imagekit-private-key'];
+  const password =
+    Array.isArray(req.headers['x-optional-imagekit-ignores-this']) ?
+      req.headers['x-optional-imagekit-ignores-this'][0]
+    : req.headers['x-optional-imagekit-ignores-this'];
+  return { privateKey, password };
 };
 
 export const getStainlessApiKey = (req: IncomingMessage, mcpOptions: McpOptions): string | undefined => {

packages/mcp-server/src/local-docs-search.ts

@@ -87,6 +87,7 @@ import {
 import { type Fetch } from './internal/builtin-types';
 import { HeadersLike, NullableHeaders, buildHeaders } from './internal/headers';
 import { FinalRequestOptions, RequestOptions } from './internal/request-options';
+import { toBase64 } from './internal/utils/base64';
 import { readEnv } from './internal/utils/env';
 import {
   type LogLevel,
@@ -299,7 +300,30 @@ export class ImageKit {
   }
 
   protected validateHeaders({ values, nulls }: NullableHeaders) {
-    return;
+    if (this.privateKey && this.password && values.get('authorization')) {
+      return;
+    }
+    if (nulls.has('authorization')) {
+      return;
+    }
+
+    throw new Error(
+      'Could not resolve authentication method. Expected the privateKey or password to be set. Or for the "Authorization" headers to be explicitly omitted',
+    );
+  }
+
+  protected async authHeaders(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
+    if (!this.privateKey) {
+      return undefined;
+    }
+
+    if (!this.password) {
+      return undefined;
+    }
+
+    const credentials = `${this.privateKey}:${this.password}`;
+    const Authorization = `Basic ${toBase64(credentials)}`;
+    return buildHeaders([{ Authorization }]);
   }
 
   /**
@@ -728,6 +752,7 @@ export class ImageKit {
         ...(options.timeout ? { 'X-Stainless-Timeout': String(Math.trunc(options.timeout / 1000)) } : {}),
         ...getPlatformHeaders(),
       },
+      await this.authHeaders(options),
       this._options.defaultHeaders,
       bodyHeaders,
       options.headers,

src/client.ts

@@ -4,6 +4,7 @@ import ImageKit from '@imagekit/nodejs';
 
 const client = new ImageKit({
   privateKey: 'My Private Key',
+  password: 'My Password',
   baseURL: process.env['TEST_API_BASE_URL'] ?? 'http://127.0.0.1:4010',
 });
 

tests/api-resources/accounts/origins.test.ts

@@ -4,6 +4,7 @@ import ImageKit from '@imagekit/nodejs';
 
 const client = new ImageKit({
   privateKey: 'My Private Key',
+  password: 'My Password',
   baseURL: process.env['TEST_API_BASE_URL'] ?? 'http://127.0.0.1:4010',
 });
 

tests/api-resources/accounts/url-endpoints.test.ts

@@ -4,6 +4,7 @@ import ImageKit from '@imagekit/nodejs';
 
 const client = new ImageKit({
   privateKey: 'My Private Key',
+  password: 'My Password',
   baseURL: process.env['TEST_API_BASE_URL'] ?? 'http://127.0.0.1:4010',
 });
 

tests/api-resources/accounts/usage.test.ts

@@ -4,6 +4,7 @@ import ImageKit from '@imagekit/nodejs';
 
 const client = new ImageKit({
   privateKey: 'My Private Key',
+  password: 'My Password',
   baseURL: process.env['TEST_API_BASE_URL'] ?? 'http://127.0.0.1:4010',
 });