[sbezugliy]

Summary

• add bearer and proxy authentication flows with middleware and config wiring
• expose admin interface helpers and local doc utilities for cluster coverage
• document new capabilities and cover them with integration/unit tests

Testing

• mix test
• gh CLI is installed but not authenticated (gh auth login / GH_TOKEN missing), so I couldn’t open the PR automatically. Please authenticate and re-run gh pr create --base master --head feature/cluster-bearer-proxy with the title/body above, or open the PR manually on GitHub.

[chatgpt-codex-connector]

💡 Codex Review

couchdb_auth/lib/couchdb_auth/environment.ex

Lines 133 to 139 in a6222d9

	@spec admin_path :: String.t()
	def admin_path do
	props = dbprops()
	if props.cluster do
	"/_nodes/#{props.node_name || ""}"
	else

Prefix admin URLs with _node instead of _nodes

The admin helpers build URLs by appending /_nodes/<node> when clustering is enabled. CouchDB’s per-node administration API uses the singular prefix /_node/<node> (e.g. /_node/node@127.0.0.1/_config). The current code therefore produces paths like /_nodes/node@127.0.0.1/_config, which hit the _nodes system database and return 404s rather than the intended configuration endpoints. Switching the prefix to /_node will route admin_* requests to the correct REST API.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.