From 4f04e3224e3850c6998bdb5baa98f34725074145 Mon Sep 17 00:00:00 2001
From: Steffen Waldmann <steffen.waldmann@sap.com>
Date: Thu, 29 Jan 2026 11:14:11 +0100
Subject: [PATCH 1/2] Hide point 6 in details block for hybrid testing with IAS

---
 node.js/authentication.md | 38 +++++++++++++++++++++-----------------
 1 file changed, 21 insertions(+), 17 deletions(-)

diff --git a/node.js/authentication.md b/node.js/authentication.md
index cb38ba1e1..dfdda6a21 100644
--- a/node.js/authentication.md
+++ b/node.js/authentication.md
@@ -691,6 +691,27 @@ The login fails pointing to the correct OAuth configuration URL that is expected
   
     This command installs `ams` and `ias` plugins, adds the required dependencies to `package.json` and updates `mta.yaml`.
 
+    ::: details This configures the local App Router callback URI for the `identity` service
+
+    In _mta.yaml_, this entry should now be present:
+
+    ```sh
+    - name: bookshop-ias
+        [...]
+        parameters:
+          service: identity
+          [...]
+          config:
+            display-name: bookshop
+            oauth2-configuration:
+              redirect-uris:
+                - http://localhost:5000/login/callback?authType=ias # [!code ++]
+              post-logout-redirect-uris:
+                - ~{app-api/app-protocol}://~{app-api/app-uri}/*/logout.html
+    ```
+
+    :::
+
 3. Generate roles and policies with AMS.
   To compile the cds annotations to dcl files execute:
 
@@ -709,24 +730,7 @@ The login fails pointing to the correct OAuth configuration URL that is expected
 
     ```sh
     npm install --prefix app/router
-   
     ```
-6. Configure the local callback URI of AppRouter in `mta.yaml` for `identity` service
-
-  ```sh
-  - name: bookshop-ias
-      [...]
-      parameters:
-        service: identity
-        [...]
-        config:
-          display-name: bookshop
-          oauth2-configuration:
-            redirect-uris:
-              - http://localhost:5000/login/callback?authType=ias # [!code ++]
-            post-logout-redirect-uris:
-              - ~{app-api/app-protocol}://~{app-api/app-uri}/*/logout.html
-  ```
 
 ### Deploy the Application
   

From 8cad9595579473536dda342547aa4010b1026372 Mon Sep 17 00:00:00 2001
From: Steffen Waldmann <steffen.waldmann@sap.com>
Date: Thu, 29 Jan 2026 11:19:24 +0100
Subject: [PATCH 2/2] Move `::: details` block to App Router section

---
 node.js/authentication.md | 29 +++++++++++++++--------------
 1 file changed, 15 insertions(+), 14 deletions(-)

diff --git a/node.js/authentication.md b/node.js/authentication.md
index dfdda6a21..1d0653709 100644
--- a/node.js/authentication.md
+++ b/node.js/authentication.md
@@ -691,6 +691,21 @@ The login fails pointing to the correct OAuth configuration URL that is expected
   
     This command installs `ams` and `ias` plugins, adds the required dependencies to `package.json` and updates `mta.yaml`.
 
+
+3. Generate roles and policies with AMS.
+  To compile the cds annotations to dcl files execute:
+
+    ```sh
+    cds build --for ams
+    ```
+    For more information see [Prepare CDS Model](../guides/security/cap-users#prepare-cds-model)
+
+4. Add App Router for fetching the IAS token.
+
+    ```sh
+    cds add approuter
+    ```
+
     ::: details This configures the local App Router callback URI for the `identity` service
 
     In _mta.yaml_, this entry should now be present:
@@ -712,20 +727,6 @@ The login fails pointing to the correct OAuth configuration URL that is expected
 
     :::
 
-3. Generate roles and policies with AMS.
-  To compile the cds annotations to dcl files execute:
-
-    ```sh
-    cds build --for ams
-    ```
-    For more information see [Prepare CDS Model](../guides/security/cap-users#prepare-cds-model)
-
-4. Add App Router for fetching the IAS token.
-
-    ```sh
-    cds add approuter
-    ```
-
 5. Install `npm` packages for App Router:
 
     ```sh