@owlmeans/server-auth 0.1.7 → 0.1.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -67,3 +67,20 @@ Resource alias for the nonce replay-prevention cache.
|
|
|
67
67
|
|
|
68
68
|
- [`@owlmeans/auth-common`](../auth-common) — `GUARD_ED25519` constant and auth modules
|
|
69
69
|
- [`@owlmeans/server-app`](../server-app) — `makeContext` calls `appendAuthService` by default
|
|
70
|
+
|
|
71
|
+
<!-- owlmeans:agent-guidance:start -->
|
|
72
|
+
## Agent guidance
|
|
73
|
+
|
|
74
|
+
This package ships embedded Claude Code skills and GitHub Copilot instructions under
|
|
75
|
+
`agent-meta/`. After installing your `@owlmeans/*` packages, run the OwlMeans
|
|
76
|
+
agent-skills installer to place them into your project's native locations
|
|
77
|
+
(`.claude/skills/` and `.github/instructions/`):
|
|
78
|
+
|
|
79
|
+
```sh
|
|
80
|
+
npx @owlmeans/agent-skills
|
|
81
|
+
```
|
|
82
|
+
|
|
83
|
+
The embedded files are version-matched to this package release. Do not edit them
|
|
84
|
+
directly — they are regenerated on each publish. To contribute guidance edits,
|
|
85
|
+
open a PR against the source monorepo.
|
|
86
|
+
<!-- owlmeans:agent-guidance:end -->
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
---
|
|
2
|
+
description: "How to use @owlmeans/server-auth — server-side authentication manager, AUTH_API alias, setupAuthServiceModules() to wire auth modules."
|
|
3
|
+
applyTo: "**/*.ts, **/*.tsx"
|
|
4
|
+
---
|
|
5
|
+
<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
|
|
6
|
+
|
|
7
|
+
# @owlmeans/server-auth
|
|
8
|
+
|
|
9
|
+
**Layer:** Server
|
|
10
|
+
**Install:** `"@owlmeans/server-auth": "^0.1.9"` in `dependencies`
|
|
11
|
+
|
|
12
|
+
## Key Exports
|
|
13
|
+
|
|
14
|
+
| Export | Description |
|
|
15
|
+
|--------|-------------|
|
|
16
|
+
| `setupAuthServiceModules(modules, alias)` | Wire auth modules into app modules |
|
|
17
|
+
| `AUTH_API` (re-exported) | Auth service alias |
|
|
18
|
+
| Auth service factory | Backend auth manager |
|
|
19
|
+
| Plugin types | Pluggable auth verifiers |
|
|
20
|
+
|
|
21
|
+
## Subpath Exports
|
|
22
|
+
|
|
23
|
+
- `./manager`, `./manager/plugins`
|
|
24
|
+
|
|
25
|
+
## Usage
|
|
26
|
+
|
|
27
|
+
```typescript
|
|
28
|
+
import { setupAuthServiceModules } from '@owlmeans/server-auth'
|
|
29
|
+
import { AUTH_API } from '@owlmeans/auth-common'
|
|
30
|
+
setupAuthServiceModules(appModules, AUTH_API)
|
|
31
|
+
```
|
|
32
|
+
|
|
33
|
+
## Product-Viable Usage Notes
|
|
34
|
+
|
|
35
|
+
- Backend context registers `appendAuthService(context)` before identity resources and product-specific gate services.
|
|
36
|
+
- `AUTH_CACHE` must be registered as a Redis resource when the backend context does not rely on the default `server-app` setup.
|
|
37
|
+
- `server-auth` verifies bearer tokens and populates `req.auth`; it does not decide product ownership or permissions by itself.
|
|
38
|
+
- Pair this package with `@owlmeans/server-auth-identity` when an external provider such as Google should map into local account/profile/credentials records.
|
|
39
|
+
- Pair it with `@owlmeans/entrypoint` gates for authorization, and keep handler-level `entityId` checks as a second line of defense.
|
|
40
|
+
|
|
41
|
+
## Depends On
|
|
42
|
+
|
|
43
|
+
- `@owlmeans/auth`, `@owlmeans/auth-common`, `@owlmeans/server-entrypoint`, `@owlmeans/server-context`, `@owlmeans/basic-keys`
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"package": "@owlmeans/server-auth",
|
|
4
|
+
"version": "0.1.9",
|
|
5
|
+
"generatedAt": "2026-06-14T13:34:06.129Z",
|
|
6
|
+
"canonicalRepo": "https://github.com/owlmeans/common",
|
|
7
|
+
"entries": [
|
|
8
|
+
{
|
|
9
|
+
"kind": "skill",
|
|
10
|
+
"name": "server-auth",
|
|
11
|
+
"category": "package-specific",
|
|
12
|
+
"file": "skills/server-auth/SKILL.md",
|
|
13
|
+
"canonicalPath": ".claude/skills/server-auth/SKILL.md"
|
|
14
|
+
},
|
|
15
|
+
{
|
|
16
|
+
"kind": "instruction",
|
|
17
|
+
"name": "server-auth",
|
|
18
|
+
"category": "package-specific",
|
|
19
|
+
"file": "instructions/server-auth.instructions.md",
|
|
20
|
+
"canonicalPath": ".github/instructions/server-auth.instructions.md"
|
|
21
|
+
}
|
|
22
|
+
]
|
|
23
|
+
}
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: server-auth
|
|
3
|
+
description: How to use @owlmeans/server-auth — server-side authentication manager, AUTH_API alias, setupAuthServiceModules() to wire auth modules into your app. Auto-invoked when importing auth manager primitives.
|
|
4
|
+
user-invocable: false
|
|
5
|
+
---
|
|
6
|
+
<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
|
|
7
|
+
|
|
8
|
+
# @owlmeans/server-auth
|
|
9
|
+
|
|
10
|
+
**Layer:** Server
|
|
11
|
+
**Install:** `"@owlmeans/server-auth": "^0.1.9"` in `dependencies`
|
|
12
|
+
|
|
13
|
+
## Key Exports
|
|
14
|
+
|
|
15
|
+
| Export | Description |
|
|
16
|
+
|--------|-------------|
|
|
17
|
+
| `setupAuthServiceModules(modules, alias)` | Wire auth modules into your app modules array |
|
|
18
|
+
| `AUTH_API` (re-exported) | Auth service alias |
|
|
19
|
+
| Auth service factory | Backend auth manager |
|
|
20
|
+
| Plugin types | Pluggable auth verifiers |
|
|
21
|
+
|
|
22
|
+
## Subpath Exports
|
|
23
|
+
|
|
24
|
+
- `./manager` — auth manager service implementation
|
|
25
|
+
- `./manager/plugins` — pluggable manager plugins
|
|
26
|
+
|
|
27
|
+
## Usage
|
|
28
|
+
|
|
29
|
+
```typescript
|
|
30
|
+
import { setupAuthServiceModules } from '@owlmeans/server-auth'
|
|
31
|
+
import { AUTH_API } from '@owlmeans/auth-common'
|
|
32
|
+
|
|
33
|
+
setupAuthServiceModules(appModules, AUTH_API)
|
|
34
|
+
```
|
|
35
|
+
|
|
36
|
+
## Product-Viable Usage Notes
|
|
37
|
+
|
|
38
|
+
- Backend context registers `appendAuthService(context)` before identity resources and product-specific gate services.
|
|
39
|
+
- `AUTH_CACHE` must be registered as a Redis resource when the backend context does not rely on the default `server-app` setup.
|
|
40
|
+
- `server-auth` verifies bearer tokens and populates `req.auth`; it does not decide product ownership or permissions by itself.
|
|
41
|
+
- Pair this package with `@owlmeans/server-auth-identity` when an external provider such as Google should map into local account/profile/credentials records.
|
|
42
|
+
- Pair it with `@owlmeans/entrypoint` gates for authorization, and keep handler-level `entityId` checks as a second line of defense.
|
|
43
|
+
|
|
44
|
+
## Depends On
|
|
45
|
+
|
|
46
|
+
- `@owlmeans/auth`, `@owlmeans/auth-common`
|
|
47
|
+
- `@owlmeans/server-entrypoint`, `@owlmeans/server-context`
|
|
48
|
+
- `@owlmeans/basic-keys` — Ed25519 verification
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@owlmeans/server-auth",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.9",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"scripts": {
|
|
@@ -37,29 +37,29 @@
|
|
|
37
37
|
},
|
|
38
38
|
"dependencies": {
|
|
39
39
|
"@noble/hashes": "^1.5.0",
|
|
40
|
-
"@owlmeans/api": "^0.1.
|
|
41
|
-
"@owlmeans/api-config-server": "^0.1.
|
|
42
|
-
"@owlmeans/auth": "^0.1.
|
|
43
|
-
"@owlmeans/auth-common": "^0.1.
|
|
44
|
-
"@owlmeans/basic-envelope": "^0.1.
|
|
45
|
-
"@owlmeans/basic-ids": "^0.1.
|
|
46
|
-
"@owlmeans/basic-keys": "^0.1.
|
|
47
|
-
"@owlmeans/client-config": "^0.1.
|
|
48
|
-
"@owlmeans/client-entrypoint": "^0.1.
|
|
49
|
-
"@owlmeans/config": "^0.1.
|
|
50
|
-
"@owlmeans/context": "^0.1.
|
|
51
|
-
"@owlmeans/kluster": "^0.1.
|
|
52
|
-
"@owlmeans/entrypoint": "^0.1.
|
|
53
|
-
"@owlmeans/redis-resource": "^0.1.
|
|
54
|
-
"@owlmeans/resource": "^0.1.
|
|
55
|
-
"@owlmeans/route": "^0.1.
|
|
56
|
-
"@owlmeans/server-api": "^0.1.
|
|
57
|
-
"@owlmeans/server-context": "^0.1.
|
|
58
|
-
"@owlmeans/server-entrypoint": "^0.1.
|
|
59
|
-
"@owlmeans/server-route": "^0.1.
|
|
60
|
-
"@owlmeans/server-socket": "^0.1.
|
|
61
|
-
"@owlmeans/socket": "^0.1.
|
|
62
|
-
"@owlmeans/static-resource": "^0.1.
|
|
40
|
+
"@owlmeans/api": "^0.1.9",
|
|
41
|
+
"@owlmeans/api-config-server": "^0.1.9",
|
|
42
|
+
"@owlmeans/auth": "^0.1.9",
|
|
43
|
+
"@owlmeans/auth-common": "^0.1.9",
|
|
44
|
+
"@owlmeans/basic-envelope": "^0.1.9",
|
|
45
|
+
"@owlmeans/basic-ids": "^0.1.9",
|
|
46
|
+
"@owlmeans/basic-keys": "^0.1.9",
|
|
47
|
+
"@owlmeans/client-config": "^0.1.9",
|
|
48
|
+
"@owlmeans/client-entrypoint": "^0.1.9",
|
|
49
|
+
"@owlmeans/config": "^0.1.9",
|
|
50
|
+
"@owlmeans/context": "^0.1.9",
|
|
51
|
+
"@owlmeans/kluster": "^0.1.9",
|
|
52
|
+
"@owlmeans/entrypoint": "^0.1.9",
|
|
53
|
+
"@owlmeans/redis-resource": "^0.1.9",
|
|
54
|
+
"@owlmeans/resource": "^0.1.9",
|
|
55
|
+
"@owlmeans/route": "^0.1.9",
|
|
56
|
+
"@owlmeans/server-api": "^0.1.9",
|
|
57
|
+
"@owlmeans/server-context": "^0.1.9",
|
|
58
|
+
"@owlmeans/server-entrypoint": "^0.1.9",
|
|
59
|
+
"@owlmeans/server-route": "^0.1.9",
|
|
60
|
+
"@owlmeans/server-socket": "^0.1.9",
|
|
61
|
+
"@owlmeans/socket": "^0.1.9",
|
|
62
|
+
"@owlmeans/static-resource": "^0.1.9",
|
|
63
63
|
"@scure/base": "^1.1.9"
|
|
64
64
|
},
|
|
65
65
|
"peerDependencies": {
|
|
@@ -67,7 +67,7 @@
|
|
|
67
67
|
},
|
|
68
68
|
"devDependencies": {
|
|
69
69
|
"@owlmeans/dep-config": "workspace:*",
|
|
70
|
-
"@owlmeans/test-auth": "^0.1.
|
|
70
|
+
"@owlmeans/test-auth": "^0.1.9",
|
|
71
71
|
"@types/bun": "^1.3.0",
|
|
72
72
|
"@types/node": "^24.10.1",
|
|
73
73
|
"nodemon": "^3.1.11",
|