@samebase/identity-broker 0.9.1 → 0.9.2

package/README.md

@@ -5,6 +5,8 @@ connections once, such as GitHub, Google and email codes, and signs users in to
 broker keeps no user accounts and no sessions: every sign-in goes upstream again, and each app
 creates its own user from the `id_token` it receives.
 
+![Google and GitHub refuse preview deployments because each has a new URL. Identity Broker sits in front of them, so each provider sees one client and one URL, and every app and preview registers its exact URL at deploy.](https://raw.githubusercontent.com/samebase/samebase/main/packages/identity-broker/docs/how-it-works.gif)
+
 Why: every new app otherwise needs its own OAuth app registrations and its own email sender, and a
 preview deployment with a fresh callback URL cannot have them at all. With the broker, an app
 registers each deployment as a client at deploy time and never touches GitHub or Google.
@@ -26,6 +28,10 @@ registers each deployment as a client at deploy time and never touches GitHub or
 
 ## Mount it
 
+```sh
+npm install @samebase/identity-broker
+```
+
 ```ts
 // convex/convex.config.ts
 import { defineApp } from "convex/server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@samebase/identity-broker",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "An OpenID Provider for Convex that holds a team's upstream sign-in connections once and keeps no user accounts.",
   "license": "Apache-2.0",
   "repository": {