argoyle 37757be1fc
Unbound Release / Create Tag (push) Skipped
auth / coverage-baseline (push) Successful in 1m2s
Unbound Release / Check Preconditions (push) Successful in 26s
auth / test (push) Skipped
auth / vulnerabilities (push) Skipped
pre-commit / pre-commit (push) Skipped
Release / release (push) Successful in 18m39s
Unbound Release / Create Release (push) Successful in 26s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 49s
Merge pull request 'chore(deps): update actions/setup-python action to v7' (#14) from renovate/actions-setup-python-7.x into main
Reviewed-on: #14
2026-07-25 11:38:30 +00:00
2026-06-15 11:43:11 +02:00
2026-06-15 11:43:11 +02:00
2026-06-15 10:01:11 +00:00
2026-06-15 11:43:11 +02:00

auth

Shared authentication primitives for Shiny backend services.

  • UserMiddleware(signingKey) — verifies the HMAC-signed user header the gateway propagates (ADR-0005) and injects the *User into the request context.
  • FromContext(ctx) / User.HasRole(...) — read the authenticated user.
  • MissingDeployedSecrets(env, secrets) — startup guard that fails closed when required secrets are empty in staging/production (ADR-0005/0006).

Replaces the byte-identical auth package and secrets_guard.go previously copied into every service.

S
Description
Shared authentication primitives (signed user-header middleware + deployed-secrets guard) for Shiny services
Readme
66 KiB
v0.1.1
Latest
2026-08-29 11:37:44 +00:00
Languages
Go 100%