37757be1fcbac97c201c4ce45aa5508e74a22587
Unbound Release / Create Tag (push) Skipped
auth / coverage-baseline (push) Successful in 1m2s
Unbound Release / Check Preconditions (push) Successful in 26s
auth / test (push) Skipped
auth / vulnerabilities (push) Skipped
pre-commit / pre-commit (push) Skipped
Release / release (push) Successful in 18m39s
Unbound Release / Create Release (push) Successful in 26s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 49s
Reviewed-on: #14
auth
Shared authentication primitives for Shiny backend services.
UserMiddleware(signingKey)— verifies the HMAC-signeduserheader the gateway propagates (ADR-0005) and injects the*Userinto the request context.FromContext(ctx)/User.HasRole(...)— read the authenticated user.MissingDeployedSecrets(env, secrets)— startup guard that fails closed when required secrets are empty instaging/production(ADR-0005/0006).
Replaces the byte-identical auth package and secrets_guard.go previously
copied into every service.
Description
Shared authentication primitives (signed user-header middleware + deployed-secrets guard) for Shiny services
66 KiB