475b0ffc714e0c38ca0742725cca507eea4aa986
auth / test (push) Skipped
auth / vulnerabilities (push) Skipped
pre-commit / pre-commit (push) Skipped
auth / coverage-baseline (pull_request) Skipped
auth / test (pull_request) Successful in 43s
auth / vulnerabilities (pull_request) Successful in 35s
pre-commit / pre-commit (pull_request) Successful in 3m9s
The module is now git.unbound.se/shiny/auth. The API is unchanged. Tags up to v0.1.1 declare gitea.unbound.se/shiny/auth and stay resolvable through that alias. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Kko4x3MYEcWMMdkx12WpBa
auth
Shared authentication primitives for Shiny backend services.
UserMiddleware(signingKey)— verifies the HMAC-signeduserheader the gateway propagates (ADR-0005) and injects the*Userinto the request context.FromContext(ctx)/User.HasRole(...)— read the authenticated user.MissingDeployedSecrets(env, secrets)— startup guard that fails closed when required secrets are empty instaging/production(ADR-0005/0006).
Replaces the byte-identical auth package and secrets_guard.go previously
copied into every service.
Description
Shared authentication primitives (signed user-header middleware + deployed-secrets guard) for Shiny services
82 KiB
0 Stars
6 Watchers
0 Forks