argoyleandClaude Opus 5.5 475b0ffc71
auth / test (push) Skipped
auth / vulnerabilities (push) Skipped
pre-commit / pre-commit (push) Skipped
auth / coverage-baseline (pull_request) Skipped
auth / test (pull_request) Successful in 43s
auth / vulnerabilities (pull_request) Successful in 35s
pre-commit / pre-commit (pull_request) Successful in 3m9s
feat: move module path to git.unbound.se
The module is now git.unbound.se/shiny/auth. The API is unchanged. Tags up to v0.1.1 declare gitea.unbound.se/shiny/auth and stay resolvable through that alias.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Kko4x3MYEcWMMdkx12WpBa
2026-10-17 19:54:52 +02:00
2026-08-21 08:07:15 +00:00
2026-06-15 11:43:11 +02:00
2026-06-15 11:43:11 +02:00
2026-06-15 10:01:11 +00:00
2026-06-15 11:43:11 +02:00

auth

Shared authentication primitives for Shiny backend services.

  • UserMiddleware(signingKey) — verifies the HMAC-signed user header the gateway propagates (ADR-0005) and injects the *User into the request context.
  • FromContext(ctx) / User.HasRole(...) — read the authenticated user.
  • MissingDeployedSecrets(env, secrets) — startup guard that fails closed when required secrets are empty in staging/production (ADR-0005/0006).

Replaces the byte-identical auth package and secrets_guard.go previously copied into every service.

S
Description
Shared authentication primitives (signed user-header middleware + deployed-secrets guard) for Shiny services
Readme
82 KiB
0 Stars 6 Watchers 0 Forks
v0.2.0
Latest
2026-10-17 18:52:48 +00:00
Languages
Go 100%