4f9539c526ad788fa61d8ae426b44fc5f3482a6e
auth / test (push) Skipped
auth / vulnerabilities (push) Skipped
pre-commit / pre-commit (push) Skipped
auth / test (pull_request) Successful in 56s
auth / coverage-baseline (pull_request) Skipped
auth / vulnerabilities (pull_request) Successful in 44s
pre-commit / pre-commit (pull_request) Successful in 3m54s
auth
Shared authentication primitives for Shiny backend services.
UserMiddleware(signingKey)— verifies the HMAC-signeduserheader the gateway propagates (ADR-0005) and injects the*Userinto the request context.FromContext(ctx)/User.HasRole(...)— read the authenticated user.MissingDeployedSecrets(env, secrets)— startup guard that fails closed when required secrets are empty instaging/production(ADR-0005/0006).
Replaces the byte-identical auth package and secrets_guard.go previously
copied into every service.
Description
Shared authentication primitives (signed user-header middleware + deployed-secrets guard) for Shiny services
66 KiB