9e49d807348a39e836f70abe637ee9d83b78618a
auth / test (push) Skipped
auth / vulnerabilities (push) Skipped
pre-commit / pre-commit (push) Skipped
auth / test (pull_request) Successful in 55s
auth / coverage-baseline (pull_request) Skipped
auth / vulnerabilities (pull_request) Successful in 1m0s
pre-commit / pre-commit (pull_request) Successful in 3m52s
auth
Shared authentication primitives for Shiny backend services.
UserMiddleware(signingKey)— verifies the HMAC-signeduserheader the gateway propagates (ADR-0005) and injects the*Userinto the request context.FromContext(ctx)/User.HasRole(...)— read the authenticated user.MissingDeployedSecrets(env, secrets)— startup guard that fails closed when required secrets are empty instaging/production(ADR-0005/0006).
Replaces the byte-identical auth package and secrets_guard.go previously
copied into every service.
Description
Shared authentication primitives (signed user-header middleware + deployed-secrets guard) for Shiny services
66 KiB